Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/8c0715eeae3b2b5a75de3550af70e8875f29a7a6.roa
File:                     8c0715eeae3b2b5a75de3550af70e8875f29a7a6.roa (raw, json)
Hash identifier:          uY6AjcZE3I4LQVDd5ytxcmxyqEa/rdX4C4bPt/8icDc=
Subject key identifier:   F4:D1:85:F8:B9:F5:17:94:DD:68:9C:3A:8C:C9:00:EA:BD:DD:E9:DE
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       0840A1
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/8c0715eeae3b2b5a75de3550af70e8875f29a7a6.roa
Signing time:             Fri 01 Apr 2022 14:02:21 +0000
ROA not before:           Fri 01 Apr 2022 03:00:00 +0000
ROA not after:            Mon 01 Apr 2024 03:00:00 +0000
asID:                     265772
IP address blocks:        131.196.80.0/24 maxlen: 24
                          131.196.83.0/24 maxlen: 24
                          2803:37c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540833 (0x840a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Apr  1 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2024 GMT
        Subject: CN=8c0715eeae3b2b5a75de3550af70e8875f29a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:c7:72:d0:bb:2d:93:cf:b3:b0:1e:67:bc:
                    0d:b2:fc:2d:a3:2f:dc:06:e1:57:e1:f5:ca:04:eb:
                    d7:08:a5:d2:04:16:ac:5a:42:d8:32:5e:67:3c:a4:
                    f5:87:ac:18:ed:3e:9a:f7:a7:7d:f3:02:c8:e8:0c:
                    2b:f4:aa:33:51:72:f8:f1:7f:0e:98:1b:c0:b2:69:
                    83:a1:ae:80:54:dd:94:6e:98:b6:61:23:c1:9d:96:
                    4f:2c:b2:c2:d3:56:17:04:11:e1:86:ee:10:83:04:
                    6b:a1:73:9b:0b:b0:f8:ea:98:a1:0d:fa:da:48:f3:
                    42:34:e2:5a:92:ad:14:c0:6d:67:fd:32:79:91:03:
                    24:2e:2d:25:9b:ae:8a:22:01:42:32:33:09:f3:ef:
                    34:92:ef:ee:f7:ce:b1:25:77:c0:61:71:2e:38:d4:
                    cc:40:7e:6f:95:9d:7f:0d:a8:fe:fb:18:d5:ba:e7:
                    32:30:2e:ab:0b:3f:3b:21:02:64:16:a4:c2:f5:fe:
                    3d:44:f5:21:d9:10:a3:19:84:d0:5f:87:e1:d6:9d:
                    62:85:c6:39:8d:98:44:00:d3:f6:58:67:aa:4f:e5:
                    6a:46:6e:7d:ba:1d:03:5f:91:04:c7:61:d6:33:c9:
                    c8:71:43:9e:67:28:e1:eb:dd:04:a7:51:4a:60:db:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:85:F8:B9:F5:17:94:DD:68:9C:3A:8C:C9:00:EA:BD:DD:E9:DE
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/8c0715eeae3b2b5a75de3550af70e8875f29a7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/24
                  131.196.83.0/24
                IPv6:
                  2803:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:68:2d:06:46:cb:fc:39:fd:69:09:c4:60:2e:8f:e6:ea:
         c4:2d:98:01:38:92:b2:01:9b:58:7d:07:c7:b3:cf:d5:73:5f:
         48:a5:3b:f8:c4:11:30:77:6d:68:d0:0e:fe:02:d0:28:57:d8:
         25:34:1a:21:f2:40:80:19:21:b9:35:31:f7:19:44:26:e5:9b:
         df:54:e2:e0:cc:22:f8:f2:a3:27:dd:41:77:b5:d1:d3:57:eb:
         41:8f:0f:70:24:aa:a9:75:ce:a9:74:63:e8:b5:30:0f:ca:80:
         94:33:d5:29:b1:7f:90:db:95:83:9e:27:69:f0:14:3c:5b:2b:
         7e:56:7f:d2:cb:90:5f:9f:50:95:29:e9:d6:bd:d9:e3:41:bf:
         0d:85:6e:1f:2e:7e:62:97:98:a4:2d:27:28:b5:4b:cd:86:70:
         1b:c7:4d:45:83:38:cf:6a:30:90:03:ed:8e:2d:57:f7:be:72:
         98:9c:3f:bd:6e:e4:f6:97:7a:a2:fe:01:00:20:df:e8:26:56:
         f1:bd:9a:75:14:82:43:54:b8:b3:12:f2:c7:69:b2:d5:a8:5e:
         c0:f8:a2:8e:de:ec:80:68:6c:8d:01:88:65:56:52:fb:a8:54:
         3c:f4:a4:cd:4a:cc:8d:52:6a:b2:f2:0d:b9:a6:e1:0b:a8:4f:
         5b:d2:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org