Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa
File:                     d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa (raw, json)
Hash identifier:          uv+ynoF9aH1ZslCdANIuUS1TTzaRR/LXDIQuJ2h7N1Q=
Subject key identifier:   FE:A8:3B:25:7A:9F:64:FD:04:38:B1:79:A8:60:EA:B9:65:20:BF:F8
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       108E73
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa
Signing time:             Wed 01 Mar 2023 15:03:04 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Mon 01 Apr 2024 03:00:00 +0000
asID:                     265817
IP address blocks:        131.196.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085043 (0x108e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2024 GMT
        Subject: CN=d8c7906517f6d65816ca6e27061c6c8e68290bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:42:08:88:4e:d7:f2:60:d0:df:04:c9:0f:
                    f1:ce:15:37:bb:b0:61:9a:ed:e7:7f:50:f6:11:23:
                    56:2f:8e:9a:d4:a8:51:39:d2:4f:96:e6:90:38:dd:
                    e3:50:74:9f:68:59:ec:91:b9:98:8a:b9:68:75:e5:
                    9d:6c:e9:15:03:5b:74:17:00:c0:16:4f:51:c9:4e:
                    ba:30:e2:0b:e1:8c:ea:74:3c:1d:d7:dd:ea:b5:29:
                    90:4c:fd:b0:41:92:0c:0d:77:bd:1e:90:d7:60:40:
                    19:83:fd:e1:67:ad:1d:37:c4:85:18:dd:02:bb:d5:
                    84:cc:7d:d1:a6:b2:d5:40:12:a7:5b:e9:9a:cc:f9:
                    e3:8e:ec:a8:18:02:9c:e3:28:8d:9d:a7:23:aa:08:
                    14:20:2b:91:cd:09:fc:a3:be:88:1f:fb:86:51:74:
                    a9:0a:e7:4c:fc:b4:66:b9:df:a7:af:20:b2:61:df:
                    2b:09:65:53:99:3e:c0:a0:4f:8a:45:27:ec:7a:9c:
                    32:3b:cd:73:4d:e4:eb:f8:d5:de:13:26:7c:27:64:
                    9c:f6:be:1c:8c:8e:af:51:18:5e:b2:15:8c:07:39:
                    88:ca:22:58:aa:da:6a:b2:fc:0e:3c:45:a1:3a:90:
                    cd:07:ad:cb:75:8f:64:94:ad:07:e2:ad:e2:00:03:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:3B:25:7A:9F:64:FD:04:38:B1:79:A8:60:EA:B9:65:20:BF:F8
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:20:14:b9:72:88:d5:b5:e7:10:ba:e7:58:3c:e4:7c:f9:59:
         29:59:4c:70:85:97:e5:12:fe:f4:88:4a:7f:41:29:c4:3b:ab:
         48:47:3b:d3:0e:11:59:96:4b:35:05:4b:69:8e:41:b2:30:21:
         62:25:38:a8:5d:74:3a:90:96:9e:fb:6b:28:60:bf:e6:e4:31:
         d4:21:da:55:c5:fd:e5:62:e8:b7:b1:c3:89:e8:74:ce:b6:31:
         3e:0a:c7:ba:f5:53:2d:5e:1f:aa:14:82:22:27:4c:68:a6:4f:
         00:1d:81:60:87:b6:e3:45:c1:30:6b:ee:f5:24:58:5d:65:c2:
         f8:2b:a3:51:07:1c:fc:ee:e3:01:f7:47:eb:5e:9c:78:b7:f8:
         36:71:71:9b:37:f9:3b:bf:fc:25:18:a3:0f:8d:6e:74:5f:58:
         de:60:bd:4e:4a:30:29:40:39:76:7b:1a:d0:33:f2:6d:53:29:
         e1:15:1c:c1:f8:18:92:6c:d5:2e:de:2d:7f:6c:77:5d:54:fc:
         46:a9:48:be:5d:0c:86:bf:8d:2d:4e:20:15:4c:3d:ca:74:45:
         10:9d:e6:3a:5f:b8:06:71:6c:e8:90:af:23:93:5d:3f:98:ab:
         25:b0:bc:d6:10:6e:0b:19:fa:03:01:1c:40:16:e0:c2:d8:8a:
         c2:0d:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org