Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/9e676a6cf250a647e33acf89f166b8a133c5c7ab.roa
File:                     9e676a6cf250a647e33acf89f166b8a133c5c7ab.roa (raw, json)
Hash identifier:          aeb9tKAlgghgExTjrk/RkmxhLGufLRKznh1ROnXETmk=
Subject key identifier:   68:2D:6E:55:80:95:12:99:BC:40:B6:2E:3A:47:D6:84:71:CE:56:B7
Certificate issuer:       /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial:       165FEE
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/9e676a6cf250a647e33acf89f166b8a133c5c7ab.roa
Signing time:             Wed 14 Feb 2024 15:04:40 +0000
ROA not before:           Wed 14 Feb 2024 15:04:40 +0000
ROA not after:            Sat 14 Feb 2026 15:04:40 +0000
asID:                     273130
IP address blocks:        168.228.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466350 (0x165fee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
        Validity
            Not Before: Feb 14 15:04:40 2024 GMT
            Not After : Feb 14 15:04:40 2026 GMT
        Subject: CN=9e676a6cf250a647e33acf89f166b8a133c5c7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:48:14:14:38:6b:41:5f:f3:db:e5:21:42:
                    2f:f5:1f:8f:71:8e:81:dc:39:94:7f:c4:73:92:64:
                    ea:20:57:d0:5d:77:a6:4e:d0:56:83:b4:28:9a:db:
                    9b:1b:7b:d9:0c:9b:75:85:cd:e0:7a:80:bf:b8:4f:
                    22:55:42:e7:aa:df:a1:9a:7d:69:ca:f1:28:0d:b5:
                    e3:33:43:ab:b7:3f:bf:8b:c7:c0:b5:f4:98:5c:11:
                    69:33:82:8a:dd:ef:07:8d:b1:62:ff:97:75:f1:7e:
                    35:49:5f:ba:c7:16:98:b2:6a:ed:03:ae:11:9f:8b:
                    a1:8e:4e:fe:0a:63:ec:4b:79:3a:7e:35:cd:39:c1:
                    39:76:2a:31:8f:bf:d7:49:7a:d7:ed:5e:6d:a7:65:
                    94:37:c9:98:40:a1:c6:74:6b:c8:07:1e:5f:ba:e1:
                    5e:d9:a6:bf:5d:08:10:f6:37:a9:35:75:19:99:e7:
                    11:a1:b1:80:ec:7c:3f:23:2c:2c:f8:98:e6:d3:92:
                    0f:e5:c8:59:64:84:cd:dd:dd:20:2c:d1:0f:26:2c:
                    07:51:84:4f:1d:6b:b5:3e:a2:89:e2:66:db:54:26:
                    d5:8c:c0:1f:5a:ad:50:07:6f:60:c4:31:5c:04:9f:
                    cf:18:4a:07:c7:34:e3:28:60:2e:d8:ff:fe:ff:51:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2D:6E:55:80:95:12:99:BC:40:B6:2E:3A:47:D6:84:71:CE:56:B7
            X509v3 Authority Key Identifier:
                keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/9e676a6cf250a647e33acf89f166b8a133c5c7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:0a:e8:d2:82:64:5c:7b:ca:10:eb:55:93:6f:02:7c:e9:
         4f:1a:5e:a4:62:e4:5d:ea:46:a2:cd:71:35:39:e2:d9:20:83:
         12:ce:c0:ef:74:b7:92:33:6f:e1:c6:48:68:7c:12:2d:4e:42:
         6d:14:b6:35:e8:9a:37:43:32:08:a3:14:a6:7d:e0:20:45:77:
         fd:fe:c1:f7:91:c7:2f:e8:b3:13:d6:ad:d7:86:9c:4f:a2:c5:
         ee:30:3a:db:72:10:2c:18:d6:91:3e:35:d9:5e:a1:51:a2:a7:
         b6:8a:59:36:49:de:d9:45:55:0f:9d:10:ee:59:e9:87:82:30:
         c0:4c:08:bf:25:2c:ff:6b:a8:28:92:fd:fa:2b:78:bc:87:d4:
         01:82:39:94:b8:9c:0a:63:57:11:02:28:6b:74:a4:2f:41:96:
         a3:d1:5f:1b:57:8b:80:c1:d1:19:40:ca:9f:61:5b:c6:5f:37:
         11:e2:ce:5b:56:5e:f4:4f:0d:40:0b:b4:f8:d9:63:eb:40:a9:
         f6:fa:c9:15:5e:db:d2:85:10:69:07:98:24:3d:6b:9f:2e:16:
         94:d0:12:71:ee:4c:ad:ff:61:9d:7b:11:92:98:8c:c0:a4:89:
         b8:ce:3d:2c:15:4b:70:d1:27:6b:57:25:c1:d3:c7:c0:ba:74:
         b4:d7:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org