Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6c3665893263400c8f042ba3a268bfcc1ab7733.roa
File:                     e6c3665893263400c8f042ba3a268bfcc1ab7733.roa (raw, json)
Hash identifier:          BjZgQ1axhHYyspHQCcFvBednJvkl6QDX+FcO7VG28AI=
Subject key identifier:   00:50:AA:69:36:99:AE:DA:3A:4C:D8:6A:7D:46:A1:7C:2C:3E:49:9D
Certificate issuer:       /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial:       14D970
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6c3665893263400c8f042ba3a268bfcc1ab7733.roa
Signing time:             Thu 15 Dec 2022 03:10:27 +0000
ROA not before:           Wed 14 Dec 2022 03:10:18 +0000
ROA not after:            Sun 15 Dec 2024 03:10:18 +0000
asID:                     52398
IP address blocks:        168.121.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366384 (0x14d970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
        Validity
            Not Before: Dec 14 03:10:18 2022 GMT
            Not After : Dec 15 03:10:18 2024 GMT
        Subject: CN=e6c3665893263400c8f042ba3a268bfcc1ab7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:65:18:09:b3:31:65:9f:93:70:ee:71:d4:
                    38:e2:17:cc:0d:66:63:82:ed:1c:b1:e2:61:59:14:
                    af:fe:ee:07:13:b8:b2:7a:c1:b1:40:5d:1c:3a:31:
                    4e:e6:b7:02:fe:1b:ba:fe:5e:44:de:2a:48:db:ed:
                    b3:fc:b9:eb:71:1e:47:a0:92:4b:0e:37:78:99:33:
                    fb:f2:e1:b5:d7:f3:e3:71:7b:c6:a5:0b:fa:c4:0a:
                    1c:bb:0f:85:d0:57:5a:2a:ab:b4:56:a7:ad:70:93:
                    53:61:1d:87:91:d7:79:75:20:89:b1:06:03:71:bb:
                    9b:42:97:77:ae:76:0a:4f:66:fe:b3:31:c2:06:9b:
                    bc:1d:65:f1:97:fb:2e:3e:90:cd:d1:13:1a:80:72:
                    b4:30:76:88:de:47:dd:87:ba:13:1a:1c:93:b3:e3:
                    30:51:30:eb:af:49:7d:b1:99:9d:90:cf:f8:7c:0d:
                    12:83:19:0d:a5:7c:8c:32:23:14:79:4b:fa:3e:97:
                    71:6f:83:65:4e:9f:8f:46:6b:ce:db:d4:75:0a:ff:
                    14:cd:ec:11:7f:a3:89:bd:89:e1:79:7b:d9:b3:0c:
                    3f:20:42:93:89:b4:14:54:54:f1:f1:0d:c0:09:49:
                    22:67:e7:67:b8:73:75:fc:84:1b:ae:fa:ad:e0:39:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:AA:69:36:99:AE:DA:3A:4C:D8:6A:7D:46:A1:7C:2C:3E:49:9D
            X509v3 Authority Key Identifier:
                keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/e6c3665893263400c8f042ba3a268bfcc1ab7733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:fa:1b:bb:80:9f:21:f9:7b:2b:23:12:b5:ad:4f:82:54:
         5d:0f:d8:5c:ac:bc:97:a7:a6:f7:88:28:55:a0:6b:e5:38:e9:
         32:31:fc:13:f2:b0:5c:0f:7b:14:8d:c4:ea:48:9e:a9:de:d8:
         a7:ef:31:4b:17:72:c9:de:e2:27:30:d4:2a:80:bc:80:78:d0:
         4e:5a:bd:f3:67:e0:ca:10:4d:00:62:5b:82:0c:8d:d0:20:cb:
         8e:21:45:5c:9f:b0:15:f3:ca:40:1b:14:64:c3:fd:49:78:d6:
         97:38:2e:03:4a:98:87:4f:2c:70:f1:a0:30:c5:ff:30:1c:c9:
         c3:91:00:80:bc:d4:2d:04:a7:95:fa:fe:60:4f:1e:87:4d:e6:
         3e:b1:e7:4b:d9:d8:f9:84:17:26:07:cb:40:2c:de:50:a4:1f:
         06:05:40:48:22:df:a7:89:0d:ca:59:8b:7d:32:c8:f6:04:45:
         d3:0f:46:d7:e9:c3:03:d9:7b:2f:16:40:01:84:6c:07:22:54:
         07:d6:09:2c:49:74:93:d5:f3:35:8a:aa:d3:6d:dc:9d:fc:fe:
         f8:4d:5c:36:7d:1c:51:c4:b4:bf:d2:7e:30:37:9f:a2:8d:ef:
         37:fb:a6:2e:d4:2a:96:da:1d:c1:7d:38:d5:7d:a9:47:50:f0:
         7a:70:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org