Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/5907d54eb06614877547e48775b2c994852a29d6.roa
File:                     5907d54eb06614877547e48775b2c994852a29d6.roa (raw, json)
Hash identifier:          0WFL9kyKk42EgbpooOenC20GN3fItWiYmuEAhEDUgMM=
Subject key identifier:   AE:F0:27:B3:0F:05:02:EF:F3:7C:D6:3D:F1:43:65:AF:F7:C4:FF:07
Certificate issuer:       /CN=c9329e96abfcaf34a4fc1d9a161fe743d88602fc
Certificate serial:       06A83E
Authority key identifier: 28:8B:8D:E1:B5:46:7A:FB:C9:C0:ED:A7:F9:92:83:3D:88:8E:2A:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/5907d54eb06614877547e48775b2c994852a29d6.roa
Signing time:             Tue 20 Feb 2024 12:35:35 +0000
ROA not before:           Tue 20 Feb 2024 12:35:35 +0000
ROA not after:            Fri 20 Feb 2026 12:35:35 +0000
asID:                     264701
IP address blocks:        168.232.248.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436286 (0x6a83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9329e96abfcaf34a4fc1d9a161fe743d88602fc
        Validity
            Not Before: Feb 20 12:35:35 2024 GMT
            Not After : Feb 20 12:35:35 2026 GMT
        Subject: CN=5907d54eb06614877547e48775b2c994852a29d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:97:ef:59:94:41:44:fb:2f:cc:52:a4:87:
                    21:14:98:cd:ee:d5:62:33:fb:f2:d2:cd:74:a3:d6:
                    1c:2b:69:34:1b:46:e0:4d:62:23:b9:c0:58:c0:21:
                    7d:4a:15:57:cb:94:c5:71:4f:62:2b:f9:a9:f0:35:
                    61:8f:b4:b1:e6:d9:ab:13:50:9d:11:e3:e9:a5:8a:
                    b8:37:5c:c3:dd:b3:ed:09:9c:8b:47:c5:b6:55:31:
                    10:6c:48:f8:9e:6b:6e:e9:34:c2:72:ae:57:10:c4:
                    bb:f5:39:42:81:63:19:7b:ac:2d:8d:53:48:56:61:
                    fb:8f:de:fe:7e:60:5e:0a:7c:1c:7a:11:ae:41:f2:
                    ec:1d:e2:c5:aa:5a:a6:ab:31:3a:58:e2:e2:fa:dc:
                    f2:ac:dd:75:86:09:4d:91:dc:72:d2:ac:01:7b:e6:
                    38:7a:67:b9:b6:fe:a1:2b:7a:da:44:ba:93:13:9d:
                    a6:29:09:3c:67:d6:09:33:e8:35:db:29:e8:9f:fb:
                    d8:17:fd:e8:d8:74:4f:82:59:41:59:27:5c:d2:01:
                    9f:0f:3c:21:3a:9b:59:4a:c1:96:d5:60:66:99:1f:
                    38:b1:da:aa:0c:b3:91:b9:9d:18:99:76:49:ea:a8:
                    f4:18:64:16:07:76:f8:45:59:0b:a7:01:d1:22:05:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:27:B3:0F:05:02:EF:F3:7C:D6:3D:F1:43:65:AF:F7:C4:FF:07
            X509v3 Authority Key Identifier:
                keyid:28:8B:8D:E1:B5:46:7A:FB:C9:C0:ED:A7:F9:92:83:3D:88:8E:2A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/5907d54eb06614877547e48775b2c994852a29d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:31:93:91:32:5d:32:77:c6:a5:35:d1:d1:32:3b:a1:14:38:
         6c:00:19:bd:a8:5d:9f:85:64:a3:bd:dd:ba:e4:77:cb:8b:6b:
         d6:c3:4b:d0:59:9c:f7:22:0d:b4:52:d6:b0:c4:cd:bb:31:b8:
         25:44:ef:e6:1e:e1:bd:ce:bd:2c:c9:33:25:a8:5f:7f:29:6f:
         52:52:fc:1f:1b:87:6c:b8:52:22:47:51:cd:e7:5e:7c:c1:bc:
         f8:42:56:36:45:95:2d:17:68:80:c1:73:b6:bc:3e:eb:2e:f7:
         75:d5:b7:61:9c:18:2c:3c:94:34:c0:a0:37:b6:9c:fc:a2:c6:
         3b:5d:38:09:27:e7:62:cd:da:2b:a9:c9:ed:9e:55:26:b3:b1:
         e5:52:3b:e2:e6:34:c7:b1:8f:0b:51:c7:2b:88:01:69:89:94:
         cd:3d:2f:c6:80:a4:74:fb:94:c6:30:19:9d:9d:90:c8:2c:1d:
         3b:13:f0:47:91:63:a3:94:41:53:1f:69:8d:3f:00:4b:86:94:
         28:dd:03:30:c8:43:2e:2d:b6:06:b1:fb:cc:ae:b4:c8:b8:5e:
         e3:55:f1:ef:2d:dc:28:b8:a7:26:5c:48:66:92:90:51:84:45:
         7a:73:45:ae:35:ff:3c:d6:42:02:8c:19:75:29:f6:23:97:bf:
         37:8a:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 19:23:42 2024 by rpki-client on console-fra.rpki-client.org