Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3f1bc5def408c17ae8e5f09de6d2cbf3eb4cbf87.roa
File:                     3f1bc5def408c17ae8e5f09de6d2cbf3eb4cbf87.roa (raw, json)
Hash identifier:          +x4c4eu3BCKRsN4G+6kayFlU1gx5pEmHFw3IB6OLAjE=
Subject key identifier:   0A:55:60:CC:04:26:19:5F:70:BE:62:97:1F:91:DA:BB:F4:F8:FF:A0
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1B0909
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3f1bc5def408c17ae8e5f09de6d2cbf3eb4cbf87.roa
Signing time:             Fri 16 Sep 2022 15:04:02 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        143.208.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771785 (0x1b0909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=3f1bc5def408c17ae8e5f09de6d2cbf3eb4cbf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:b1:2d:61:98:e3:7d:ea:a6:8a:a2:5d:7f:
                    d3:41:d0:43:fd:4a:68:62:98:f4:ea:c9:03:03:6b:
                    61:f3:b1:b3:6c:07:fd:ec:a8:d7:11:e3:16:00:c8:
                    07:a8:f7:63:12:2e:72:14:0d:7d:f6:34:50:c9:40:
                    38:45:c7:e3:f0:59:1b:f1:36:50:c9:7f:ba:e4:14:
                    e2:cd:c6:b7:92:9f:74:3d:36:9d:87:7a:ab:6a:bf:
                    73:ec:4c:a6:ea:48:9b:98:9d:21:78:54:7f:e5:50:
                    f6:3e:ae:81:32:9b:be:a0:67:92:d4:5c:62:82:28:
                    73:1e:ce:2c:57:fe:0c:68:d4:04:25:72:52:ea:63:
                    37:46:74:cb:6e:1e:a0:15:19:2f:83:ef:2b:3d:54:
                    8f:ac:79:d3:3c:bb:cd:a3:16:8c:a2:39:a0:d3:91:
                    66:69:2e:a8:33:a2:e4:cb:24:95:8e:07:cc:20:60:
                    7b:c0:b3:59:86:2f:fd:c1:32:f9:ed:2b:1b:d8:0f:
                    c0:49:b6:54:5d:16:7e:25:e5:58:72:b6:2f:66:c7:
                    2e:5a:97:94:ad:3b:93:6f:8c:34:53:2a:64:27:ee:
                    12:ab:7b:51:ed:42:1a:6d:bb:96:2b:bf:35:0f:8d:
                    56:d2:ff:a1:03:7f:9c:6f:b4:1a:f5:6e:68:ee:eb:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:60:CC:04:26:19:5F:70:BE:62:97:1F:91:DA:BB:F4:F8:FF:A0
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3f1bc5def408c17ae8e5f09de6d2cbf3eb4cbf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:77:95:c2:03:61:e9:1e:67:a5:19:4e:70:a3:d1:44:14:
         e2:bd:90:e8:9b:56:54:0f:0e:b8:f3:fc:04:13:d7:77:96:5a:
         33:08:23:82:35:85:f7:11:41:d0:d4:4c:94:de:82:68:60:93:
         61:fb:42:bc:7d:60:07:d3:37:cc:00:71:e0:30:d9:1d:05:0b:
         ba:c4:91:7e:0e:38:4b:5e:f5:02:20:e9:ca:ed:d5:12:78:8f:
         ea:93:e7:9b:57:a4:8e:eb:78:f9:b9:44:3b:49:cb:a8:a9:7c:
         66:2d:a0:65:0f:c2:8e:c7:27:89:a8:a6:19:5b:43:5b:93:f7:
         e5:36:e6:63:52:e4:98:67:d7:c5:71:9e:15:c6:ce:c8:f8:67:
         3b:9f:3a:e9:5d:4a:63:88:bf:80:dc:41:60:f1:6e:8c:eb:5d:
         69:f6:50:16:9a:a4:7e:95:dc:12:fc:83:3d:eb:0c:48:c2:9c:
         32:3f:1f:b0:0b:a9:a2:a1:31:2c:86:e7:fb:74:9a:60:51:8a:
         d6:3a:a4:34:00:19:3e:74:05:4e:e0:02:d8:4d:14:25:a0:73:
         0d:b1:00:6f:94:6f:47:a5:a7:81:c7:b8:8e:68:05:5a:e2:df:
         d0:86:09:dd:f7:63:2e:57:78:4d:f8:02:b0:5f:b1:10:76:18:
         bf:bc:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org