Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/ba7fcb9b4c4ed108671570ac9f24ccf9b218b96e.roa
File:                     ba7fcb9b4c4ed108671570ac9f24ccf9b218b96e.roa (raw, json)
Hash identifier:          o/a8oJtjKp0gyf7Pxiaq9xqBUGxbfnUL2ypOrGzjxf0=
Subject key identifier:   DC:F1:5D:ED:81:B5:E0:F7:F5:74:EB:3C:C9:0A:7F:F3:9F:0E:7D:42
Certificate issuer:       /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial:       7DC1
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/ba7fcb9b4c4ed108671570ac9f24ccf9b218b96e.roa
Signing time:             Mon 16 May 2022 14:54:52 +0000
ROA not before:           Mon 16 May 2022 03:00:00 +0000
ROA not after:            Thu 16 May 2024 03:00:00 +0000
asID:                     3816
IP address blocks:        168.228.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32193 (0x7dc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
        Validity
            Not Before: May 16 03:00:00 2022 GMT
            Not After : May 16 03:00:00 2024 GMT
        Subject: CN=ba7fcb9b4c4ed108671570ac9f24ccf9b218b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:c2:5d:4a:e0:c3:4c:fc:c2:36:df:d5:95:
                    e2:d0:91:e2:17:1e:3e:a0:f2:2d:25:66:bd:1a:45:
                    ed:fa:24:0a:25:a3:c5:9b:64:d3:04:cd:3f:a9:29:
                    97:f0:40:34:c3:0e:f9:02:7d:9f:f9:93:2f:bc:44:
                    8c:69:01:7c:d4:d4:86:44:61:79:5a:bc:90:90:a6:
                    b8:55:c1:ac:c9:12:98:9c:69:c8:59:2b:bc:8b:59:
                    56:9d:80:82:74:5a:68:99:13:b3:bb:b7:1a:1e:6a:
                    98:a1:eb:60:dc:cc:f7:27:94:88:d9:b0:f7:71:87:
                    aa:70:54:34:7d:5f:c3:f5:07:39:92:25:5f:96:e5:
                    c9:1e:e9:83:8a:ec:18:16:63:42:f6:31:60:96:d3:
                    93:13:64:69:2b:0f:83:cb:e8:55:a1:d0:c0:25:c0:
                    97:bc:3e:00:04:c0:c7:db:89:30:d8:66:5e:dd:0e:
                    98:28:bf:80:d3:7a:bf:86:87:34:5e:7e:fb:33:a5:
                    2a:75:dd:75:5c:f2:ef:7f:37:5f:33:95:fd:a8:48:
                    ba:9d:90:15:95:0a:12:1b:fd:fc:15:ba:98:e2:33:
                    0c:61:21:39:74:b9:39:2d:ee:5d:51:4f:b4:f6:3a:
                    e5:aa:90:b5:61:4d:b6:3e:d6:3d:29:91:8e:f1:6d:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:5D:ED:81:B5:E0:F7:F5:74:EB:3C:C9:0A:7F:F3:9F:0E:7D:42
            X509v3 Authority Key Identifier:
                keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/ba7fcb9b4c4ed108671570ac9f24ccf9b218b96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:85:85:91:6d:d4:ba:ca:1b:05:d3:9c:4e:d7:6e:cb:b7:
         87:d2:f7:b2:87:ef:c6:4e:60:6f:6e:76:31:d9:5f:21:9e:d1:
         ce:b6:0d:30:5e:e5:85:81:9c:e2:f7:23:2e:68:d4:c0:7d:cc:
         2b:bd:7a:23:36:a0:a0:13:04:5d:8f:14:b2:61:e3:c5:58:e9:
         50:e6:2b:63:aa:90:0b:bf:54:80:62:3a:93:0b:44:e7:62:8a:
         82:9d:8f:37:e5:d9:27:ef:5c:a7:42:42:fe:b6:59:ee:e4:52:
         33:f3:b5:b4:f2:0a:a8:3e:77:28:7d:07:1c:67:22:fd:92:b0:
         b8:ee:d9:94:af:e8:85:34:84:19:02:7a:99:a2:b3:14:9e:b2:
         66:b4:15:f2:1e:f9:03:17:24:dd:b4:f2:77:28:e6:0b:d3:f8:
         db:e3:34:d9:57:42:8a:ab:8c:11:37:51:4c:19:a5:61:fa:bd:
         9a:14:da:ac:f4:4b:ec:2d:5c:3a:f8:55:6b:46:58:9c:10:6d:
         e3:41:3b:5c:c0:69:b0:93:13:6c:a7:83:ec:bd:30:2e:9d:b1:
         c3:a2:c2:4f:ec:17:e1:fb:e9:df:18:7a:b0:c0:35:a6:11:6d:
         6d:6d:ad:74:3e:d9:7c:57:fa:93:53:4f:0b:e8:37:26:53:c4:
         1e:9f:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org