Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/e0a706b3d27d902b48ceff7e6f41a3b33bc3be50.roa
File:                     e0a706b3d27d902b48ceff7e6f41a3b33bc3be50.roa (raw, json)
Hash identifier:          C9omCxDogyS/IjrcX07HZwp5HMuWhDC8lIiD3jUfX+E=
Subject key identifier:   92:77:98:64:68:CA:65:8E:E2:9A:99:FB:47:6C:15:4F:DA:AC:13:78
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       245E91
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/e0a706b3d27d902b48ceff7e6f41a3b33bc3be50.roa
Signing time:             Tue 17 Oct 2023 23:59:52 +0000
ROA not before:           Mon 16 Oct 2023 23:59:52 +0000
ROA not after:            Fri 17 Oct 2025 23:59:52 +0000
asID:                     52468
IP address blocks:        131.196.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2383505 (0x245e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Oct 16 23:59:52 2023 GMT
            Not After : Oct 17 23:59:52 2025 GMT
        Subject: CN=e0a706b3d27d902b48ceff7e6f41a3b33bc3be50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:b0:10:df:c0:6c:68:92:f5:cf:9e:e2:fe:
                    70:50:76:67:59:3f:84:ec:8d:8f:aa:07:6b:d8:eb:
                    41:c0:98:8f:65:f0:fa:dd:f2:d6:cd:07:6e:87:4a:
                    ae:81:36:55:0f:f6:2b:db:dd:49:2b:67:d5:fa:56:
                    fb:d6:22:62:92:aa:2f:4e:b6:99:56:53:46:12:ec:
                    df:57:4e:09:d0:97:21:7f:ee:60:63:c2:a9:46:8e:
                    ce:64:33:2b:5f:4f:95:51:12:b0:c7:65:71:a2:48:
                    1d:d2:a3:d5:f8:be:08:2b:9a:79:d1:64:6d:f4:7c:
                    1d:28:74:ed:cd:92:11:72:bd:7c:50:bd:01:be:97:
                    d5:99:ce:f1:92:f6:fe:d8:7d:58:eb:ae:b7:58:76:
                    a0:11:82:fd:d3:d6:d0:90:8d:37:a3:61:16:73:bb:
                    df:2d:a6:64:72:65:1e:1d:a0:1e:97:2e:38:51:7d:
                    cc:b7:e7:83:82:31:b9:1d:5d:19:02:09:b5:ce:a3:
                    ad:f4:0b:b6:94:25:0b:39:b5:91:2e:65:00:27:9c:
                    c4:ed:11:a5:68:2e:5f:45:35:86:c0:0f:33:20:9a:
                    de:fb:52:e0:50:fb:20:5b:d9:43:18:51:40:73:83:
                    f0:e4:39:29:b9:97:ae:7b:4c:6d:c8:57:6a:28:68:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:98:64:68:CA:65:8E:E2:9A:99:FB:47:6C:15:4F:DA:AC:13:78
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/e0a706b3d27d902b48ceff7e6f41a3b33bc3be50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:e4:5a:e0:1b:3e:a0:c3:f8:67:ef:7e:4f:31:ba:17:99:
         d2:be:84:07:1a:48:da:37:63:53:9f:54:e4:f1:d8:92:96:6e:
         49:94:aa:b2:c8:9f:cd:00:a0:6a:56:11:34:6a:09:bc:15:e0:
         2a:3d:21:24:c1:c0:a6:50:e9:42:51:b3:2e:d2:19:c9:57:da:
         98:eb:35:10:f2:f2:26:bf:8d:0e:2c:09:ab:7b:1f:84:63:d7:
         1c:2c:48:49:80:f0:c1:f0:94:7f:61:66:b8:e2:02:7e:68:ca:
         f1:65:db:0f:63:e8:7c:a5:7a:a5:3e:66:fe:aa:39:b3:e4:72:
         4b:64:57:6d:4e:be:26:64:76:0f:ff:b7:15:5c:c7:7d:c8:e4:
         53:a6:00:9f:94:2c:bf:ea:b0:32:00:d1:73:f2:7c:fb:f1:e6:
         c3:fa:56:dd:02:4f:3d:e2:e1:9c:a0:37:31:47:91:2c:ca:5a:
         7b:2c:44:eb:4c:ce:4a:6b:34:e6:94:ee:b7:d8:21:f2:06:d0:
         d8:73:b2:dd:be:f5:bc:4d:b0:d1:70:1e:6a:e0:47:1f:d0:19:
         98:e4:94:44:8e:3e:bb:38:53:9a:c7:94:c9:4e:e5:9e:d8:69:
         31:6e:da:7d:d4:fb:8f:ff:39:da:7e:a1:5d:24:e8:fa:73:39:
         c7:15:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org