Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/bd922ced939afc9cd1d54f6fe6f538b74e2b44d8.roa
File:                     bd922ced939afc9cd1d54f6fe6f538b74e2b44d8.roa (raw, json)
Hash identifier:          3WxdZ92SLcQwrchWYTKbYvE4ET7NSrUaTGRfqJ9KeEc=
Subject key identifier:   D6:03:66:6F:8E:3B:80:22:B2:85:0A:F6:69:87:65:21:5C:D7:CB:D9
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1B0A07
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/bd922ced939afc9cd1d54f6fe6f538b74e2b44d8.roa
Signing time:             Fri 16 Sep 2022 15:04:48 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        143.208.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772039 (0x1b0a07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=bd922ced939afc9cd1d54f6fe6f538b74e2b44d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:de:39:e5:ee:c6:d0:c5:d9:bd:ca:28:61:
                    06:f0:7e:35:80:ce:c2:32:2b:cf:9b:79:97:b6:a6:
                    a2:0e:3d:1d:e5:e2:aa:01:87:ab:ac:7e:c1:b8:6d:
                    69:83:d6:46:e8:47:43:7e:5a:1f:44:bd:e1:0a:a4:
                    92:8d:e4:8d:4c:8c:e7:7a:6b:39:4b:2c:b9:d1:d2:
                    8e:df:2a:90:1e:07:63:a8:1d:10:bb:8d:09:e9:db:
                    a6:17:88:ca:80:c7:93:f8:21:36:c5:78:5a:6d:16:
                    36:fb:5e:60:df:38:d4:c3:b5:51:b3:33:c8:0c:99:
                    0d:f4:50:6e:8b:18:40:51:2e:01:ba:e1:2a:9f:06:
                    8e:be:a4:a0:4b:25:16:dc:1b:3c:e5:5f:15:25:42:
                    ad:2d:5e:4f:63:50:b2:fc:65:c9:b5:48:2a:e7:7c:
                    0d:e2:b7:c2:7b:84:b6:e8:ec:fd:ef:4f:73:d9:11:
                    7d:d3:13:bc:6e:3a:08:b3:86:dc:b5:7b:bc:12:c0:
                    fa:86:4f:80:26:a2:6d:e9:e0:40:ea:e2:ae:15:a2:
                    08:21:37:c1:e9:cf:80:46:64:cd:a7:8f:79:75:7b:
                    5c:9a:fd:2d:a4:86:43:91:01:3c:46:11:24:30:bd:
                    6a:38:13:b9:3b:8f:7c:bb:50:f8:ab:d2:ac:2b:40:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:66:6F:8E:3B:80:22:B2:85:0A:F6:69:87:65:21:5C:D7:CB:D9
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/bd922ced939afc9cd1d54f6fe6f538b74e2b44d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:74:82:6a:f7:4b:74:7c:34:3b:8c:99:99:68:bc:c7:33:1e:
         fa:88:71:74:d8:47:dc:2a:a3:f8:ea:73:b7:0e:0a:f3:90:d8:
         97:e3:a1:38:45:dc:d2:75:de:f3:99:66:e2:c8:6f:3c:98:3b:
         cc:40:92:dc:72:ee:e5:55:c1:48:63:9d:59:7e:51:b7:39:5b:
         b3:f9:37:4d:a6:07:2d:6f:5b:bb:21:ef:62:e0:62:a8:4b:c1:
         c2:85:76:c1:4d:53:8c:fe:19:54:fd:e5:97:ed:ac:bd:64:91:
         41:c8:d7:4a:9e:df:9c:0c:09:40:c4:a8:7b:a9:64:51:f7:52:
         d8:06:fc:83:22:93:73:92:8a:bf:69:c5:b7:fb:96:9d:02:54:
         2e:07:cb:82:0f:53:cf:46:c3:6b:04:80:9d:f4:1b:4d:76:fb:
         ba:3d:e2:4f:6d:96:43:ed:9e:f6:9e:46:19:e9:12:0d:00:e5:
         cd:4f:2b:d1:6e:0a:3e:be:2f:22:ba:8e:ea:ad:0d:80:bb:31:
         e5:a3:f8:e8:62:8d:94:34:a2:fd:70:57:72:ac:c0:9c:f1:39:
         9b:cf:22:02:90:60:9a:ff:a1:27:56:0d:9c:6c:ce:65:b9:ea:
         54:d3:0a:a8:bd:fe:8b:5b:10:83:99:b3:36:2a:61:c2:7c:c2:
         db:61:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org