Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/f24fe4be04f16be33187c725f1d3dc81d48b31e7.roa
File:                     f24fe4be04f16be33187c725f1d3dc81d48b31e7.roa (raw, json)
Hash identifier:          4tNp+OoJe7OingbtZhW+VvmFzC67M39VY9JpErDfaIg=
Subject key identifier:   81:74:CD:77:40:E0:39:17:AC:C1:01:AF:74:EC:3D:81:75:03:F2:B4
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       1A2441
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/f24fe4be04f16be33187c725f1d3dc81d48b31e7.roa
Signing time:             Thu 20 Oct 2022 07:30:00 +0000
ROA not before:           Wed 19 Oct 2022 07:30:00 +0000
ROA not after:            Fri 18 Oct 2024 07:30:00 +0000
asID:                     269862
IP address blocks:        168.194.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1713217 (0x1a2441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Oct 19 07:30:00 2022 GMT
            Not After : Oct 18 07:30:00 2024 GMT
        Subject: CN=f24fe4be04f16be33187c725f1d3dc81d48b31e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:ba:5b:1b:85:a7:98:7e:2d:02:ea:dc:e0:
                    b9:f3:40:7f:02:65:8f:6b:70:9f:81:21:bc:2a:07:
                    ec:31:62:b3:17:5a:0c:6b:d8:d4:64:3f:43:60:83:
                    e8:32:d8:d1:c1:1e:dd:73:93:bd:06:bc:f5:91:59:
                    79:8d:4a:de:5f:6c:11:7c:27:bd:2a:90:84:ad:fd:
                    5d:d5:e2:78:a2:08:4a:27:e5:64:75:0f:03:b9:d6:
                    3c:cf:3e:55:eb:dd:c9:46:6a:9b:0d:f7:24:74:86:
                    68:06:80:08:65:03:c7:b0:b7:aa:3d:43:45:ee:ae:
                    e5:43:6b:19:04:16:b6:c1:40:30:35:3b:5c:00:2a:
                    a2:4c:d4:f5:13:eb:fe:f7:58:47:0d:4d:8f:79:df:
                    88:ec:62:69:af:a2:65:56:8c:22:0f:95:19:72:c0:
                    92:83:ad:05:6f:32:c8:b0:2b:5c:9a:fd:34:42:97:
                    de:d6:ca:09:d7:2e:b4:a9:42:5f:c0:b8:f3:75:d7:
                    08:e4:14:f3:4a:1e:9b:22:b9:99:08:e7:2e:52:fa:
                    2e:c6:42:98:a3:1d:e6:0d:af:83:06:30:36:85:1d:
                    c9:fa:7b:a8:86:5d:34:01:59:f2:f8:72:bd:2c:4f:
                    72:46:e1:dd:03:5a:d2:74:69:e9:b4:e4:9f:0b:fe:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:CD:77:40:E0:39:17:AC:C1:01:AF:74:EC:3D:81:75:03:F2:B4
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/f24fe4be04f16be33187c725f1d3dc81d48b31e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:d0:c3:92:9d:4e:9d:e9:a5:a8:ae:2f:a2:d0:7b:4e:9f:
         ba:43:a8:09:6a:a9:04:f5:5c:b3:4d:b6:70:3f:7f:1a:4a:70:
         ee:4d:18:d6:2c:42:08:fb:61:f1:82:ae:a8:9e:ea:8a:16:f3:
         b6:02:5c:19:08:8b:fe:35:d0:e6:e0:62:72:40:a9:76:68:88:
         54:cd:fa:11:f7:fe:5a:da:87:99:13:e1:e4:a5:95:ae:97:f1:
         e5:73:fe:bc:0b:7d:aa:d5:27:c5:34:c3:35:13:cd:5a:7c:d7:
         16:07:3f:3a:d1:5c:4c:4e:d6:7c:85:d3:30:53:c3:2c:95:56:
         e6:b9:c3:83:3c:0f:5c:07:a2:4c:06:46:58:37:50:7e:a3:e0:
         14:84:1a:6a:be:30:e1:8d:78:1d:78:df:86:1c:f5:17:f2:2a:
         73:7f:fb:5f:98:db:27:61:69:67:aa:fc:dc:97:b5:6e:70:6b:
         5a:c4:1e:fe:8a:a6:21:a0:36:59:14:e1:8c:2b:3d:72:02:e7:
         fa:b5:3c:7a:1c:09:51:90:23:be:3b:4b:e6:19:b3:49:6f:b3:
         27:b2:67:53:57:1f:29:a6:03:32:75:b4:08:31:3e:7b:86:67:
         43:8e:3f:3d:74:da:66:92:3a:d3:ef:5f:57:66:e1:f2:70:8a:
         8b:fe:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org