Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/47272998ddacf4e08ddefb1d1c40ebff7c4f1361.roa
File:                     47272998ddacf4e08ddefb1d1c40ebff7c4f1361.roa (raw, json)
Hash identifier:          lfRVlmIGNxLfKJ/FFWthXdaO05iC8pzlpivCpBEI4BM=
Subject key identifier:   96:9B:43:46:48:00:84:94:F6:34:FC:7C:42:73:91:C1:05:A2:42:AE
Certificate issuer:       /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial:       1E0927
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/47272998ddacf4e08ddefb1d1c40ebff7c4f1361.roa
Signing time:             Tue 28 Mar 2023 00:18:23 +0000
ROA not before:           Mon 27 Mar 2023 00:17:07 +0000
ROA not after:            Fri 28 Mar 2025 00:17:07 +0000
asID:                     266771
IP address blocks:        160.19.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968423 (0x1e0927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Validity
            Not Before: Mar 27 00:17:07 2023 GMT
            Not After : Mar 28 00:17:07 2025 GMT
        Subject: CN=47272998ddacf4e08ddefb1d1c40ebff7c4f1361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:be:6f:de:ba:8b:ca:00:47:84:b1:38:97:
                    31:b2:5d:37:b8:67:20:5c:9f:20:a7:b9:b1:25:95:
                    fc:af:b5:9e:e3:b4:8c:66:ee:0c:4e:53:ec:c0:50:
                    3f:ed:88:55:7e:b8:5c:ff:d8:13:15:e2:19:d9:95:
                    a5:6b:8e:fa:7e:da:87:f0:02:8f:d3:6e:a4:b7:91:
                    96:a2:b6:4a:7b:7f:e0:af:3e:57:dd:d5:4d:24:e2:
                    bc:f1:c9:72:a2:fa:ea:8b:80:e1:79:d0:e0:8e:46:
                    1a:0e:08:69:ba:99:1d:f9:b9:8c:94:7c:43:07:73:
                    82:11:5e:95:e8:43:7f:f9:d4:44:b1:e6:17:42:c3:
                    ef:8f:75:af:e6:74:e5:09:dc:63:ec:95:ab:2a:66:
                    7f:9a:37:a2:5b:05:af:a2:c6:ca:65:46:45:e4:e2:
                    3b:fc:a8:75:ce:ae:20:25:bf:a6:d5:c0:c2:4b:eb:
                    a7:32:5e:5d:e7:64:cf:15:89:53:c6:0e:c4:8c:55:
                    18:c6:0c:fa:e6:dd:26:2f:62:9c:b7:4c:da:b0:72:
                    28:91:aa:05:b2:fa:86:58:3f:4a:cf:93:55:2b:31:
                    b3:d3:73:db:94:45:13:d0:d7:f6:71:d8:37:31:f3:
                    2c:3b:9e:5c:b8:1f:25:d5:d5:aa:00:ea:3a:9a:8f:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:43:46:48:00:84:94:F6:34:FC:7C:42:73:91:C1:05:A2:42:AE
            X509v3 Authority Key Identifier:
                keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/47272998ddacf4e08ddefb1d1c40ebff7c4f1361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:eb:5d:f7:48:07:2e:04:f5:5b:8d:54:92:c4:e2:c2:a9:
         74:ed:86:31:18:91:82:26:eb:60:7a:9f:71:62:d6:df:0e:ff:
         90:c5:26:aa:b4:42:52:0b:4e:fb:5d:71:e5:a5:25:85:3d:41:
         6a:c8:8b:d8:74:70:72:ac:62:56:cc:7b:2f:37:c5:31:60:6f:
         5a:35:a3:19:a4:03:ae:6f:1a:53:47:b4:bf:43:70:88:b4:ad:
         68:f4:b9:aa:7e:2b:c2:c6:ba:4b:8c:68:44:8c:33:c7:ed:aa:
         41:82:d1:1a:f9:e1:98:2e:4c:86:bf:b5:2c:e8:43:99:41:14:
         d6:09:c9:5f:c9:dc:73:8f:4c:c0:50:23:56:62:18:f6:79:42:
         d3:08:da:01:a0:86:e7:fe:40:da:6d:ed:1d:ac:f7:de:f0:fc:
         eb:9c:9c:bc:d7:3a:90:54:d8:b3:ab:40:ce:38:cb:23:55:bb:
         16:23:63:9d:df:66:d2:a8:b3:8d:cc:bc:7e:c0:7c:49:16:97:
         ad:1c:97:62:58:55:04:c7:c3:71:14:2b:93:9f:23:af:f2:b9:
         8a:4c:be:60:f2:1e:8f:04:f2:02:3c:fc:be:49:47:4b:e1:fd:
         5e:18:28:89:06:0f:cb:4b:ec:91:0d:fa:05:9b:6a:38:5c:dd:
         39:f1:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org