Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d2f6ec1848f9698c9ec842d88408d87c1227e0a0.roa
File:                     d2f6ec1848f9698c9ec842d88408d87c1227e0a0.roa (raw, json)
Hash identifier:          cBOi5gz0ygRl/GvqzHu8vz1jqA5RE0s4YEmht/Stp5s=
Subject key identifier:   AC:A6:F0:4E:7D:3B:0D:FA:0F:D3:1D:B4:26:84:5F:01:A1:A9:5B:1C
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1B1B4C
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d2f6ec1848f9698c9ec842d88408d87c1227e0a0.roa
Signing time:             Fri 16 Sep 2022 15:07:07 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        168.228.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776460 (0x1b1b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=d2f6ec1848f9698c9ec842d88408d87c1227e0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:82:b2:04:70:c7:35:75:83:34:c5:db:e2:
                    67:90:70:1a:90:eb:35:0f:4e:d2:cb:e3:15:e1:c4:
                    27:73:68:e9:21:33:db:c5:72:a5:d4:48:5f:0b:41:
                    b1:34:f7:db:9a:7f:ea:f3:cb:62:97:76:97:d8:9e:
                    19:b4:b5:84:f9:31:57:2d:a0:af:b4:60:ae:91:cb:
                    f7:fc:90:ef:a3:4f:a3:2c:52:3d:2c:c2:c1:38:b9:
                    1a:48:94:9d:01:dc:48:cd:49:57:46:fa:2f:36:97:
                    bb:de:c6:9f:f8:f9:a5:ee:4d:ed:12:a3:25:6e:0c:
                    f9:3a:7a:b3:08:2a:2b:51:bc:cb:6e:8f:9d:0e:e8:
                    98:bb:fc:1c:8a:97:85:39:84:3c:01:22:46:e8:fe:
                    fe:14:78:3c:6b:71:bf:33:43:2d:b9:cf:c7:b0:30:
                    4a:45:c0:6d:72:a7:0d:17:91:16:c7:94:a0:65:c9:
                    92:90:f7:ec:b8:18:88:2e:55:a1:7e:93:dc:f4:b7:
                    3e:f1:64:91:fe:f8:02:be:de:39:f5:6f:cf:d8:c6:
                    7c:47:6b:a7:5f:49:e5:e7:f4:ba:e6:d9:bf:fc:e1:
                    e3:6f:17:37:62:d4:3d:1f:52:8b:e1:78:41:73:cb:
                    84:70:e1:98:06:59:7d:46:57:8b:5d:9a:a5:50:f1:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:F0:4E:7D:3B:0D:FA:0F:D3:1D:B4:26:84:5F:01:A1:A9:5B:1C
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d2f6ec1848f9698c9ec842d88408d87c1227e0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:87:a6:72:b2:d7:43:bf:b9:d4:a6:73:25:f9:47:a4:75:
         54:82:4e:49:1d:74:d1:d8:28:bb:a6:b5:ea:2d:1c:a3:34:be:
         29:2e:1e:9b:3c:05:98:d0:97:be:19:10:0d:b9:66:0b:33:e5:
         ef:f0:ad:a2:aa:ea:c1:c5:f5:20:28:7b:65:95:e8:52:b4:aa:
         00:15:ed:a4:de:d0:ea:53:94:92:62:e6:59:ee:49:e5:0d:98:
         b7:f4:54:09:40:b1:af:ce:7a:83:b1:c2:44:a1:b9:43:32:da:
         c3:22:7f:7f:da:c0:e7:6b:a3:4f:1b:0b:0c:c7:2e:13:ad:97:
         70:40:fe:d1:6c:ce:fe:f3:3b:e4:28:c8:31:ff:55:17:e3:d4:
         f2:1d:ac:74:9a:d5:27:e5:5b:e1:c9:d6:e3:28:be:24:f5:90:
         d6:5f:e7:b9:fb:90:29:28:38:49:6b:3d:fa:3f:d8:03:36:2b:
         6e:fd:a5:c6:f7:06:52:c5:5b:43:be:a3:1f:4e:d1:6f:18:4b:
         7e:82:a6:2d:12:9a:41:fc:53:dd:54:4a:23:da:59:06:63:a6:
         90:ea:b8:99:c2:ff:3c:05:3d:ac:74:56:d1:73:c1:0b:77:a5:
         88:e5:1f:9d:16:40:fc:de:c5:70:95:e1:b5:7b:d0:67:91:85:
         ef:51:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org