Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/754731cdc983f14225b9cd66c182f3f86faa9295.roa
File:                     754731cdc983f14225b9cd66c182f3f86faa9295.roa (raw, json)
Hash identifier:          JnEjlHKIZikzw3seEZTvYiwIIzLpGGyJ7SL13oKp8nc=
Subject key identifier:   5F:C5:E4:64:95:F2:90:B0:A7:86:60:99:5F:D7:5B:1E:14:0B:C2:2B
Certificate issuer:       /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial:       1E16B4
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/754731cdc983f14225b9cd66c182f3f86faa9295.roa
Signing time:             Tue 28 Mar 2023 01:07:04 +0000
ROA not before:           Sun 26 Mar 2023 00:45:43 +0000
ROA not after:            Fri 28 Mar 2025 00:45:43 +0000
asID:                     266771
IP address blocks:        160.19.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1971892 (0x1e16b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
        Validity
            Not Before: Mar 26 00:45:43 2023 GMT
            Not After : Mar 28 00:45:43 2025 GMT
        Subject: CN=754731cdc983f14225b9cd66c182f3f86faa9295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:08:6a:98:20:33:cd:e3:dd:70:3d:1a:9c:
                    e0:93:dd:d0:91:e9:c6:aa:96:18:cd:f3:01:a7:23:
                    46:c9:18:b1:7d:f1:89:56:5e:40:64:c6:0e:32:78:
                    ba:ca:40:7e:cf:ef:60:ec:ac:0c:8d:ba:16:44:45:
                    31:7a:3b:83:a2:db:db:30:fb:94:c9:3b:19:17:44:
                    27:d8:29:d6:00:10:96:ce:e1:63:4a:34:eb:81:b1:
                    49:24:09:49:9a:d7:6d:07:0a:ce:0c:d5:fb:59:3e:
                    22:fd:0c:b0:d9:41:03:38:06:c6:b6:e4:6c:7d:89:
                    f3:dd:92:c1:e9:33:18:3e:de:16:dc:15:84:c8:e3:
                    cf:5d:b6:03:3f:59:86:8c:8f:ac:d6:3d:7e:5a:3e:
                    66:95:8d:19:67:12:cd:64:a7:9d:ec:99:09:26:70:
                    80:43:62:82:0f:67:f5:1a:b1:b2:73:9a:cb:2e:d5:
                    f7:b7:17:98:e0:0e:ce:56:56:7b:49:b1:aa:bf:0a:
                    b5:d7:83:d6:28:85:b8:d1:3a:86:ab:79:ba:97:a3:
                    de:1b:52:5c:12:e0:04:52:3d:eb:2d:41:12:e5:f1:
                    d2:13:1b:de:1d:f6:32:5f:ae:63:ee:84:7b:29:a4:
                    35:de:01:7c:bc:2d:b1:02:82:f7:10:23:2a:20:10:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C5:E4:64:95:F2:90:B0:A7:86:60:99:5F:D7:5B:1E:14:0B:C2:2B
            X509v3 Authority Key Identifier:
                keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/754731cdc983f14225b9cd66c182f3f86faa9295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:48:d1:72:53:ac:4e:19:87:e6:47:cd:e4:79:5c:41:51:
         ec:5b:e0:cf:0d:f5:89:b1:c5:d7:f8:d7:87:cd:f3:76:cd:f3:
         6b:37:9e:93:29:17:4f:ef:63:d5:fd:f4:11:5e:40:b4:b5:7f:
         f9:49:b7:44:1b:a7:8b:4d:67:1f:5a:54:49:7a:84:81:5b:4e:
         67:cd:ff:96:55:43:fa:81:1d:82:ec:17:f8:f9:9d:3e:c0:9f:
         60:e9:c3:8a:c3:1d:69:4d:b7:ba:61:8d:78:71:ac:eb:ee:53:
         78:2f:46:7e:b5:31:f8:f1:ec:7c:fa:50:ea:1b:b5:22:d3:c6:
         e5:74:3e:fb:af:88:82:ef:9f:dc:d0:0d:54:23:4d:c7:ee:69:
         91:d0:24:5f:d2:0a:5f:1c:5f:a5:95:82:96:de:ad:4c:a4:a0:
         9b:ac:02:34:fb:a4:c0:c7:d8:df:87:a7:ea:ae:d6:03:cc:32:
         37:74:4f:7a:95:c8:c2:55:89:22:9c:ec:a6:05:67:65:ea:a5:
         21:fa:07:36:a8:63:42:ca:61:ab:3c:0c:fa:0d:3d:59:aa:e6:
         ca:89:ca:af:11:35:dc:21:9e:86:77:5a:2f:aa:cd:49:e8:e9:
         a7:81:3f:98:d3:9e:0e:55:bc:82:27:ca:c1:ee:17:ff:42:0b:
         d4:bb:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org