Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/992c976d36cec633603417af804a9d5d5d72dd34.roa
File:                     992c976d36cec633603417af804a9d5d5d72dd34.roa (raw, json)
Hash identifier:          Fl2Q31Mj5CsKxY3SN+A/PAFmLkYd+zw6dHh96POjmX8=
Subject key identifier:   3B:0C:A2:7A:70:6C:60:B3:25:BA:EE:9D:3C:A9:BF:7A:61:AB:D6:7F
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       20FB61
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/992c976d36cec633603417af804a9d5d5d72dd34.roa
Signing time:             Thu 25 May 2023 20:31:46 +0000
ROA not before:           Wed 24 May 2023 20:31:45 +0000
ROA not after:            Sun 25 May 2025 20:31:45 +0000
asID:                     272056
IP address blocks:        192.141.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161505 (0x20fb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: May 24 20:31:45 2023 GMT
            Not After : May 25 20:31:45 2025 GMT
        Subject: CN=992c976d36cec633603417af804a9d5d5d72dd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:fa:8e:5e:d4:56:f9:41:09:ea:00:8e:4b:
                    76:89:18:3b:fb:a4:3b:d8:48:4a:eb:f7:1d:f6:81:
                    fd:3a:59:7c:cd:8d:de:2f:27:18:59:b6:81:d6:24:
                    b0:e7:c8:64:57:8f:6f:40:84:4a:3b:b4:89:13:2e:
                    12:b9:85:3c:8a:d2:ab:d8:90:ef:b9:f1:bb:90:e7:
                    78:02:23:8d:a9:07:27:01:5c:d3:dd:5d:1f:b4:72:
                    2f:3d:3f:61:6d:03:61:07:3a:b4:76:4d:bd:5d:1e:
                    76:06:a0:be:72:73:e8:5d:24:1d:c5:1d:9c:56:3a:
                    93:ef:c9:3e:a0:03:aa:ea:7b:cb:b0:56:81:7e:ec:
                    c5:c8:a0:e8:09:0d:bd:20:bb:72:36:06:ad:e9:0b:
                    7e:d6:86:d2:f2:17:da:bb:43:71:31:2a:29:2f:9e:
                    03:e7:6b:c4:71:17:15:e7:16:e1:8d:60:7b:7d:52:
                    15:18:24:65:e9:bc:10:3c:cc:d9:40:28:7c:94:9c:
                    52:45:7c:22:9d:ec:13:fc:24:09:3d:0d:75:bb:3e:
                    66:c3:0c:b9:72:b8:23:18:d2:48:df:6d:6f:a8:6e:
                    c3:26:14:0e:1e:ac:ee:0d:48:a0:8e:78:d4:cd:10:
                    a0:0e:39:b4:94:c5:f8:63:9f:7e:00:10:63:ab:d4:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:A2:7A:70:6C:60:B3:25:BA:EE:9D:3C:A9:BF:7A:61:AB:D6:7F
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/992c976d36cec633603417af804a9d5d5d72dd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:7d:91:53:82:cd:30:c5:1b:e1:39:36:cd:d3:e3:9f:d3:
         fe:67:83:4d:f9:08:f8:14:d6:1c:04:52:1b:9a:bc:ff:8f:a8:
         5b:88:4e:ea:36:50:ca:47:c6:68:78:86:21:60:3e:3f:3b:b3:
         96:1d:b6:1e:30:e5:60:e2:90:5c:61:f1:5a:e6:18:4e:d4:31:
         8f:32:e8:65:cc:a0:1b:48:86:91:10:f4:b8:86:4e:e7:8c:b7:
         f5:eb:f0:55:47:0b:0f:59:9f:e4:fe:97:3c:a3:9a:f9:1b:0e:
         b2:77:86:be:a6:f2:82:bf:52:5c:64:1c:37:cc:44:e1:e4:3e:
         6e:ec:38:79:ed:47:4e:b9:36:12:54:59:35:6c:d1:2c:fc:57:
         85:e2:71:0f:99:5f:a3:46:06:2d:32:d6:ac:a5:d8:fb:f1:28:
         1e:43:50:1a:b1:6b:cc:e6:44:74:56:4e:27:10:99:b8:93:3a:
         58:85:80:ea:e9:82:89:ce:2d:53:8e:15:7b:e0:a2:51:72:99:
         be:fa:91:f8:43:85:25:af:02:9d:d6:9b:29:77:24:a6:e7:78:
         f1:3a:a1:fd:f0:fc:e1:b1:9a:36:27:63:01:6a:77:c1:b2:b5:
         99:c5:e4:ba:cf:b6:44:ba:2a:77:b8:b9:7a:52:7b:6e:bd:13:
         2e:3d:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org