Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa
File:                     b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa (raw, json)
Hash identifier:          HTPqy29fro2WXhfIH81O/2Clp2cFL1oX7Hhdc8Z4CJo=
Subject key identifier:   D4:DF:5B:F3:4B:E5:E5:78:88:C4:E6:2F:27:58:B2:63:CA:81:51:5A
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       3FC0
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa
Signing time:             Sat 15 Oct 2022 16:56:57 +0000
ROA not before:           Sun 09 Oct 2022 14:19:50 +0000
ROA not after:            Fri 11 Oct 2024 14:19:50 +0000
asID:                     28415
IP address blocks:        189.201.224.0/24 maxlen: 24
                          189.201.225.0/24 maxlen: 24
                          189.201.227.0/24 maxlen: 24
                          189.201.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16320 (0x3fc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Oct  9 14:19:50 2022 GMT
            Not After : Oct 11 14:19:50 2024 GMT
        Subject: CN=b1f08059026419c0dc7db7799a8c452c89e3a0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:e4:3f:23:9a:9c:81:9d:00:be:75:f1:84:
                    ee:c1:5a:a2:82:82:1e:2a:af:02:49:ab:b0:f0:fd:
                    dc:0e:c9:ed:b1:1a:e6:b5:8d:7d:93:c9:2d:ea:35:
                    a2:10:72:61:76:75:a8:95:c8:9e:3a:f9:5e:32:fd:
                    13:91:a0:db:85:15:a9:bd:31:ff:aa:e6:73:c8:62:
                    2c:34:1a:7e:e8:3d:0c:18:b4:fb:cd:bb:ba:ec:68:
                    06:77:ea:02:a3:1f:da:04:0e:38:1c:a2:34:45:2d:
                    5b:a1:96:4b:5d:f1:2b:bc:d7:02:c4:76:63:9e:cf:
                    a1:e9:a1:51:44:de:57:3d:9f:97:bb:c8:7b:37:c9:
                    27:1f:e1:eb:dd:11:0a:04:6c:bc:8c:20:bb:6e:e1:
                    64:77:55:4a:2c:89:b3:12:8c:71:f2:1e:40:dc:66:
                    2d:f2:e2:ed:80:b2:41:30:68:70:e7:bd:6c:e9:a6:
                    c2:a7:ed:51:5e:92:4b:97:cf:ae:28:33:e6:67:f9:
                    c7:2f:9c:dd:dd:c9:a5:1e:88:1f:24:ff:29:b1:12:
                    e3:90:f4:ac:79:95:96:7c:51:1a:10:39:34:50:41:
                    c2:9d:75:d2:b1:13:e6:cd:23:08:f3:64:33:8c:92:
                    ae:ab:ee:51:32:fd:2b:93:6d:e5:be:f8:a8:a3:34:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:5B:F3:4B:E5:E5:78:88:C4:E6:2F:27:58:B2:63:CA:81:51:5A
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.224.0/23
                  189.201.227.0/24
                  189.201.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:66:37:aa:7b:96:49:c3:42:a3:42:f2:41:9b:0b:25:ed:9b:
         00:3f:2a:5f:32:ab:38:14:11:d7:f7:65:4b:8e:c1:aa:06:bb:
         78:b3:cd:85:e2:6f:36:04:41:9e:44:b2:4d:5e:19:91:3a:9e:
         80:8f:95:33:35:21:8c:ff:9e:c2:a5:51:cc:96:b9:ca:f5:81:
         01:d7:74:d1:14:e5:56:cb:d6:29:21:77:d0:5c:ae:47:93:f2:
         dd:09:4c:22:a3:f2:40:76:a3:9f:b8:1c:cf:a1:61:aa:66:e2:
         1f:6e:c0:f2:10:31:39:a3:16:2c:74:fc:33:4e:be:79:e2:bd:
         fd:01:3d:eb:cc:5f:51:0d:30:d9:bf:c7:96:ba:8a:07:de:cd:
         a7:77:62:f6:4d:08:0c:a3:83:77:99:9f:4e:ab:d9:d6:39:20:
         28:53:5d:ea:fa:89:6c:a7:62:11:82:df:52:25:2d:ce:84:e9:
         d3:2d:af:ec:b4:a1:1a:81:12:c1:24:42:22:28:1b:23:b5:03:
         c7:43:1a:08:58:14:a9:1e:97:37:dd:7c:0e:8a:56:d0:ac:4a:
         75:25:5c:69:ac:1f:2d:3b:02:d1:1f:6d:fe:eb:c8:c5:11:11:
         72:ae:a4:b0:7c:2b:e3:60:0e:10:ca:59:03:42:b0:3e:59:bc:
         2a:6d:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org