Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa
File:                     993f34255d153f14abaf784fa027540af4dd0d10.roa (raw, json)
Hash identifier:          ZX3Swp4Bm9po4tbOrdPYGljxWQum11QFf75VgFmX4Ec=
Subject key identifier:   9C:84:32:28:E7:A6:38:75:69:93:6E:16:90:FD:D6:BC:30:FB:1E:A2
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       19EDE9
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa
Signing time:             Fri 03 Nov 2023 15:32:01 +0000
ROA not before:           Fri 03 Nov 2023 15:32:01 +0000
ROA not after:            Mon 03 Nov 2025 15:32:01 +0000
asID:                     269918
IP address blocks:        161.22.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699305 (0x19ede9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Nov  3 15:32:01 2023 GMT
            Not After : Nov  3 15:32:01 2025 GMT
        Subject: CN=993f34255d153f14abaf784fa027540af4dd0d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:52:9a:20:6f:96:50:1c:92:bb:a3:fd:4d:
                    57:f0:c4:3e:f3:c2:ff:8c:09:e3:69:b2:0c:ea:4d:
                    fa:ff:4a:48:61:35:ba:cd:0c:cd:45:bb:e4:bb:7b:
                    2f:2d:e2:3e:45:b9:74:88:92:34:a8:d9:5a:a4:ef:
                    ea:6f:84:f2:ac:22:87:71:84:d4:7a:33:93:98:4c:
                    40:08:c0:8d:0d:04:77:80:cd:0c:c1:64:d6:2b:c5:
                    bf:11:ba:64:8c:f5:32:bc:5e:1d:b9:1c:b8:b0:3c:
                    95:5e:1b:46:33:b4:4f:12:0b:44:51:77:c3:75:04:
                    53:ce:91:00:03:13:b3:6c:1c:61:03:3a:95:79:0c:
                    31:8e:83:9f:db:ee:95:99:50:2d:f2:6e:ac:17:05:
                    89:5d:5b:34:03:5f:6b:3e:94:9d:bd:4b:7f:c5:3c:
                    17:77:81:e1:b8:fc:3a:cf:ca:01:73:ec:65:55:ab:
                    5d:62:89:ab:01:fa:f3:25:78:64:a6:c2:a5:0c:02:
                    66:54:25:aa:e7:20:ea:da:17:ce:72:13:ac:da:b2:
                    3b:75:08:b2:8a:fd:56:80:0e:7e:aa:87:ca:bc:39:
                    f3:77:da:a4:32:da:9d:59:e9:72:e7:1b:ed:f2:ee:
                    2d:74:24:07:be:6f:91:30:d4:e1:2c:0c:e1:da:30:
                    01:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:32:28:E7:A6:38:75:69:93:6E:16:90:FD:D6:BC:30:FB:1E:A2
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:81:71:8e:ea:60:bf:c0:4e:1e:45:51:cc:04:94:29:61:46:
         92:da:ce:d4:cd:f6:f2:12:53:33:68:6e:06:0d:2a:72:76:0b:
         8e:40:80:c6:18:c6:78:e9:c3:70:91:ed:32:67:3d:2b:10:26:
         83:64:3d:06:8a:20:51:00:86:79:19:65:f3:22:c5:3d:66:04:
         19:9c:33:13:f3:74:8a:14:a3:b4:a0:67:54:9d:35:0e:6e:11:
         e4:10:8a:96:f5:79:18:25:4b:eb:80:b9:aa:2c:a0:49:07:9e:
         e5:24:38:5e:58:bb:ad:c3:81:d0:23:f9:b1:9c:0f:ad:03:9c:
         8b:2f:ea:29:b9:8d:47:a1:29:f1:d4:2f:09:5d:47:e9:57:b6:
         c6:f7:b8:ac:63:45:68:f2:50:0c:67:81:ac:60:83:1e:16:f7:
         bf:6f:4a:4e:aa:67:1e:ab:17:8f:c0:c0:a7:be:25:02:14:ff:
         22:24:42:63:25:ac:48:7a:2d:bc:01:1e:b0:4b:40:ac:53:af:
         57:2a:e1:e3:4b:59:ac:a9:4b:31:ff:06:8a:b8:85:fb:35:0b:
         87:d6:96:5b:d8:a0:0f:16:a4:f5:29:1e:f3:a4:7f:51:51:23:
         f6:4a:26:54:9e:31:e9:69:46:d1:8b:c2:0b:ac:ac:4a:be:66:
         42:74:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org