Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99e8f3d1-442a-4fdd-b25d-64f97649110b/2df06a7cd7b0cf35c14dab35b6520c738f093034.roa
File:                     2df06a7cd7b0cf35c14dab35b6520c738f093034.roa (raw, json)
Hash identifier:          VLGWAHOJ6D9SAgJfcivKQbR6+83j3S+5azXxhNtx65A=
Subject key identifier:   0A:44:1B:BC:2E:F9:F1:2A:A4:DF:EF:29:6F:2D:E8:4C:42:AF:25:05
Certificate issuer:       /CN=fb3ab123156b8da775836e94dbb20afb094467a5
Certificate serial:       19A14F
Authority key identifier: FD:7D:1E:F6:BD:F9:82:23:B8:ED:74:E5:A7:2C:9B:9C:85:5C:62:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb3ab123156b8da775836e94dbb20afb094467a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99e8f3d1-442a-4fdd-b25d-64f97649110b/2df06a7cd7b0cf35c14dab35b6520c738f093034.roa
Signing time:             Fri 15 Jul 2022 18:57:01 +0000
ROA not before:           Fri 15 Jul 2022 03:00:00 +0000
ROA not after:            Mon 15 Jul 2024 03:00:00 +0000
asID:                     263715
IP address blocks:        131.255.180.0/22 maxlen: 24
                          138.186.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679695 (0x19a14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3ab123156b8da775836e94dbb20afb094467a5
        Validity
            Not Before: Jul 15 03:00:00 2022 GMT
            Not After : Jul 15 03:00:00 2024 GMT
        Subject: CN=2df06a7cd7b0cf35c14dab35b6520c738f093034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:73:da:45:04:76:20:1f:2e:f8:b1:d2:99:
                    a5:f5:0a:56:a0:b2:94:a1:9a:08:54:e1:91:57:7d:
                    28:46:65:b8:a8:82:3b:f5:a6:45:33:14:e0:65:60:
                    79:b0:6c:23:d7:94:0d:63:21:f5:59:1a:42:6c:f3:
                    95:f8:cf:c8:63:e8:f6:fe:e1:5a:0f:ad:2a:ac:5d:
                    ee:0f:69:d4:18:d1:13:b0:c5:ac:ce:73:ea:cd:74:
                    c9:1b:a1:a6:d5:62:12:27:01:c7:71:dd:68:e7:37:
                    57:d2:db:a3:01:9e:e3:df:c7:e9:f9:f3:e4:bc:dc:
                    c6:13:d0:52:b7:61:21:1c:8b:34:02:fd:15:3b:42:
                    09:59:2b:8b:4d:72:d6:b7:c6:b1:18:65:94:98:99:
                    a8:ec:03:54:3f:8a:6a:00:7d:06:39:d2:bc:9b:9f:
                    1d:52:32:f7:19:93:bf:93:23:5f:d5:06:ef:b7:24:
                    4b:21:08:d2:da:b6:f0:8a:62:2e:89:70:cc:92:c8:
                    c7:30:2c:cf:e7:aa:de:ea:02:fc:4f:83:ab:76:5d:
                    a2:c2:7b:69:29:cb:a3:46:30:6a:17:5f:a5:f9:ce:
                    06:1f:df:11:00:ea:2b:aa:0e:b5:9d:d3:4f:d5:dc:
                    7f:3c:ac:bc:67:a5:2d:ca:b6:30:a0:75:71:f4:3c:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:44:1B:BC:2E:F9:F1:2A:A4:DF:EF:29:6F:2D:E8:4C:42:AF:25:05
            X509v3 Authority Key Identifier:
                keyid:FD:7D:1E:F6:BD:F9:82:23:B8:ED:74:E5:A7:2C:9B:9C:85:5C:62:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb3ab123156b8da775836e94dbb20afb094467a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99e8f3d1-442a-4fdd-b25d-64f97649110b/2df06a7cd7b0cf35c14dab35b6520c738f093034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99e8f3d1-442a-4fdd-b25d-64f97649110b/fb3ab123156b8da775836e94dbb20afb094467a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.180.0/22
                  138.186.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:28:38:c2:d1:8d:6e:19:21:ee:80:89:a0:ff:b9:d8:81:
         15:d4:89:66:19:7b:d7:7b:85:59:41:9c:9c:57:04:7d:3d:76:
         dc:c5:32:c6:8f:45:0d:4d:a1:22:56:48:87:12:7a:cd:9c:c2:
         4e:bb:46:d8:31:17:3a:23:ee:9a:ae:57:2d:4b:69:30:e5:7f:
         18:2c:6e:a9:0e:68:45:bf:8e:45:21:15:3a:33:1c:05:6c:26:
         39:8d:a5:f7:b8:38:e7:f0:3f:fb:26:23:d9:80:e9:83:8e:02:
         cf:1a:dd:f3:f6:bf:2e:83:21:ae:9e:0b:97:0d:60:28:28:80:
         ac:36:db:37:b9:95:ef:8d:c3:f7:7a:da:f5:7d:f4:42:53:ae:
         ab:d6:94:b0:f6:e6:7c:a0:4e:20:9f:80:95:e9:08:b2:a1:6b:
         9b:12:3f:83:d1:d4:c9:2a:33:1d:f3:a2:56:48:31:c7:9f:d8:
         50:d2:8a:9f:fd:54:07:b8:a5:ae:8d:9a:a6:1a:62:bb:91:c2:
         39:94:c9:98:0e:4b:cc:bb:82:d9:02:af:de:56:53:6e:0c:1e:
         02:de:1b:2e:ef:5e:77:b9:f0:0d:b5:0f:43:66:c0:b8:37:bc:
         e2:3b:c2:11:9b:e2:e9:b2:a4:b2:e8:e7:70:c2:c5:32:0f:47:
         69:e0:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org