Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa
File:                     d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa (raw, json)
Hash identifier:          BFbmfoip65+L5mATGjqs4CAPz8IgiwlT85Jqra9xWv0=
Subject key identifier:   EB:5B:E9:7E:39:A8:EB:9C:E1:E9:15:BA:46:DD:3E:41:6E:62:F3:22
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       11ED47
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa
Signing time:             Mon 24 Apr 2023 13:55:34 +0000
ROA not before:           Sun 23 Apr 2023 13:55:33 +0000
ROA not after:            Thu 24 Apr 2025 13:55:33 +0000
asID:                     265868
IP address blocks:        131.196.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174855 (0x11ed47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Apr 23 13:55:33 2023 GMT
            Not After : Apr 24 13:55:33 2025 GMT
        Subject: CN=d33cc0a26db2a69650d8acb8239e8ad46d897b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:04:31:af:7a:4d:0a:00:5b:4f:47:10:c7:
                    10:4b:b3:24:5f:7f:f7:cf:19:2a:f5:17:76:1f:58:
                    46:3e:4c:bd:a7:13:a2:11:d3:2f:cf:d9:57:fe:2d:
                    a2:82:e8:88:8c:9a:e7:bb:71:06:4a:61:ec:31:97:
                    c1:c1:93:c2:b3:18:65:28:9d:93:82:bb:bf:b3:70:
                    cd:49:3c:84:23:cb:fa:14:a7:69:83:9d:a2:14:0b:
                    a7:db:b6:42:97:f7:3a:51:17:5d:00:98:33:cc:f2:
                    2f:0b:d2:42:7a:58:ae:e5:fd:ca:4e:14:9e:70:9c:
                    ad:19:0d:7f:d5:1e:86:7e:ed:06:56:70:d6:33:40:
                    c5:30:68:2d:bd:ab:c2:ff:0c:80:76:c2:ac:fd:64:
                    e2:b3:5f:ad:06:89:ae:7a:e2:1e:2e:f9:86:fe:f6:
                    fd:1a:6c:67:3e:ad:ad:21:a1:e1:1d:cf:46:2d:54:
                    b0:da:27:fd:5d:90:61:09:3d:87:6d:d5:d0:ae:ae:
                    d4:29:01:cb:86:50:a9:6e:c7:96:ca:ec:fb:95:c2:
                    ed:08:30:b5:6f:b9:ab:d0:87:55:e9:1e:bf:06:c8:
                    33:2c:59:dc:db:dd:45:93:b2:85:16:a4:43:8c:8b:
                    9b:ef:db:4e:2b:6b:18:14:92:58:f7:8e:b1:81:61:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5B:E9:7E:39:A8:EB:9C:E1:E9:15:BA:46:DD:3E:41:6E:62:F3:22
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:b7:20:d5:78:5f:62:17:51:b3:e9:dd:2d:0a:a8:50:90:
         f7:a5:56:e6:0c:41:9c:1c:e3:e1:67:58:a7:4f:14:45:93:8f:
         77:a7:17:bc:81:18:73:2b:df:bf:20:d8:ba:b9:bd:4d:59:e5:
         b2:a8:ea:47:0d:19:02:0e:59:37:46:5d:8b:a1:1d:3f:44:b0:
         5a:47:05:e4:e9:71:41:61:9b:a0:80:bd:0d:39:18:21:ce:cf:
         57:dd:52:fd:ca:50:4a:84:54:dc:bc:db:32:4c:f1:50:c2:63:
         af:74:6d:42:1c:40:a3:58:23:b3:c8:b6:bf:17:bf:80:ef:e2:
         f9:84:3b:86:5e:5d:6f:2c:b1:c3:85:05:d4:0f:e3:8d:5a:32:
         f6:8e:67:df:33:17:59:85:9b:71:a1:a8:8c:e3:c6:a2:7d:f0:
         6b:66:ec:75:b1:07:e3:20:b5:e4:de:27:6f:a7:96:d6:1e:34:
         50:cb:74:11:bc:e8:a8:24:61:0a:db:30:42:4d:26:d7:dd:39:
         2c:d1:ad:7d:2b:33:74:cb:bf:34:3d:2f:f7:8d:55:7f:f3:50:
         63:29:3d:72:8c:dd:3e:62:ce:b4:15:ea:33:74:73:52:e4:c6:
         87:51:4f:fa:2c:19:6a:15:ba:52:06:d2:5b:91:ef:9f:bd:42:
         00:46:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org