Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/82963428c43c44d98012eedbad285452fe76b722.roa
File:                     82963428c43c44d98012eedbad285452fe76b722.roa (raw, json)
Hash identifier:          itx7eI1MRHC+NiToSmFo9wXX/hz+JRp5PfQSrxG2PBw=
Subject key identifier:   E5:E6:F4:3D:09:90:78:A2:86:67:66:DC:B3:60:BD:61:CA:A0:F2:D9
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       16DD77
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/82963428c43c44d98012eedbad285452fe76b722.roa
Signing time:             Sat 01 Jul 2023 16:22:05 +0000
ROA not before:           Fri 30 Jun 2023 16:22:05 +0000
ROA not after:            Tue 01 Jul 2025 16:22:05 +0000
asID:                     269918
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498487 (0x16dd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Jun 30 16:22:05 2023 GMT
            Not After : Jul  1 16:22:05 2025 GMT
        Subject: CN=82963428c43c44d98012eedbad285452fe76b722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:1f:5b:4a:60:20:4b:4f:28:f4:4f:ba:1f:
                    e8:13:a9:d1:1a:c2:40:7d:37:c7:db:07:a6:f3:98:
                    5b:83:be:f2:00:45:98:5b:0f:80:8f:fc:a1:e5:6d:
                    7d:51:4e:b0:4d:ff:3f:d0:50:95:33:79:8d:d2:b2:
                    91:70:44:f2:df:75:f1:ca:24:f3:59:fa:a3:b2:87:
                    1d:58:12:29:83:4f:6a:e2:4a:b7:45:11:c8:71:be:
                    d8:d0:e3:57:c5:07:00:d2:d0:db:dd:ec:fd:8c:19:
                    2e:65:80:80:83:90:6b:8d:7b:f6:22:9f:87:6b:c5:
                    68:91:e0:61:e4:83:95:e6:2f:d4:97:e6:e6:ad:16:
                    c5:d2:b4:0d:83:54:d5:cf:12:68:5a:ea:e7:f7:27:
                    37:e5:d5:d3:fb:7d:44:68:1d:e3:45:a0:fa:6e:d6:
                    d3:e8:07:d6:3e:bd:fc:b9:c5:fb:0f:77:2f:8a:e9:
                    d9:bd:5d:98:2d:9b:1a:31:0a:b4:45:bf:1c:3f:e4:
                    4a:90:36:7a:b0:de:7a:d9:5d:1a:04:95:7f:73:9c:
                    1d:5d:0c:35:84:52:06:8a:e7:df:02:c2:8e:38:b4:
                    22:87:dc:7a:6c:3d:bb:9f:0e:d2:a4:05:36:9c:3a:
                    ff:a9:13:2f:95:fa:be:ca:ce:6a:d0:b8:9f:36:b4:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E6:F4:3D:09:90:78:A2:86:67:66:DC:B3:60:BD:61:CA:A0:F2:D9
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/82963428c43c44d98012eedbad285452fe76b722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:91:c9:f1:1f:15:cf:55:f6:ec:36:7c:1e:62:f5:ec:84:
         11:f9:0f:41:ea:2f:ca:05:41:9f:b5:7b:9c:61:c9:8b:26:6a:
         a5:9f:a9:a5:52:67:15:c5:fc:02:94:8f:35:86:f1:c4:32:89:
         40:13:4f:e7:e7:09:b2:ab:ae:94:7a:19:c8:80:f9:1f:bc:05:
         84:64:0f:03:a6:c5:b6:66:ac:b4:77:4c:67:ef:4c:87:74:c4:
         3c:d3:74:cb:e9:d9:e6:a1:0e:e5:e4:19:f0:93:b0:f3:9e:37:
         9e:41:6b:dd:70:19:54:42:ee:0b:b0:34:88:56:cf:0e:fb:c0:
         33:81:97:06:e9:72:7f:87:6e:bd:2b:49:71:55:85:4b:0e:d1:
         ab:c9:05:38:05:3c:36:82:15:37:66:a4:49:32:4e:49:17:19:
         a9:5a:a8:0f:b0:27:59:3d:1c:0c:aa:84:77:e5:a9:44:cf:bb:
         0a:da:6c:17:c0:72:46:f4:96:eb:ab:07:aa:b9:67:63:1a:e1:
         3e:cb:a6:2f:58:01:67:5d:0d:90:89:1b:92:48:7f:1f:97:cd:
         34:ab:db:77:6b:6f:aa:e9:2f:9d:aa:1b:18:8b:95:8a:76:9a:
         c1:33:22:8c:4d:1c:18:5e:ec:1c:b9:31:0f:ce:2c:b5:a7:50:
         e5:82:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org