Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/cfd7d4d6b5d07ee181709fac723a05eb451cb69c.roa
File:                     cfd7d4d6b5d07ee181709fac723a05eb451cb69c.roa (raw, json)
Hash identifier:          BWVQnZWvKC8HkAfiaAjcvUakx57RnCUryunOoWocStM=
Subject key identifier:   7B:4B:E9:91:B9:AC:AC:16:9B:48:23:BA:69:9E:2A:5A:B4:8E:DA:14
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       12401F
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/cfd7d4d6b5d07ee181709fac723a05eb451cb69c.roa
Signing time:             Wed 27 Mar 2024 08:30:01 +0000
ROA not before:           Wed 27 Mar 2024 08:30:01 +0000
ROA not after:            Fri 27 Mar 2026 08:30:01 +0000
asID:                     264776
IP address blocks:        168.197.248.0/23 maxlen: 24
                          168.197.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196063 (0x12401f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 27 08:30:01 2024 GMT
            Not After : Mar 27 08:30:01 2026 GMT
        Subject: CN=cfd7d4d6b5d07ee181709fac723a05eb451cb69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:39:a8:08:69:a9:ab:8c:c5:d8:f7:45:0d:
                    dc:6f:58:5c:1c:12:1f:d7:e6:f6:67:d7:1f:84:90:
                    b3:9d:60:cf:f8:8c:75:a6:18:9b:7a:9f:c5:81:83:
                    59:b9:0a:35:74:2e:a9:5a:4c:0b:6c:86:1d:81:30:
                    2e:a4:13:3a:83:86:91:48:d6:6e:0b:ba:b6:d1:33:
                    d8:87:bb:f9:ea:f5:c6:9a:58:18:cb:75:a0:9b:01:
                    8d:29:a5:d7:37:44:5d:23:45:5f:c7:b0:9d:fc:f1:
                    10:ed:fa:e0:42:2a:18:e4:9d:9f:f4:58:79:5d:4e:
                    8b:7a:16:03:08:b4:31:5b:ef:2b:3b:82:43:df:92:
                    14:a6:6c:35:05:78:cc:b2:c6:fa:0b:f6:a3:e5:7a:
                    28:d2:bb:77:81:2d:fc:4c:5a:5f:5d:c1:3b:bf:c8:
                    2b:43:6d:c9:62:d8:33:42:2d:26:5b:c2:6c:b8:de:
                    d5:a3:b7:36:c7:8b:02:2a:bd:45:89:55:97:c7:10:
                    0d:6e:f3:38:d0:bf:0c:84:7d:74:06:7e:ae:f0:d3:
                    c2:ba:15:60:50:9b:25:09:13:b1:2c:27:a0:f1:8d:
                    bc:b5:5d:69:52:2f:3c:3a:68:da:8c:15:ed:02:a8:
                    07:d9:a9:a4:35:64:d6:2a:d2:01:e1:2b:65:34:03:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4B:E9:91:B9:AC:AC:16:9B:48:23:BA:69:9E:2A:5A:B4:8E:DA:14
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/cfd7d4d6b5d07ee181709fac723a05eb451cb69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.248.0-168.197.250.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:18:8b:40:6b:dc:2c:f6:75:67:d8:3f:4d:27:87:ee:7d:
         60:ef:d7:b4:2f:0d:e3:ed:c7:42:04:0a:d8:cd:e1:9f:ac:f7:
         ef:b1:d0:08:a3:fe:99:7e:18:85:d0:65:e5:df:73:aa:49:4c:
         5b:77:5e:ef:00:c8:6a:37:1e:80:6b:de:69:f6:20:6d:9c:47:
         ac:f2:11:8f:e1:b8:d9:b4:99:6d:0d:6d:12:6a:4c:70:21:53:
         c7:a0:15:e6:d4:ce:5c:d7:96:00:f1:1a:a7:cb:fd:6f:54:01:
         3c:6c:be:45:20:16:87:db:e9:cb:48:2a:3b:91:01:e7:1e:9b:
         af:57:0f:35:98:1c:bf:0d:c5:be:f7:a5:11:4c:9a:75:7e:04:
         63:ad:cb:c9:66:91:82:e5:b4:f4:63:7c:9c:6c:16:1f:cf:a9:
         29:34:0c:79:be:e2:e2:8e:13:92:27:f4:7e:bc:c6:1d:70:29:
         a8:66:14:4b:78:08:5e:2e:75:a6:71:19:5e:b2:01:10:5a:73:
         94:f1:cf:97:cb:fc:34:2d:e3:81:f7:51:e8:35:89:49:70:ad:
         bd:78:5b:72:87:81:ce:c4:1a:d8:1b:a5:c3:64:3c:3c:9c:bb:
         ca:65:ad:02:30:8a:8c:7e:61:4b:99:7b:6c:f5:1e:32:e8:0c:
         53:22:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org