Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/1dc1fcd2ea94e54b57045dd902204bae3416c859.roa
File:                     1dc1fcd2ea94e54b57045dd902204bae3416c859.roa (raw, json)
Hash identifier:          DC5VPDWyNg6SAYmAREuQwHZzuZlpY2yMNj40LR2HHAk=
Subject key identifier:   00:BA:E1:77:4B:89:E7:9D:20:FA:EF:A0:42:9C:7D:EB:1D:93:04:D1
Certificate issuer:       /CN=15ef5960d1a1653e9afb4b92c680fec5a4cff418
Certificate serial:       1F26AC
Authority key identifier: 5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/1dc1fcd2ea94e54b57045dd902204bae3416c859.roa
Signing time:             Fri 24 Mar 2023 08:31:30 +0000
ROA not before:           Thu 23 Mar 2023 08:31:30 +0000
ROA not after:            Sat 22 Mar 2025 08:31:30 +0000
asID:                     265794
IP address blocks:        192.141.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041516 (0x1f26ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ef5960d1a1653e9afb4b92c680fec5a4cff418
        Validity
            Not Before: Mar 23 08:31:30 2023 GMT
            Not After : Mar 22 08:31:30 2025 GMT
        Subject: CN=1dc1fcd2ea94e54b57045dd902204bae3416c859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:a2:55:63:b0:f1:e6:d1:4c:84:dd:8f:6c:
                    87:72:ec:ff:e0:1e:5b:dd:5d:59:ed:0a:e4:bb:e6:
                    3c:82:a0:b1:8e:09:ed:42:3c:22:34:6d:cb:fb:69:
                    30:6b:41:57:77:c4:54:b6:63:46:81:12:a4:7d:b4:
                    a4:76:9a:49:d4:70:06:4b:4f:0c:e4:fb:6b:61:52:
                    c0:03:96:e5:d2:ab:42:bd:de:b6:b1:0d:9d:8c:df:
                    0e:dc:4a:16:b4:c5:9a:a3:c7:5f:30:51:0b:a1:8d:
                    7d:fc:44:05:14:48:8b:4d:ca:6f:8a:be:6d:63:4d:
                    ee:56:ff:3c:64:8f:a2:2a:c9:ad:06:dc:26:86:5d:
                    41:e6:f0:5a:34:e9:0a:26:7a:f3:06:4d:4d:cf:e2:
                    66:bb:95:ac:e9:01:99:a4:6a:c8:40:c1:4a:62:64:
                    8c:19:8f:6e:34:b8:9c:c5:ec:03:65:84:38:a0:dd:
                    13:0d:47:58:82:4e:0c:5e:d1:24:b8:34:87:f7:b0:
                    b6:65:66:1a:5f:4b:2d:3e:d9:f4:92:5a:62:3b:1b:
                    c2:40:fb:f0:ad:55:2c:c2:97:36:d5:b5:12:da:e9:
                    e2:7c:e9:8e:21:4e:77:7f:a8:08:5d:d3:24:92:bc:
                    65:cd:51:d7:db:67:7e:de:32:62:10:b2:27:92:d5:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:E1:77:4B:89:E7:9D:20:FA:EF:A0:42:9C:7D:EB:1D:93:04:D1
            X509v3 Authority Key Identifier:
                keyid:5F:EB:71:D9:E1:FE:32:9D:1B:31:E9:4A:83:C5:E8:B3:B1:A8:36:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ef5960d1a1653e9afb4b92c680fec5a4cff418.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/1dc1fcd2ea94e54b57045dd902204bae3416c859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bf1ac0a-4d1d-4778-a9dc-9bdc1612df0b/15ef5960d1a1653e9afb4b92c680fec5a4cff418.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:47:5e:77:97:e1:e1:56:38:05:5a:43:0c:42:56:90:57:
         59:52:a0:73:b9:c1:21:4a:ab:aa:16:05:cd:46:5b:30:00:bc:
         99:ae:7d:36:5f:1d:28:65:3d:02:95:82:33:3f:50:b7:2a:39:
         1d:c6:4d:18:c7:11:93:eb:69:0f:62:9d:3b:1f:80:9f:6e:79:
         be:80:9a:75:77:76:c0:fe:5f:0c:36:a9:e1:5e:eb:df:5f:30:
         60:8b:de:a2:6b:ae:92:ff:5c:b6:b4:25:9d:1f:ef:3a:82:3c:
         87:8d:5b:29:f5:4b:61:a6:0e:17:72:d5:3f:81:1d:2d:ed:b1:
         c1:43:e6:44:75:9f:e0:62:8c:8b:70:a7:14:ce:c6:76:b1:e9:
         de:cd:55:d4:6d:56:32:6d:21:d7:02:31:0d:73:40:27:64:e4:
         54:53:bf:d7:d0:54:78:f1:89:64:45:a7:eb:e7:57:b9:97:d5:
         23:5c:eb:b8:b1:a1:cf:91:e9:54:1f:b8:a3:07:08:87:12:50:
         a9:2f:b7:20:16:c9:f8:9a:f2:b6:f3:87:58:98:5e:7a:9a:a5:
         4c:0a:fe:e6:87:a0:97:5f:0e:eb:86:57:a8:de:2e:bd:84:34:
         09:b2:1d:ed:90:4a:51:05:cc:2c:37:01:94:f1:39:c0:eb:7f:
         6d:3f:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org