Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1e8a9dc1e3141c53ceca4d3d830e5c55aba75fb7.roa
File:                     1e8a9dc1e3141c53ceca4d3d830e5c55aba75fb7.roa (raw, json)
Hash identifier:          zcO7h+5UYGwoAHJSdM9GJsPuMAM8suLpuZ1pGadYWQQ=
Subject key identifier:   81:39:82:9B:AF:6B:38:4D:F2:5E:30:2B:92:48:0A:37:72:EF:59:40
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       0A4AA1
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1e8a9dc1e3141c53ceca4d3d830e5c55aba75fb7.roa
Signing time:             Thu 17 Feb 2022 14:48:56 +0000
ROA not before:           Wed 16 Feb 2022 03:00:00 +0000
ROA not after:            Wed 24 Mar 2027 03:00:00 +0000
asID:                     271915
IP address blocks:        161.22.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674465 (0xa4aa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Feb 16 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2027 GMT
        Subject: CN=1e8a9dc1e3141c53ceca4d3d830e5c55aba75fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:ee:33:69:97:98:f5:39:d0:2a:5d:d2:e3:
                    91:a7:ee:53:62:b6:c5:99:c8:2a:35:bc:6e:32:0e:
                    ec:df:06:b4:21:be:b4:74:56:68:93:f2:0f:95:16:
                    c1:2b:00:27:0b:06:64:45:7a:a5:b0:98:cf:64:8f:
                    b1:56:0d:08:75:a1:bb:0a:f1:6e:2f:4b:5a:8e:da:
                    f0:dc:c4:e1:42:69:61:99:e9:44:98:30:14:79:6f:
                    4d:47:32:25:95:d2:9d:4a:ab:18:33:94:71:b9:f2:
                    18:22:e6:6e:17:05:cb:03:12:0e:8f:f2:9e:c5:32:
                    9e:6d:31:5e:c1:ac:e6:b3:91:de:df:79:17:45:06:
                    19:a4:3d:49:f8:e3:12:30:7e:de:df:cd:5a:b4:3f:
                    88:15:b5:d6:65:d7:8e:aa:bf:a5:15:6f:77:f3:8f:
                    ed:84:07:d9:5c:e1:c9:5d:45:71:84:2a:b6:ed:9d:
                    da:a8:99:52:49:71:91:2b:45:21:be:ef:5a:32:6d:
                    c4:d9:dc:22:59:0e:d4:14:f3:1d:d9:14:0e:25:b7:
                    5f:38:83:9b:fc:96:24:06:58:91:66:ba:c4:6c:ea:
                    c2:40:1f:b4:ee:e9:bb:1d:37:00:a8:69:08:ad:63:
                    17:63:f1:4e:a5:8c:91:8e:c8:1d:7c:57:d6:ab:bb:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:39:82:9B:AF:6B:38:4D:F2:5E:30:2B:92:48:0A:37:72:EF:59:40
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1e8a9dc1e3141c53ceca4d3d830e5c55aba75fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:3b:78:8b:5c:73:61:9d:b3:35:5a:eb:b1:67:1c:69:26:
         5a:3a:c5:5a:86:da:9c:81:7d:a2:b7:90:fc:27:5b:f3:74:8d:
         2b:97:ad:de:08:df:7f:39:a5:fc:c6:f8:f3:9d:92:ec:19:8e:
         14:e8:0f:d4:df:c8:17:f6:0a:f7:8d:8a:58:fb:8b:cb:d2:50:
         85:0c:99:06:3d:48:4b:a3:18:37:72:ca:88:ac:53:1f:98:27:
         d7:f5:cc:ae:26:30:bb:ab:ed:00:ea:d7:a2:50:dc:7e:e1:a6:
         27:66:a9:3d:4d:42:84:aa:ab:af:62:a0:48:0f:13:db:55:a8:
         02:8a:97:89:39:89:16:ea:fb:64:dd:0c:82:5a:13:1e:e7:cd:
         6e:e3:85:7c:a8:f4:fb:55:04:2b:dc:24:46:5e:10:94:56:76:
         d7:ee:0d:c5:bd:a7:ba:de:47:9c:88:42:83:98:21:ff:75:26:
         7e:fd:4c:8d:07:90:2c:e1:98:53:a3:cc:d1:ea:b4:24:51:c1:
         06:f5:56:61:0b:0e:99:31:7f:fb:84:68:14:02:20:42:4b:6a:
         b6:5c:47:2b:9f:39:f7:f6:f7:92:6e:b9:e2:78:88:b2:95:9c:
         46:c6:e9:79:fc:cd:bd:8d:29:be:f0:3b:32:1c:88:f4:09:3b:
         ed:c7:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org