Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/8c8240fa6239faeac2c892c1757ae8edd76ec3a3.roa
File:                     8c8240fa6239faeac2c892c1757ae8edd76ec3a3.roa (raw, json)
Hash identifier:          qtK37XzqdslB6S7HFvUOj5FyRrre4aFCMTdVGMIl8UM=
Subject key identifier:   80:B1:8D:4C:37:9E:65:F0:98:41:29:36:81:F5:21:F9:F3:66:92:E8
Certificate issuer:       /CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
Certificate serial:       121F
Authority key identifier: 3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/8c8240fa6239faeac2c892c1757ae8edd76ec3a3.roa
Signing time:             Wed 29 Sep 2021 14:27:06 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Tue 29 Sep 2026 03:00:00 +0000
asID:                     265773
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4639 (0x121f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2026 GMT
        Subject: CN=8c8240fa6239faeac2c892c1757ae8edd76ec3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:d6:14:7a:b6:5c:82:8a:e9:f7:72:f2:12:
                    17:96:c1:ad:81:06:72:9a:72:c7:50:29:ea:d9:c7:
                    f2:4e:73:be:78:44:fe:a6:e5:09:97:b0:d4:98:61:
                    fc:b9:50:ea:92:17:d4:e1:02:91:6a:2e:ba:96:ab:
                    89:6e:e6:6f:a7:5e:33:96:cb:c0:ab:f3:67:02:77:
                    db:b9:85:e2:39:d1:ed:1e:60:9f:b0:7a:b8:dc:96:
                    2e:c3:09:70:af:0e:89:13:85:49:f3:36:3b:48:47:
                    df:de:73:b6:a0:3a:a0:60:bc:0d:61:9a:88:71:9c:
                    5e:b1:c9:61:8d:29:9d:f1:cb:46:19:51:c1:85:21:
                    7f:33:0d:2a:e8:3a:14:99:d7:ef:f3:78:70:c0:f1:
                    14:74:73:bd:3c:50:a0:4f:ae:cb:11:ec:9e:32:57:
                    1d:72:18:3d:50:85:90:86:fb:2f:d2:50:99:79:0b:
                    ac:2b:0c:49:18:16:ef:dd:45:11:ab:ae:16:e5:a1:
                    ad:8a:07:79:88:1b:32:18:8b:56:c0:c8:3c:27:2f:
                    fa:69:4e:0a:44:6c:66:b7:7b:12:97:5d:c3:11:b2:
                    a6:9e:7c:ce:1a:f4:26:62:d7:73:37:5e:a1:44:12:
                    b8:17:ec:70:20:1c:de:25:30:fc:33:2e:78:1a:3c:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B1:8D:4C:37:9E:65:F0:98:41:29:36:81:F5:21:F9:F3:66:92:E8
            X509v3 Authority Key Identifier:
                keyid:3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/8c8240fa6239faeac2c892c1757ae8edd76ec3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:32:bd:e2:65:fd:bc:92:d7:fb:70:4d:b4:88:6a:09:f0:
         82:1f:20:81:c9:b8:d8:18:43:ca:5a:81:03:91:df:8b:15:72:
         d7:72:45:10:69:d7:1f:ad:c0:f3:75:45:02:8f:bb:fc:e5:12:
         56:96:3f:6a:4f:9c:9c:7b:84:78:64:a1:18:b2:f4:b6:c5:30:
         c9:f6:91:f8:dd:70:95:09:41:96:92:21:a1:51:a7:b1:63:cb:
         d2:9f:96:12:60:f8:03:58:d0:99:b3:89:50:bf:f1:21:ba:7c:
         6c:93:07:f6:4a:0d:c9:4b:a3:a4:ac:d5:29:0b:65:04:b9:01:
         6c:84:d0:2d:9d:c4:54:b5:01:2e:33:ba:bd:63:8d:e5:65:b6:
         d2:2c:91:b7:5b:4c:a0:20:c6:0f:74:8c:45:be:ba:c7:32:d5:
         e0:a4:66:fb:a3:44:ee:0c:1a:a1:d9:49:67:ef:0a:fb:80:49:
         93:30:92:2e:84:03:14:c3:e8:22:6b:a2:57:a7:b8:d7:2c:e2:
         8f:44:50:10:ae:cd:c9:4a:e9:d3:8c:53:87:62:6d:ed:3a:11:
         c9:3f:47:8a:ca:38:33:d5:8c:6f:28:7a:c8:93:51:75:4c:7c:
         bf:bd:20:ac:c1:12:80:ed:87:7d:be:8c:1e:48:07:d8:49:a7:
         0c:95:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org