Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/9a37bc458149817bc04cabff017f102c03069e49.roa
File:                     9a37bc458149817bc04cabff017f102c03069e49.roa (raw, json)
Hash identifier:          SAxXxcm2m3LtYGmuSgxNLLGr+P2W8QAE8+dARnjQdsY=
Subject key identifier:   C6:BD:DB:39:74:7D:00:1A:9D:84:63:19:5A:A2:EC:2C:BA:DC:B2:70
Certificate issuer:       /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial:       21E925
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/9a37bc458149817bc04cabff017f102c03069e49.roa
Signing time:             Fri 02 Feb 2024 22:07:56 +0000
ROA not before:           Fri 02 Feb 2024 22:07:56 +0000
ROA not after:            Mon 02 Feb 2026 22:07:56 +0000
asID:                     269964
IP address blocks:        24.152.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222373 (0x21e925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
        Validity
            Not Before: Feb  2 22:07:56 2024 GMT
            Not After : Feb  2 22:07:56 2026 GMT
        Subject: CN=9a37bc458149817bc04cabff017f102c03069e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:2b:0e:40:0f:ad:c8:9a:de:d2:ee:5b:4e:
                    6f:cf:ee:59:7d:eb:67:11:61:d7:c0:38:7d:e1:e5:
                    d2:0b:7a:ce:23:27:2f:90:a0:4b:0b:3d:80:ba:d8:
                    c0:40:0f:a8:cf:5e:28:3c:6e:77:54:6c:19:2c:dc:
                    78:8f:db:e5:f8:d5:c7:e0:3d:28:4d:ba:5b:68:15:
                    86:92:61:e7:61:a5:02:2e:0e:c5:88:37:4a:20:f0:
                    85:cc:80:b4:53:87:ca:78:a8:a5:0c:78:1b:30:94:
                    eb:62:6a:94:ec:68:5a:82:e4:89:aa:0a:f9:ac:04:
                    2c:72:95:72:63:a8:9c:b6:57:0f:0a:d8:40:67:b9:
                    f4:80:f6:ac:27:8e:01:c6:fb:78:61:93:1d:02:ac:
                    20:c0:f8:1d:75:da:c6:25:b0:30:fb:72:95:6d:fc:
                    13:38:09:8d:ec:97:13:75:b4:e3:8d:63:26:f4:d4:
                    7c:1e:ad:9e:a5:cb:0a:e0:91:b9:9d:d3:af:f6:58:
                    e7:41:87:32:99:d9:05:6a:84:04:d8:31:06:39:98:
                    c7:d8:e9:bb:b4:7b:26:e8:9d:6e:68:07:1a:b2:b6:
                    fa:ce:ca:32:75:9c:6b:7d:ee:4c:1c:00:dd:f1:ba:
                    95:a1:c3:b2:81:ac:4c:b1:d1:a4:e5:10:be:45:09:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:DB:39:74:7D:00:1A:9D:84:63:19:5A:A2:EC:2C:BA:DC:B2:70
            X509v3 Authority Key Identifier:
                keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/9a37bc458149817bc04cabff017f102c03069e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:62:0a:8c:a5:14:09:0b:1a:b4:d4:b5:d5:cf:49:39:29:fb:
         98:f9:ee:8f:16:ba:38:e1:83:1a:27:02:68:9d:22:43:c4:ba:
         4a:1a:6e:9d:82:e9:c6:9a:48:3c:d9:32:2b:49:48:23:4b:3b:
         e1:1a:cc:e7:ec:5c:cb:83:12:94:f6:27:56:58:e2:e5:82:d2:
         50:b0:67:7d:75:39:4e:fa:b8:79:48:4b:f5:a3:37:d7:13:de:
         fe:fb:bf:4c:f4:18:13:09:e8:55:a8:29:bd:3e:62:3c:f4:5b:
         82:0c:20:9e:c1:79:85:ad:79:e6:33:5e:19:b1:44:af:3e:3b:
         42:47:56:2d:8a:13:ef:f6:47:9f:30:b3:43:2d:63:e5:fb:fb:
         b8:28:53:99:d1:f6:a2:d9:6b:3f:c6:5c:61:b0:63:e5:3b:09:
         54:ee:56:80:cb:00:00:bb:43:ba:3f:e6:f6:32:cb:0d:4f:d4:
         f7:b6:e2:3b:e9:13:07:aa:e8:92:6e:8d:90:e3:44:e4:23:00:
         3f:a0:ba:ba:7c:c4:ff:53:0f:5e:ec:a3:06:1d:b2:2d:fc:70:
         b5:46:f1:c6:b7:c6:02:da:dd:98:6d:84:c9:06:bb:c3:12:0a:
         96:a5:81:04:65:37:65:6e:5a:89:c7:bd:49:de:94:86:49:2c:
         27:2b:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org