Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/375aa747f00edfc5d94d43ea7065c3c20a807ed9.roa
File:                     375aa747f00edfc5d94d43ea7065c3c20a807ed9.roa (raw, json)
Hash identifier:          W5BsLDELcVEUX7LD21IWKfk2oj8dkSFExS4ly9BS0Uw=
Subject key identifier:   16:C4:DB:2E:41:55:C9:98:0E:B0:E8:F6:E8:F3:F0:31:6D:A1:05:CE
Certificate issuer:       /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial:       1F5800
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/375aa747f00edfc5d94d43ea7065c3c20a807ed9.roa
Signing time:             Fri 24 Mar 2023 10:07:05 +0000
ROA not before:           Thu 23 Mar 2023 10:07:05 +0000
ROA not after:            Fri 24 Mar 2028 10:07:05 +0000
asID:                     22869
IP address blocks:        138.117.143.0/24 maxlen: 24
                          190.99.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054144 (0x1f5800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Validity
            Not Before: Mar 23 10:07:05 2023 GMT
            Not After : Mar 24 10:07:05 2028 GMT
        Subject: CN=375aa747f00edfc5d94d43ea7065c3c20a807ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:43:4f:b8:75:97:4d:b5:88:27:ae:ee:7d:
                    cb:44:27:28:77:00:f1:cc:be:74:a2:37:2f:49:b2:
                    3e:9b:50:42:13:71:6b:96:e6:37:29:1f:ce:e4:5c:
                    d4:48:b9:74:0e:06:fc:77:41:ac:83:7f:31:23:5a:
                    47:55:7f:89:98:de:29:26:52:ee:71:5f:41:09:21:
                    9b:65:30:e9:38:b9:3f:d1:82:a4:fb:d9:28:6a:e8:
                    e4:b6:ce:96:e6:29:07:0c:39:c4:cf:77:15:e0:cd:
                    91:6c:eb:18:28:ac:ce:10:9a:94:10:72:9b:fe:0d:
                    d1:3d:03:f9:5f:72:93:fc:cb:a5:d0:9f:9e:df:61:
                    f2:3c:67:61:de:6d:a5:7f:85:91:2c:ef:52:7c:17:
                    04:6a:e9:ce:f6:57:77:18:f5:85:84:1b:20:17:81:
                    87:c6:c0:48:e1:7d:c8:fb:91:66:b9:5a:e5:d8:6b:
                    71:bf:ab:a7:ee:15:98:cc:60:bd:63:2a:c9:69:30:
                    f0:53:11:60:40:93:29:f4:84:9d:4c:00:29:dc:aa:
                    39:79:02:ed:7b:2a:c4:43:dc:4a:55:3a:fb:e0:08:
                    09:f8:f4:00:05:94:6c:7a:2a:f4:5e:94:04:a3:c9:
                    be:6d:94:5e:cd:33:33:47:2e:00:c9:0d:03:d9:0d:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:DB:2E:41:55:C9:98:0E:B0:E8:F6:E8:F3:F0:31:6D:A1:05:CE
            X509v3 Authority Key Identifier:
                keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/375aa747f00edfc5d94d43ea7065c3c20a807ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.143.0/24
                  190.99.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:46:10:f6:ad:93:a1:09:0d:e6:e3:73:6a:95:04:62:18:
         df:82:81:ae:1e:66:ab:45:48:93:77:62:65:29:2b:8d:de:3f:
         d8:46:14:6f:b7:19:95:09:44:4d:ac:af:29:04:70:70:35:08:
         de:c8:8d:b6:00:0d:15:bb:45:ad:23:ba:23:33:83:61:d7:21:
         3e:90:12:cc:95:d2:dd:c5:ae:e5:b7:28:bd:78:77:b7:c3:a9:
         2c:f4:15:88:23:fa:8f:92:2a:2b:b6:d9:f2:f9:10:6c:4c:c5:
         3e:d5:a4:78:d7:15:d9:f5:6a:da:98:73:08:ac:2e:b1:75:ab:
         5f:98:fb:f0:43:e7:7f:2c:93:ee:78:cf:7e:39:73:e0:e2:f0:
         ec:43:43:60:95:3f:d7:ce:e6:79:8e:d3:a8:50:3d:3d:ee:10:
         6d:bd:84:aa:fc:2c:35:d0:f3:0d:ac:b9:a1:99:62:8b:9c:58:
         29:39:d9:55:f3:54:09:1d:7a:41:37:8b:de:97:2a:3b:e8:d7:
         10:a4:64:77:9e:0d:c2:0a:c4:19:8e:e8:13:9d:7c:ba:5f:77:
         cb:8e:6b:3d:ee:ea:74:b1:78:44:29:73:16:6a:a9:88:09:ad:
         a1:11:83:2b:04:64:3b:c1:da:b5:5b:1c:25:af:68:2e:2d:f9:
         1a:b9:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org