Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/5f03c8d59c05fabcb92b3a58b4a38f42c250991f.roa
File:                     5f03c8d59c05fabcb92b3a58b4a38f42c250991f.roa (raw, json)
Hash identifier:          sW3/x6aBKUu1eMAqICTtLlG5lJlcL3NjhsgtzSbusvs=
Subject key identifier:   AB:17:E1:B7:C5:E0:2C:73:2E:81:A0:77:65:3E:19:DB:83:20:B5:C6
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       21E4BB
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/5f03c8d59c05fabcb92b3a58b4a38f42c250991f.roa
Signing time:             Wed 05 Jul 2023 13:27:46 +0000
ROA not before:           Tue 04 Jul 2023 13:27:46 +0000
ROA not after:            Sat 05 Jul 2025 13:27:46 +0000
asID:                     52468
IP address blocks:        131.196.114.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221243 (0x21e4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Jul  4 13:27:46 2023 GMT
            Not After : Jul  5 13:27:46 2025 GMT
        Subject: CN=5f03c8d59c05fabcb92b3a58b4a38f42c250991f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:f1:19:44:82:a6:b3:fe:70:8c:de:8d:c8:
                    06:49:8e:ae:a1:dc:e1:d4:3e:e8:21:5c:9e:fd:a7:
                    26:d8:9c:6c:00:31:39:89:fa:09:6b:86:12:29:60:
                    e2:c5:a7:dd:ef:92:e7:ae:3b:4d:ee:10:f1:3d:2c:
                    39:63:98:48:3c:bb:c6:56:4e:0f:8b:06:69:1a:bd:
                    00:9f:55:67:dd:a3:f5:71:04:57:28:87:f5:a0:a3:
                    97:fb:c1:5a:70:c0:d2:ae:94:f0:71:f5:b7:6b:7e:
                    30:91:fb:c5:2e:f7:f5:97:4e:69:63:fe:38:21:12:
                    88:70:39:51:19:33:70:0c:c0:ba:31:dc:a2:80:b3:
                    45:0d:c3:c9:58:10:2c:f9:0a:62:3b:84:34:e0:a1:
                    b6:f4:50:af:5b:99:1f:7e:d7:2c:4a:6a:99:7d:d2:
                    27:6c:cb:dd:76:e8:ca:c6:b7:45:e7:4c:74:07:ab:
                    6c:c9:d2:6e:23:67:0c:df:23:34:00:51:a5:00:d6:
                    10:96:3b:4a:3e:bc:51:79:14:7f:7e:68:fd:b5:8e:
                    2f:63:0e:20:2e:28:2c:5a:5d:88:89:05:0e:89:f7:
                    5b:d4:63:e3:7b:90:e6:e0:d0:4e:54:cd:f1:f6:c6:
                    1a:ae:1d:62:bc:15:e9:df:80:7c:c5:9b:e3:7a:67:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:E1:B7:C5:E0:2C:73:2E:81:A0:77:65:3E:19:DB:83:20:B5:C6
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/5f03c8d59c05fabcb92b3a58b4a38f42c250991f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:01:9e:62:68:7c:df:e0:b7:1b:60:ec:d0:1c:2d:a1:34:
         0a:9c:a7:48:89:e1:d2:5e:90:86:0b:6e:df:a3:98:3f:c2:07:
         34:05:8f:ad:45:95:47:51:f3:5f:cb:68:ac:8b:47:01:89:b4:
         f3:ad:52:41:8a:b1:8d:ca:b7:d3:f0:c0:4b:03:7f:a4:f6:55:
         6c:4f:c3:a4:aa:05:c2:b2:8b:41:9e:10:32:29:d5:fc:5c:09:
         77:48:88:ff:4f:53:d7:ed:7d:18:7b:99:f0:f8:fe:55:7a:ff:
         9b:ee:46:25:2b:15:ac:2f:5c:e8:86:a1:08:e3:86:2f:b6:4f:
         29:90:f4:24:e4:af:d9:20:db:e5:b9:3d:ea:4e:c5:91:9a:a2:
         c4:6d:b3:16:62:53:a5:90:18:c3:b6:79:d1:0c:6d:bf:4d:25:
         58:8e:63:d5:d3:70:9b:8c:96:f0:f8:f0:81:86:37:37:bc:91:
         a0:e9:05:bc:3a:3a:b5:71:fc:9e:c2:22:47:f7:89:0c:54:5b:
         53:95:95:ff:46:29:5d:59:ea:93:51:3d:1b:7d:80:c8:15:f9:
         f6:92:83:3b:a0:32:69:66:28:80:34:06:8c:60:be:24:54:d9:
         50:5e:de:26:8b:e0:eb:1e:c1:1b:07:95:48:d3:06:8e:7d:4d:
         9a:e4:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org