Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7cd0c968a40a03ff0226f288b7d87f9b9b87662d.roa
File:                     7cd0c968a40a03ff0226f288b7d87f9b9b87662d.roa (raw, json)
Hash identifier:          0y4Cji23lCP6luO5rLo6hT1acU0wiXhK/8kS9mkUlDM=
Subject key identifier:   86:2B:50:31:A4:DC:AF:9C:86:20:22:21:BB:9A:56:9B:EA:39:09:40
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       1623D3
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7cd0c968a40a03ff0226f288b7d87f9b9b87662d.roa
Signing time:             Tue 06 Jun 2023 12:36:38 +0000
ROA not before:           Mon 05 Jun 2023 12:36:35 +0000
ROA not after:            Fri 06 Jun 2025 12:36:35 +0000
asID:                     272874
IP address blocks:        161.22.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450963 (0x1623d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Jun  5 12:36:35 2023 GMT
            Not After : Jun  6 12:36:35 2025 GMT
        Subject: CN=7cd0c968a40a03ff0226f288b7d87f9b9b87662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:c3:31:e3:f2:21:5a:41:15:fe:40:7b:5f:
                    95:6a:fe:91:dd:e6:16:6e:d9:9b:f2:3b:61:11:67:
                    00:57:3d:b1:cd:06:52:ec:af:da:09:c9:99:42:e9:
                    c8:59:4b:3c:d0:df:2f:83:c7:31:74:ec:5c:09:13:
                    be:2f:4b:8d:17:43:3b:32:a2:a3:51:9b:14:7f:77:
                    5b:aa:2a:12:3b:2f:36:33:71:77:6d:75:70:a6:3e:
                    45:6c:a4:86:6f:2e:35:78:7f:0d:f6:ae:31:b7:54:
                    74:9b:f5:01:a0:15:3c:8c:17:d0:cf:73:18:33:41:
                    40:7f:71:3b:3f:7f:e6:fe:19:f1:00:24:1a:50:7f:
                    3c:16:db:79:ba:96:b2:a7:64:07:f3:6a:04:74:17:
                    84:32:52:e2:ab:0c:34:c3:dc:ba:a5:68:78:38:8a:
                    51:8c:1e:80:29:99:fb:03:8a:58:b0:ee:3d:8f:3f:
                    94:8f:e8:de:40:cc:26:99:78:8f:da:3e:33:ed:0c:
                    aa:b0:05:66:3d:47:0e:a5:14:0c:ec:0b:d4:07:5a:
                    d8:c9:8f:d2:cb:d0:d8:8e:28:91:e3:36:ce:c0:83:
                    c3:e6:ae:72:95:f1:34:ed:82:8a:9b:6e:75:84:18:
                    e3:d1:82:a1:7b:d7:f2:fb:7b:ef:a2:7b:44:92:74:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:50:31:A4:DC:AF:9C:86:20:22:21:BB:9A:56:9B:EA:39:09:40
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/7cd0c968a40a03ff0226f288b7d87f9b9b87662d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:fe:83:42:f2:1c:2b:31:cb:d6:e7:46:1e:54:0c:62:b1:
         86:d0:93:79:af:d4:fd:0c:cc:a9:48:bb:b6:b1:c6:7c:bc:19:
         8a:ca:ce:db:f2:00:6c:59:ff:52:81:19:47:16:bf:a3:fc:26:
         4c:2e:45:5a:56:3d:88:b1:c2:02:de:2a:a4:7e:a6:f1:5f:7e:
         32:18:51:d3:88:74:2e:25:5f:09:5c:18:48:0c:46:53:dd:4a:
         5d:e2:81:23:d8:0e:fe:45:30:3a:0d:5e:41:60:7f:bd:03:8a:
         d1:1f:4f:5b:18:f8:79:b5:18:77:1a:d0:7c:73:d9:61:a0:4b:
         3d:0b:ab:78:59:92:7e:d7:6e:fb:6d:31:4d:7a:97:b5:3e:1c:
         cf:41:9e:ad:68:93:1c:d4:b9:fe:b1:73:02:d1:6e:94:6b:1d:
         06:e9:b7:40:a8:4d:9c:87:8d:c6:27:0d:1a:61:35:24:2b:0f:
         b8:21:35:de:9e:a3:cc:90:b3:f9:8f:b0:d6:d4:6e:26:88:38:
         d2:98:f6:d2:46:f7:cc:d1:7e:f4:e5:4f:30:66:d7:5c:8d:26:
         8a:2b:4e:9d:d2:3e:e3:d2:e1:ee:dc:2f:65:1d:fd:42:91:2a:
         9b:85:58:45:1e:88:e0:3f:1e:d8:c0:fa:46:00:35:d0:f9:b9:
         8f:64:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org