Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/203fb54b251dd7e5f7f9b0c6abf80a1481c5527d.roa
File:                     203fb54b251dd7e5f7f9b0c6abf80a1481c5527d.roa (raw, json)
Hash identifier:          /e5saVxFhdg38Ts1W4PabHQBoFWI/JEU13i9/nLAQiQ=
Subject key identifier:   E3:B0:1B:83:3F:03:16:63:F5:4F:29:01:28:84:CE:B8:A7:33:1D:92
Certificate issuer:       /CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
Certificate serial:       078B93
Authority key identifier: 3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/203fb54b251dd7e5f7f9b0c6abf80a1481c5527d.roa
Signing time:             Mon 01 Aug 2022 14:24:59 +0000
ROA not before:           Mon 01 Aug 2022 14:24:58 +0000
ROA not after:            Sun 01 Aug 2027 14:24:58 +0000
asID:                     265773
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494483 (0x78b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
        Validity
            Not Before: Aug  1 14:24:58 2022 GMT
            Not After : Aug  1 14:24:58 2027 GMT
        Subject: CN=203fb54b251dd7e5f7f9b0c6abf80a1481c5527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:2f:8f:17:0f:da:1c:8c:0d:91:d9:50:bf:
                    b2:eb:c1:c7:2c:83:0f:12:73:87:0a:54:db:64:61:
                    f0:36:75:18:8d:c4:7c:2c:ed:97:be:80:30:03:d2:
                    ed:7a:d0:0b:f5:80:bf:06:66:70:3c:51:96:c1:1d:
                    ec:03:87:12:8c:ed:6e:e1:01:f0:b2:3b:52:b3:a2:
                    04:bb:70:c8:1d:ae:9c:21:1c:66:2f:4a:8b:ce:3d:
                    55:72:bf:1d:9f:7a:d0:92:8b:c9:14:03:26:f5:a0:
                    5f:95:c1:d9:d0:d7:f0:01:4c:71:35:e9:b7:b7:d2:
                    cc:f4:1c:ea:60:71:5d:0c:81:a2:4f:68:0d:68:31:
                    d7:f1:dc:07:e2:5c:d5:6d:be:8b:67:31:40:de:67:
                    49:db:8b:4b:1c:be:03:2b:ee:b0:99:24:d8:26:00:
                    bb:c8:2f:69:83:d2:84:d5:03:c9:b6:7d:ee:b9:f3:
                    5d:83:ba:72:d1:63:45:8d:ad:5b:47:a3:11:13:42:
                    b6:1e:c5:9e:b8:49:87:19:ca:8a:b9:df:57:7a:5d:
                    8b:fa:0e:a2:b4:5a:b9:73:63:e1:72:31:73:43:fb:
                    20:60:34:76:53:fa:5f:62:24:ac:1c:3f:90:74:a5:
                    89:e9:4c:07:89:4f:5c:3c:18:30:8d:4f:b0:42:87:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B0:1B:83:3F:03:16:63:F5:4F:29:01:28:84:CE:B8:A7:33:1D:92
            X509v3 Authority Key Identifier:
                keyid:3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/203fb54b251dd7e5f7f9b0c6abf80a1481c5527d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:cf:67:a3:6f:7b:30:1c:0c:21:3c:42:29:4d:f3:92:de:
         bd:db:da:34:26:13:bb:4e:d7:cd:5b:1b:74:81:13:eb:73:f0:
         59:35:81:90:c8:6d:28:9d:c1:5a:67:24:9d:b2:f9:c7:52:b7:
         3b:4c:d4:18:db:4b:59:8e:2e:19:93:7a:70:dd:1e:d2:a9:6b:
         0a:10:b6:1b:84:eb:52:1c:dd:0e:32:e9:aa:c3:18:9c:e7:d7:
         51:ab:00:56:11:59:86:42:5c:b5:16:48:13:c6:6d:0f:ef:f9:
         3b:98:d3:ef:c8:26:42:a9:26:bc:0c:bc:b3:c5:78:ce:a2:b7:
         63:7e:69:1e:1f:b2:93:18:fe:57:5c:94:9e:f8:08:7c:27:3c:
         a1:8a:6c:15:62:a1:23:cf:66:39:9e:86:b0:64:fd:75:c9:e4:
         70:0d:0c:9b:53:c7:45:c7:19:63:b8:ca:cd:0f:32:71:9f:bc:
         a0:75:11:c9:f5:cc:27:3c:38:49:bb:b9:50:eb:43:96:46:d8:
         aa:29:2d:35:d2:f5:7b:83:cc:72:13:10:76:9f:27:90:f6:66:
         bf:f7:9e:b9:2b:d3:da:fe:00:b6:5a:0b:22:76:eb:2d:5e:18:
         e9:db:e2:ce:84:19:1e:d5:74:62:b7:be:b8:bf:43:f4:04:5f:
         2f:e2:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org