Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7184ded9ae67ebf9d038e716318a2589ba7ce668.roa
File:                     7184ded9ae67ebf9d038e716318a2589ba7ce668.roa (raw, json)
Hash identifier:          TL3XcUzY62ibPbV8iHZ3xBuK3VXsnkqMUB5IGUgs3Xw=
Subject key identifier:   9E:14:3C:40:B1:0A:15:F8:9E:01:DF:78:91:39:5B:32:8D:EE:F8:31
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       1BB358
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7184ded9ae67ebf9d038e716318a2589ba7ce668.roa
Signing time:             Thu 11 Jan 2024 21:27:27 +0000
ROA not before:           Thu 11 Jan 2024 21:27:27 +0000
ROA not after:            Sun 11 Jan 2026 21:27:27 +0000
asID:                     272809
IP address blocks:        161.22.34.0/24 maxlen: 24
                          161.22.35.0/24 maxlen: 24
                          161.22.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815384 (0x1bb358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Jan 11 21:27:27 2024 GMT
            Not After : Jan 11 21:27:27 2026 GMT
        Subject: CN=7184ded9ae67ebf9d038e716318a2589ba7ce668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:1f:f7:70:c5:38:d4:29:97:dd:a8:e2:69:
                    7e:58:73:01:f4:10:07:7a:a8:1e:47:73:75:fb:b8:
                    f7:17:ba:b7:53:37:cf:b5:d0:fe:4e:3a:12:93:8c:
                    42:fc:b2:03:02:f2:65:7a:99:b1:1b:ed:84:f4:5c:
                    42:9a:ec:60:58:5c:6b:30:00:6b:df:d7:29:0b:c7:
                    f2:e8:25:09:cf:4a:ed:7b:be:f6:57:e5:bd:63:dc:
                    07:64:6e:6a:75:f7:a4:2d:a9:af:2a:89:39:46:08:
                    76:ae:97:fe:b5:52:ef:90:72:78:3b:2b:36:f7:e2:
                    dd:99:19:b8:fd:7f:bd:3a:17:fb:a2:90:19:25:4a:
                    ae:5c:bd:f8:03:54:4a:18:e7:5a:31:0d:dc:db:37:
                    bc:35:d0:fd:6d:32:29:a3:f2:97:20:3c:08:67:1e:
                    a6:0e:44:2e:af:f7:9f:47:65:b1:3e:2a:42:35:b6:
                    50:11:3d:c5:d7:61:1b:7a:6c:e7:85:ad:17:90:3b:
                    a7:ac:69:1c:ed:ea:c4:53:d2:b5:7f:f8:9c:d8:b0:
                    ec:e2:98:a4:f6:9a:60:c0:a6:d3:e3:e4:6d:5e:d9:
                    84:d4:a3:88:b2:69:ed:7d:64:59:07:17:f2:c4:ea:
                    ec:7b:63:75:92:0f:a8:80:77:18:e7:95:0d:97:17:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:3C:40:B1:0A:15:F8:9E:01:DF:78:91:39:5B:32:8D:EE:F8:31
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7184ded9ae67ebf9d038e716318a2589ba7ce668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.34.0-161.22.36.255

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:22:f8:5d:40:5c:68:15:e2:52:f2:8c:6c:ca:60:21:c1:
         34:70:87:68:a3:2e:47:bf:3b:7b:8c:29:2e:97:44:af:4c:d4:
         ba:0b:6e:60:6a:df:bd:b9:49:e5:cd:85:2d:96:00:5c:d1:13:
         d0:cc:dc:04:8b:b1:9c:c8:05:05:ac:19:c3:c9:ab:02:64:c4:
         fd:45:7b:84:e0:1e:4e:1d:cf:7a:18:84:17:37:6e:be:21:9b:
         de:f4:66:be:8c:cd:39:6a:05:a2:cb:23:52:2d:10:e0:be:65:
         b8:8f:47:3f:38:74:d6:83:14:d4:3b:19:89:6f:62:9d:aa:ec:
         f6:04:55:8f:f8:b7:11:c0:a7:c9:a6:fd:1d:68:d1:3f:7a:04:
         bb:a5:ad:e6:64:ef:fd:88:0c:f0:09:21:d4:c7:69:5f:74:47:
         0d:e4:59:ee:51:d7:19:cf:4c:a6:c6:2d:98:1a:ee:d1:6b:ab:
         c5:24:f6:c7:ee:39:d3:eb:36:33:2e:61:db:97:41:12:ec:2a:
         d7:06:a7:6a:96:7b:e0:93:3a:5c:17:b6:a6:05:78:b1:ab:c4:
         17:92:e5:31:74:38:44:9a:df:09:cc:03:97:b8:2b:d6:1e:79:
         38:22:2b:1f:42:6e:a0:08:b2:ae:20:8b:cc:9b:b8:63:19:89:
         26:ef:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org