Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa
File:                     01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa (raw, json)
Hash identifier:          chgnbObsNrKE6scVGJelPEutvGyAZ41ufm9beqJdQM8=
Subject key identifier:   A6:CE:38:A5:F5:29:FB:14:62:25:7E:CC:E9:E7:8A:20:24:6F:74:D7
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       1075FE
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa
Signing time:             Thu 27 Oct 2022 16:50:56 +0000
ROA not before:           Sat 25 Dec 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270026
IP address blocks:        161.22.36.0/24 maxlen: 24
                          161.22.33.0/24 maxlen: 24
                          161.22.34.0/24 maxlen: 24
                          161.22.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078782 (0x1075fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Dec 25 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:3a:bb:4e:3d:6b:c9:38:f6:58:c3:eb:2b:
                    f4:fc:4f:79:01:07:d0:73:ca:1a:3b:c2:2f:f3:92:
                    c0:68:c2:c8:0e:f1:15:42:42:2b:c8:80:ae:1d:64:
                    d0:f1:56:cd:f5:11:59:fc:84:58:97:82:08:3f:2e:
                    20:26:5e:07:b5:0c:d4:33:48:4b:63:48:37:93:b6:
                    72:ef:bb:84:e4:4c:0d:07:05:6c:ee:9e:96:69:b7:
                    a0:65:4c:06:04:ac:da:52:d3:44:c3:e1:13:b4:c7:
                    2f:a5:38:03:a5:d0:5f:3e:68:97:0e:ba:06:10:16:
                    8d:fc:89:d0:37:82:d3:6c:63:3e:2d:4a:d8:44:1f:
                    73:3a:05:a9:6b:5b:9d:e9:bf:a2:73:5b:37:4e:1d:
                    c3:99:33:16:a1:8d:c5:73:39:4e:6b:18:ac:10:1d:
                    e2:f5:91:da:00:d5:22:27:e1:6b:04:79:32:88:36:
                    3a:3b:db:85:a6:fe:2d:73:75:fa:2a:df:91:0f:5d:
                    a9:9c:27:83:17:cf:07:3d:8d:44:fd:d3:a3:5c:ff:
                    af:f2:af:18:e8:47:f6:22:f7:15:8f:e7:27:99:b3:
                    c8:d6:b5:7e:fd:b6:92:03:db:c3:c6:8b:75:cf:00:
                    c4:bf:07:95:4f:74:90:35:f8:a9:57:cd:ff:76:dc:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CE:38:A5:F5:29:FB:14:62:25:7E:CC:E9:E7:8A:20:24:6F:74:D7
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.33.0-161.22.36.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:02:f0:92:0d:2a:5a:ad:2a:17:8b:86:06:44:53:3b:87:
         63:7d:9a:e5:dd:8e:42:e2:2a:f2:17:83:cd:62:39:67:9e:75:
         4a:fb:d1:a0:8c:9f:f8:1c:7f:7a:85:be:59:08:01:cc:c2:42:
         20:f7:c5:50:06:3e:c6:dd:e5:18:2e:7d:4d:42:7b:91:d3:68:
         de:6a:12:88:e2:9c:82:3d:25:a8:d9:d3:1b:c2:f4:cc:49:80:
         e3:10:69:b9:d6:04:35:87:6a:c5:a9:34:f8:ce:c5:42:32:f4:
         cf:f4:c5:2d:2f:5f:7e:01:80:e9:db:8a:b1:ef:46:bb:cb:ed:
         25:8c:21:e0:69:1f:42:7c:ed:44:e1:b0:55:57:ab:52:e6:4f:
         d0:b7:cf:45:8c:4b:bb:e7:eb:f0:30:0a:2e:e3:34:99:78:37:
         39:99:96:6b:fe:69:93:55:a6:b4:a7:35:bf:d6:eb:b8:fa:00:
         e8:6d:c0:4e:06:7b:6d:e4:36:a9:34:70:85:83:05:3e:d2:f2:
         5a:e3:c3:49:12:63:72:7e:44:72:ef:16:d8:a7:c0:59:f8:51:
         36:ac:79:ec:38:f8:6b:41:d7:62:1b:a1:50:4b:74:f8:49:2d:
         e8:90:ed:2e:f0:48:bf:3c:1c:ab:fb:80:31:b9:25:d7:7d:bd:
         f8:93:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org