Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3fc2d91c8a6ce9a8db1a983aa8c00cc04fb545af.roa
File:                     3fc2d91c8a6ce9a8db1a983aa8c00cc04fb545af.roa (raw, json)
Hash identifier:          IrarO2VlJ818HfLKZe3mAj3Yo7N2P6wqnEz3Q+QjzXs=
Subject key identifier:   C2:2D:B1:53:BE:E2:C3:FF:FA:7A:F8:8C:61:0C:F5:1B:0D:99:0C:2B
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       162991
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3fc2d91c8a6ce9a8db1a983aa8c00cc04fb545af.roa
Signing time:             Tue 06 Jun 2023 12:38:40 +0000
ROA not before:           Mon 05 Jun 2023 12:38:40 +0000
ROA not after:            Fri 06 Jun 2025 12:38:40 +0000
asID:                     269918
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452433 (0x162991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Jun  5 12:38:40 2023 GMT
            Not After : Jun  6 12:38:40 2025 GMT
        Subject: CN=3fc2d91c8a6ce9a8db1a983aa8c00cc04fb545af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:16:30:8a:79:2b:48:33:06:09:c1:c4:f1:
                    1f:18:b3:5b:cb:27:20:4f:44:13:71:e1:af:9b:61:
                    ef:72:86:8a:5e:f6:61:55:48:82:ea:b4:a3:60:a7:
                    58:72:c4:3c:8e:20:92:25:04:83:dd:47:06:db:3b:
                    53:8f:1b:38:e2:fb:2b:5b:95:99:1e:ed:56:c9:c7:
                    fc:c5:19:e1:b5:a8:c6:dd:40:15:35:22:c7:9f:85:
                    70:45:bb:1d:40:d4:de:bd:b3:8b:68:0c:81:41:64:
                    f6:ec:75:11:52:d4:d7:ca:48:4f:bc:a6:57:ac:99:
                    7f:d0:ad:4a:09:43:73:f8:25:73:da:5a:9b:f7:de:
                    d5:35:89:47:0d:56:8f:53:bc:a0:0d:60:fa:65:85:
                    ae:df:c1:c3:12:a0:c9:39:eb:21:2c:1e:2c:47:7a:
                    ed:d2:73:ba:bf:44:f5:6e:59:d0:9d:75:74:88:e8:
                    db:00:bd:42:d2:eb:8d:03:86:dd:19:9d:1d:f2:70:
                    00:59:29:3e:f7:67:64:d2:47:4f:e5:01:e2:8d:7c:
                    1d:00:89:91:b5:97:08:26:a1:1e:12:b5:e7:2b:32:
                    4e:6a:43:75:79:da:37:5f:ad:f5:17:f9:91:05:2b:
                    88:a2:cb:c2:b7:18:5b:c9:c8:b3:45:81:02:6e:92:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:B1:53:BE:E2:C3:FF:FA:7A:F8:8C:61:0C:F5:1B:0D:99:0C:2B
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/3fc2d91c8a6ce9a8db1a983aa8c00cc04fb545af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:20:49:ad:36:2e:2b:b5:94:a5:df:23:ab:8d:ea:ec:0d:89:
         8f:db:ee:6a:6f:5f:e4:61:6e:18:cc:aa:1b:64:77:65:f7:72:
         76:04:39:78:8a:28:f3:54:35:be:d7:20:ea:a8:a6:db:ec:76:
         b6:0b:10:9f:5c:2f:cd:e6:53:d3:de:49:be:b9:74:86:c2:d7:
         5f:95:77:9c:b3:58:7a:68:98:73:58:dc:93:eb:64:cf:a3:c3:
         25:f7:d7:d5:7f:c7:b0:1d:18:e6:98:28:81:f0:25:10:55:48:
         8d:4b:09:e2:29:6c:3b:8d:ff:fb:08:4d:52:62:a4:5d:74:ac:
         eb:c2:63:63:f7:b5:72:aa:ed:cf:81:0f:60:4f:27:78:45:25:
         df:8b:04:ef:73:41:4a:95:98:98:a4:ee:48:78:35:28:c0:08:
         6b:cb:fa:db:a6:b8:fb:89:d2:bf:d2:25:72:24:c5:29:f1:6f:
         7f:41:3f:35:cb:be:2a:fb:11:99:95:f8:3b:86:c2:16:51:dc:
         81:5d:24:bf:5d:4f:ab:58:55:13:d0:7a:f0:fe:48:9b:2f:a5:
         bc:64:ed:67:cb:49:b4:7a:36:87:ed:23:40:cc:a5:f8:0f:f8:
         71:e5:2b:d5:86:6f:50:52:8e:dc:b2:a9:5b:45:6d:60:72:b3:
         8f:49:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org