Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa
File:                     d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa (raw, json)
Hash identifier:          daFuptoGFiMbByM5a18ERUJ0Vz75RqE1dWiFLwhzEFw=
Subject key identifier:   ED:F8:36:87:1A:4E:9E:A5:A7:E4:E5:E6:5F:B8:BF:61:9C:A5:56:77
Certificate issuer:       /CN=ebff371d4ac1a6161db3e53f836c346c32163491
Certificate serial:       09B116
Authority key identifier: 76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa
Signing time:             Mon 30 May 2022 13:34:11 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Thu 30 May 2024 03:00:00 +0000
asID:                     61509
IP address blocks:        143.255.136.0/22 maxlen: 24
                          170.83.32.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635158 (0x9b116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebff371d4ac1a6161db3e53f836c346c32163491
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : May 30 03:00:00 2024 GMT
        Subject: CN=d365ad3acb58839e2fb19f72438dc556ee13d5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:15:17:cf:dc:90:7e:5a:43:00:70:61:2b:
                    57:19:94:73:35:b2:59:d4:b7:a6:f2:4c:9b:c5:3f:
                    2f:ab:c0:75:84:f4:92:6c:b1:b2:75:00:a6:8f:9a:
                    7a:b3:d2:5e:e4:f7:98:b5:07:d9:da:6a:89:5b:40:
                    8c:78:63:65:b1:d2:bf:fb:9f:e1:8e:89:00:0a:dd:
                    e2:63:ba:10:7d:b8:99:38:6a:e2:23:64:6c:83:72:
                    08:6e:9d:0e:5b:d5:7e:3a:2e:84:41:47:ba:fb:91:
                    9d:69:b9:c1:79:ed:54:28:7d:94:a0:5c:b7:a5:91:
                    bd:d5:89:ac:a0:09:d7:36:e1:a2:cb:37:15:5c:49:
                    5a:d6:87:fd:2d:20:ab:58:45:ce:9c:43:d4:d2:28:
                    d2:a0:31:d6:4d:61:91:33:e5:2b:cc:2d:7e:f8:51:
                    8c:72:53:69:51:58:e4:88:c9:c9:e2:e3:50:bb:6c:
                    35:49:ad:08:fd:60:c2:3f:9b:5a:0b:45:36:50:00:
                    a9:98:5d:30:6a:76:f1:a7:fe:99:c4:c3:f0:04:a9:
                    9e:46:25:5d:31:ef:0b:e4:63:a0:5f:6e:62:70:09:
                    0c:b6:c1:4d:94:0e:3f:d5:5e:31:c3:b9:73:2c:08:
                    63:89:b3:85:b5:9e:25:28:f4:a1:ad:26:63:1a:50:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F8:36:87:1A:4E:9E:A5:A7:E4:E5:E6:5F:B8:BF:61:9C:A5:56:77
            X509v3 Authority Key Identifier:
                keyid:76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/d365ad3acb58839e2fb19f72438dc556ee13d5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/ebff371d4ac1a6161db3e53f836c346c32163491.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.136.0/22
                  170.83.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:70:0e:1c:10:31:df:2f:84:b7:96:a1:18:36:a5:f2:cc:55:
         e6:ed:15:dd:be:47:88:15:c3:93:bc:23:a8:e5:ff:74:ea:db:
         34:8e:af:a7:06:67:6f:0d:8f:c7:11:2e:00:ac:23:b8:31:94:
         49:7a:13:a0:ba:6d:91:be:ee:d9:3e:52:b2:1d:d3:32:39:16:
         f1:d6:1b:c3:3c:de:c2:a8:f6:01:4f:c1:54:6c:cd:34:45:00:
         71:aa:cd:9e:05:05:a5:f6:69:d6:94:52:a7:53:f1:af:1a:9a:
         bf:55:d8:2e:c7:b9:24:6c:85:3c:34:70:87:82:27:23:53:55:
         f2:a1:f3:60:dd:f3:fd:23:54:4b:d6:9a:ee:26:15:2f:9f:0e:
         c6:da:f2:84:b4:ff:b3:e6:71:f5:ce:91:9b:14:82:9c:dc:47:
         94:72:aa:f2:d9:c7:fd:c9:80:ab:8e:7e:cd:7e:47:f5:51:30:
         ee:52:c4:0c:00:c2:ec:10:f3:7a:56:43:90:e8:43:62:5d:b9:
         96:ee:3e:a4:08:7d:dd:df:8f:35:bc:73:5c:50:e2:bd:cf:f0:
         91:fc:05:a0:df:5c:9e:ba:d0:fe:fb:4e:4c:9d:61:95:5a:b6:
         4b:0d:98:46:6d:81:77:25:46:b7:c5:b6:52:54:11:65:a3:87:
         04:d1:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org