Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa
File:                     0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa (raw, json)
Hash identifier:          mcS+aihAT2KuWHt438Gx79fLLjq7tQbDFDEMo80pxMw=
Subject key identifier:   20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       22B281
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa
Signing time:             Wed 05 Jul 2023 01:48:55 +0000
ROA not before:           Tue 04 Jul 2023 01:48:54 +0000
ROA not after:            Sat 05 Jul 2025 01:48:54 +0000
asID:                     52468
IP address blocks:        128.201.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273921 (0x22b281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Jul  4 01:48:54 2023 GMT
            Not After : Jul  5 01:48:54 2025 GMT
        Subject: CN=0083c35bc1b31d1d14f62a037383e4b1a88ca9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:46:76:53:3f:8e:c6:60:bd:07:7c:0d:0e:
                    3f:db:9b:b6:99:5f:1e:04:fe:66:35:ef:18:c1:b7:
                    bf:02:02:11:b5:85:ee:c1:22:5b:e6:57:98:37:fe:
                    65:e1:51:38:c7:5f:c0:df:eb:55:45:0d:87:13:e6:
                    47:a4:ad:e0:28:61:a8:2a:d0:4a:81:08:f8:aa:ec:
                    4b:53:b6:1c:93:37:80:53:32:8e:8b:39:3e:15:1c:
                    dc:26:b6:64:85:e5:37:3c:06:e7:b2:19:8a:17:93:
                    ae:54:b1:08:f8:71:3c:0f:04:71:f9:20:bf:98:e4:
                    0f:89:94:60:9d:dd:50:8e:7c:37:27:c6:9d:5b:b7:
                    3c:55:19:3e:e6:9c:6a:9a:95:ad:06:d5:6a:ec:9f:
                    6e:a8:09:57:22:f7:99:34:f7:0e:d3:46:c9:d4:45:
                    91:cd:3e:24:42:8e:4d:1e:fb:23:20:47:f3:04:45:
                    2b:03:5e:cf:6a:5b:df:e3:7d:7b:56:bf:f4:11:c3:
                    c8:30:55:5d:68:99:a1:fe:51:88:28:e8:e5:21:e3:
                    3e:42:3a:2f:30:5c:11:b3:20:5e:35:59:2c:31:f9:
                    9b:1a:20:23:f5:d4:df:d6:32:77:fe:44:55:90:d3:
                    3a:b4:d8:bf:25:5e:1f:dc:b2:85:4a:46:af:04:67:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:27:26:af:36:32:b9:a5:91:91:67:ec:fb:32:c1:ca:79:
         c4:41:46:70:5f:27:bc:b6:53:a2:15:1c:2a:f7:02:74:c1:0f:
         56:d0:3c:69:0e:77:5c:ba:05:d3:92:fc:0d:f4:79:23:b9:22:
         cd:15:8c:5a:2c:d4:d5:3e:3c:09:8a:f1:19:a7:e5:37:af:6c:
         b3:fc:47:32:bd:d8:fd:fe:3c:5d:aa:30:54:cd:4d:73:6f:9e:
         9d:54:0d:1f:4c:a0:af:8e:c7:39:3b:df:1f:0f:9c:da:c0:2e:
         39:aa:f7:92:46:cb:81:e4:49:1d:ed:44:cc:ce:43:c5:83:d4:
         1b:f5:23:67:8d:ce:49:3b:11:a2:87:55:c6:58:8f:6a:df:fb:
         a5:2a:d3:5f:ea:63:b8:9e:22:88:b2:ba:ed:64:e5:ab:20:69:
         ae:a7:cc:dc:2d:2f:39:93:fe:cc:96:dd:f8:93:38:d4:3d:02:
         14:e3:2f:f9:71:ec:13:b7:9e:b8:d3:2c:5d:82:f0:17:54:53:
         f3:8d:c9:89:ff:50:2f:30:5e:a5:5e:81:2c:7e:80:2b:45:e6:
         97:4f:cb:b9:e7:67:65:d3:65:92:f4:59:d2:69:48:d1:07:e0:
         a4:d5:8e:5e:a1:95:64:c5:62:96:1a:f6:58:bd:e6:8c:0e:3c:
         1c:67:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org