Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/eab124a59b42c9651cb3990188b82285c737f364.roa
File:                     eab124a59b42c9651cb3990188b82285c737f364.roa (raw, json)
Hash identifier:          nAUMGKFFCFvhVlqkUkn1O5RY2gQcSdPqCrPj+Sgh/Dg=
Subject key identifier:   12:E6:4C:4D:75:69:39:73:D7:E7:C3:3C:0D:5F:A5:4F:93:18:81:A4
Certificate issuer:       /CN=31742366465ae7b8aabae7fbfcda60083162897c
Certificate serial:       17D54F
Authority key identifier: A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/eab124a59b42c9651cb3990188b82285c737f364.roa
Signing time:             Sun 05 Jun 2022 18:00:02 +0000
ROA not before:           Sun 05 Jun 2022 03:00:00 +0000
ROA not after:            Sun 05 Jun 2050 03:00:00 +0000
asID:                     263702
IP address blocks:        131.221.32.0/22 maxlen: 24
                          138.255.100.0/22 maxlen: 24
                          168.195.128.0/22 maxlen: 24
                          2803:3b80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561935 (0x17d54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31742366465ae7b8aabae7fbfcda60083162897c
        Validity
            Not Before: Jun  5 03:00:00 2022 GMT
            Not After : Jun  5 03:00:00 2050 GMT
        Subject: CN=eab124a59b42c9651cb3990188b82285c737f364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:3a:0b:7f:bb:e1:46:9d:78:62:3a:c1:aa:
                    e7:6f:7d:e3:64:32:4b:01:b6:9e:c0:f0:3f:a6:b8:
                    22:9b:44:fd:a2:ee:c7:f9:9b:fd:73:eb:7b:2c:fc:
                    01:a4:38:2c:fd:02:4f:22:ef:e4:1e:96:9b:c0:60:
                    6f:79:c0:93:27:97:55:d6:64:e2:da:54:67:0d:e7:
                    31:1c:b8:8c:e6:94:c6:98:9a:23:99:28:90:d3:21:
                    fb:dd:e2:62:1d:3b:10:3e:ce:3c:07:13:8c:9e:1d:
                    44:17:66:0c:60:bc:4f:99:34:bc:80:76:90:f4:80:
                    4a:09:10:6e:43:a5:0a:d5:a9:3e:1a:24:2b:80:72:
                    86:61:98:02:c9:46:0f:29:b1:53:a5:89:6c:10:2f:
                    18:ef:ca:1e:85:69:88:6d:da:d9:81:db:4c:34:c6:
                    e7:ec:81:31:e1:86:69:a4:b5:e1:e3:5d:59:af:3f:
                    c9:3d:0c:22:f3:84:8b:66:0a:63:60:59:54:0b:b0:
                    b3:1e:fc:cc:d1:36:8e:4c:35:31:24:bd:2c:36:12:
                    c0:8e:cc:da:76:13:3f:71:cb:73:f4:f4:88:5b:5d:
                    7e:13:c5:02:9b:47:ab:15:38:25:6b:ba:c3:91:49:
                    40:06:ef:73:bc:d2:38:c7:61:7c:97:69:32:5a:71:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:4C:4D:75:69:39:73:D7:E7:C3:3C:0D:5F:A5:4F:93:18:81:A4
            X509v3 Authority Key Identifier:
                keyid:A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/eab124a59b42c9651cb3990188b82285c737f364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/31742366465ae7b8aabae7fbfcda60083162897c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.32.0/22
                  138.255.100.0/22
                  168.195.128.0/22
                IPv6:
                  2803:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:9b:95:44:af:22:11:7c:11:2b:1e:0f:a7:f0:f9:b0:0b:
         3f:3d:df:0f:52:7e:87:b3:f9:d0:ee:57:41:0c:08:e5:a2:24:
         3b:5b:4e:7f:e4:92:52:14:62:5b:cc:b1:c3:66:07:e8:30:05:
         33:69:bb:f7:7e:ec:56:e6:ce:1e:18:9b:19:5e:8d:df:c9:fe:
         0c:45:98:2d:d8:29:0c:b8:b5:49:d7:8d:bd:f0:d1:3a:2e:6d:
         0d:34:18:94:c8:9c:f0:5c:63:39:53:ec:57:41:94:54:d3:3e:
         f4:36:73:96:c8:f8:71:75:08:8b:9e:bf:28:c4:8d:98:be:03:
         45:f7:32:54:c7:08:5c:d2:ea:20:f9:81:0e:eb:d1:54:d6:3b:
         e6:ba:13:cf:3c:da:87:79:f3:b6:55:95:2b:61:73:4e:87:34:
         a6:0a:2a:76:d6:d6:6e:83:b3:9f:ad:06:4e:b7:96:92:ea:1c:
         f2:27:05:83:b8:19:fd:71:21:1c:c5:54:d0:44:56:43:3c:fd:
         af:da:5a:6b:42:95:84:ce:ca:86:e1:a8:5a:59:a3:d2:ea:ef:
         f5:0d:f2:e4:ba:b9:1d:49:c4:70:63:17:e8:1c:1b:43:15:75:
         2e:78:05:91:2e:aa:e3:5d:8e:8b:64:ef:fb:a3:cb:9d:33:0b:
         0e:f4:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org