Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4c02e81d091762d1b348ccbf9512a33aada206a8.roa
File:                     4c02e81d091762d1b348ccbf9512a33aada206a8.roa (raw, json)
Hash identifier:          No5mC93wOibAVzi2v9BIQ+A3QCX3lPLYnOpjdGFhD2E=
Subject key identifier:   A7:97:F8:C6:92:AE:EA:8E:05:29:A1:A8:2A:25:78:3C:F8:21:22:77
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1B180B
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4c02e81d091762d1b348ccbf9512a33aada206a8.roa
Signing time:             Fri 16 Sep 2022 15:06:38 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        168.228.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775627 (0x1b180b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=4c02e81d091762d1b348ccbf9512a33aada206a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:87:fa:c5:7a:1c:bb:8f:ce:7a:d1:6b:2b:
                    54:93:19:d9:37:36:44:c2:40:3c:d0:fa:9e:8d:70:
                    f2:31:68:65:f6:ac:04:22:0e:0f:74:ca:68:6f:ff:
                    d4:25:c3:0c:3d:6f:b0:24:93:e6:f3:2a:e0:3b:e1:
                    c4:9b:61:0f:0a:36:44:b4:91:f1:94:89:c0:05:10:
                    4f:46:a5:d4:2c:b3:58:3a:71:0b:b2:d6:36:b3:61:
                    d8:d7:43:97:4d:e5:43:79:c3:b5:2d:3d:a9:5e:15:
                    a0:76:12:c2:0c:87:b7:2a:e5:e5:6f:aa:4d:aa:d1:
                    25:dd:e4:34:26:9d:4e:0c:e3:34:6c:be:c9:2f:e9:
                    6a:eb:28:07:7a:5e:56:25:3b:9d:39:6f:97:4d:c4:
                    ad:23:aa:5c:68:58:d7:80:9c:c8:a4:ec:a5:8a:8d:
                    3c:7f:93:39:94:e7:5f:43:4b:a5:67:e9:b1:1b:6f:
                    f3:40:9e:84:fc:5b:d5:93:08:ce:82:a5:ed:0d:16:
                    a6:44:16:f4:65:0e:f8:e2:c3:fb:66:3a:df:f7:7e:
                    e6:86:b6:35:00:09:7c:02:5c:60:6e:a7:79:28:fc:
                    3d:20:43:2a:b6:6b:bc:81:d2:61:a1:69:4d:da:55:
                    b8:fd:38:61:13:9e:5d:aa:91:23:91:0a:6e:a5:06:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:F8:C6:92:AE:EA:8E:05:29:A1:A8:2A:25:78:3C:F8:21:22:77
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4c02e81d091762d1b348ccbf9512a33aada206a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:e6:55:4e:47:ac:a0:0c:db:74:3b:5f:87:70:d1:10:05:
         b5:c8:cd:4f:b2:d9:f2:53:94:69:8e:5f:8e:a0:6e:40:2d:3f:
         ec:58:36:cd:15:0d:3a:36:ba:bf:04:1e:f7:32:ae:38:e0:bd:
         e9:98:4d:d5:7d:f0:29:8b:de:02:55:9f:6a:a6:5f:8a:14:1d:
         2f:94:d7:62:41:5c:64:3d:f5:1b:69:54:84:c8:1c:ad:1d:5e:
         05:f2:c7:99:6d:c3:78:40:5b:a9:0b:e7:40:67:bd:fa:14:7a:
         09:04:07:8f:a3:41:bb:ca:c9:c1:96:bf:fd:ad:b6:6c:4e:80:
         51:6d:fb:aa:d0:f3:9b:d4:e6:61:2a:2e:ae:7e:ba:b7:3e:2e:
         ec:eb:c3:c8:b1:43:30:8d:ce:9c:09:b4:40:09:c0:23:4f:1d:
         6a:ea:25:6b:ee:0d:e7:a3:df:76:89:5c:55:bb:f4:97:9c:bf:
         48:5b:92:7b:18:3a:7b:cc:c1:02:21:90:c7:97:79:36:8a:f4:
         13:7a:25:f0:b5:c3:fb:8d:b3:e8:df:42:e9:db:18:d8:8e:a9:
         5c:49:dd:1d:6e:6c:e6:61:f9:52:f1:ac:da:1b:da:5f:be:85:
         8c:6f:57:57:47:c9:fe:17:e6:2b:d8:6e:0e:12:cd:db:b3:01:
         3f:3e:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org