Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c9d9de7fcd545e56736d2de0107960506393991e.roa
File:                     c9d9de7fcd545e56736d2de0107960506393991e.roa (raw, json)
Hash identifier:          oytmE5wChwpvPb4HCE4OcdvFUWocNwKa45ctcW1Cs+Q=
Subject key identifier:   4A:11:DD:F2:F8:26:C9:67:8F:C3:14:1B:58:0F:01:7D:14:FC:46:92
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0D9B54
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c9d9de7fcd545e56736d2de0107960506393991e.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        143.202.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891732 (0xd9b54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=c9d9de7fcd545e56736d2de0107960506393991e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:14:bd:a9:ae:f9:10:7a:e5:84:e1:08:b0:
                    9d:43:af:95:4a:07:37:f8:27:a2:ff:ea:a8:e9:2d:
                    89:b8:70:57:96:1f:6f:0b:05:48:ca:08:9b:f8:70:
                    da:d7:80:ae:67:eb:c5:4b:0a:4f:4a:9f:73:f9:d4:
                    38:08:90:0c:d8:b0:c9:01:12:ae:fc:4f:74:dc:4c:
                    6d:ee:1c:4d:3d:99:a1:f4:3e:58:2d:6d:fe:08:45:
                    88:0e:3d:65:15:6e:8b:1d:6d:09:06:16:4e:5c:86:
                    b6:da:8f:ca:df:57:1e:8c:0e:48:d8:a9:37:f7:b3:
                    09:05:1b:0f:72:7f:77:3a:45:ed:4b:b7:82:10:49:
                    42:ee:60:a6:92:a7:dd:80:09:83:4c:93:8c:33:d0:
                    7c:ff:70:e5:2d:e2:d1:5a:10:e3:48:ab:88:7d:07:
                    8f:5b:ad:89:a4:9c:77:75:5e:6f:f3:1b:3c:bb:de:
                    ae:ae:10:c9:b1:ee:f1:94:c5:c2:f9:d4:b6:84:89:
                    16:74:c8:f1:a2:94:fa:98:b7:00:78:a9:f6:73:a8:
                    d9:ca:ae:03:5d:1f:81:69:ce:65:e5:b6:18:10:14:
                    45:0e:a9:99:64:87:ac:f6:26:24:75:d6:8f:6c:d1:
                    80:51:3d:1e:fe:f1:09:c3:89:3e:5a:00:b7:84:e6:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:11:DD:F2:F8:26:C9:67:8F:C3:14:1B:58:0F:01:7D:14:FC:46:92
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/c9d9de7fcd545e56736d2de0107960506393991e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:de:d9:8b:ed:ee:f4:3b:64:f1:2a:b9:ce:ff:be:e8:5a:41:
         2a:67:2b:d3:57:c1:ea:9b:fc:fb:6c:cf:0a:05:cd:be:3c:ce:
         f9:8e:26:d3:46:cb:95:26:d8:eb:d0:5e:a9:c8:18:fc:e1:67:
         d0:8b:43:68:8b:55:7d:10:79:2b:d9:05:5d:db:3e:37:b0:4d:
         55:ee:cf:18:ac:f4:12:8e:be:51:39:f4:ad:f1:98:25:ed:b3:
         08:3b:aa:d1:4f:9e:f6:57:40:46:05:dc:d7:02:05:f3:5d:ef:
         cd:f7:9c:b9:e3:70:e3:da:95:b4:26:82:0c:95:17:22:65:fd:
         a6:97:31:62:c9:b6:ac:0b:ba:7d:d1:8c:bb:43:73:f2:45:4a:
         74:b7:70:7d:9c:99:18:cf:7d:18:6a:17:0a:4c:f0:00:93:b1:
         81:30:d6:13:9d:d9:cc:34:df:63:ac:52:73:89:3a:cf:f3:30:
         99:1b:bf:07:21:88:c8:40:2a:c1:6b:51:ee:92:d7:7e:9a:39:
         ac:bb:09:1f:f6:7d:3c:b8:73:d8:80:f7:58:ae:1a:70:e8:e6:
         24:f3:02:83:8d:48:65:a4:29:cc:49:38:f7:ec:0e:18:3d:f4:
         c9:88:f5:3d:1c:08:73:c5:c9:73:52:0c:ab:8d:37:c7:10:07:
         a6:43:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org