Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/a579fa0397171bbdfba47f15e549f9ac7cdfe0fb.roa
File:                     a579fa0397171bbdfba47f15e549f9ac7cdfe0fb.roa (raw, json)
Hash identifier:          ZUVfQvQ6pi1As+Nt97Phd3Ac+EbliNfSzlvRIBOMewM=
Subject key identifier:   BB:A7:58:3F:70:7C:28:45:B2:89:96:51:0C:D7:F4:92:19:C6:ED:0E
Certificate issuer:       /CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
Certificate serial:       078590
Authority key identifier: 3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/a579fa0397171bbdfba47f15e549f9ac7cdfe0fb.roa
Signing time:             Mon 01 Aug 2022 14:24:58 +0000
ROA not before:           Mon 01 Aug 2022 14:24:58 +0000
ROA not after:            Sun 01 Aug 2027 14:24:58 +0000
asID:                     263766
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492944 (0x78590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d23ed512cc53b328124b793aac8dfd17c8a4e7
        Validity
            Not Before: Aug  1 14:24:58 2022 GMT
            Not After : Aug  1 14:24:58 2027 GMT
        Subject: CN=a579fa0397171bbdfba47f15e549f9ac7cdfe0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:fd:ce:1f:66:93:4d:d5:c5:23:32:04:88:
                    81:7c:e5:75:fb:35:c4:4b:21:f8:42:b7:f9:a9:83:
                    fd:8e:4b:d1:89:7b:6f:ae:f3:cd:a0:1f:c2:2f:5e:
                    d5:0b:3a:74:18:46:fa:ee:44:c4:47:3f:ce:a3:ba:
                    f7:55:0a:6a:25:5c:27:b0:f8:f9:63:b4:2e:59:ae:
                    90:2a:dc:b0:89:c7:3e:10:5e:29:96:a3:c7:83:b5:
                    79:22:f6:46:c0:26:f6:90:3f:eb:ab:87:f3:ee:b4:
                    0a:8e:59:cc:ac:cb:9e:df:b9:93:0a:da:cf:e2:33:
                    f7:89:44:de:97:c5:b7:34:bf:99:4c:44:cd:66:fd:
                    dd:95:a7:37:29:ea:58:3d:a9:62:bc:7d:42:a0:53:
                    ce:73:ec:04:60:8b:74:93:7b:dc:06:71:5c:6c:36:
                    a2:a9:d8:bf:d7:ca:49:d8:3f:32:52:1a:8e:ad:a7:
                    2f:b5:ce:58:62:c5:2b:55:22:3c:85:b3:4f:c3:50:
                    90:b9:5b:dc:91:ef:7d:62:4b:24:99:29:ea:fa:df:
                    ff:33:23:51:ce:85:a3:99:73:db:16:65:c6:92:1b:
                    73:2c:f8:76:67:76:b9:2d:3b:71:47:22:3f:0b:55:
                    fe:8a:18:ee:39:eb:a2:46:ad:8a:fe:75:b7:1e:22:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A7:58:3F:70:7C:28:45:B2:89:96:51:0C:D7:F4:92:19:C6:ED:0E
            X509v3 Authority Key Identifier:
                keyid:3D:1F:F7:BF:A9:A6:00:DD:21:AF:78:00:9B:79:C6:E1:2E:00:7D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/a579fa0397171bbdfba47f15e549f9ac7cdfe0fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b52a81e2-8cc9-48ac-8846-afc1df480155/b1d23ed512cc53b328124b793aac8dfd17c8a4e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:cc:97:cc:93:6d:41:f8:5f:7e:96:7c:3a:37:70:33:08:
         8e:66:49:c3:42:a9:01:35:26:86:8e:27:1d:9c:7d:54:90:e4:
         eb:fb:ae:5a:21:92:39:2d:ba:d4:7b:8c:1c:f2:85:bc:ab:6c:
         10:79:c1:49:e4:6e:5c:8b:28:a1:32:6c:29:7e:e1:1b:86:72:
         97:ce:7d:7b:21:50:9d:e2:e2:99:a8:51:40:15:87:f8:8c:47:
         13:3b:47:74:60:7c:14:c4:69:c3:3f:22:85:7a:87:a6:b4:32:
         2c:f0:63:8f:d6:07:9c:e2:c9:fe:5a:34:23:4b:b5:a9:89:f8:
         f5:42:6e:14:ad:d5:e2:1c:e8:5a:31:8d:69:55:06:76:00:af:
         21:53:4d:05:09:3c:21:6a:83:f0:3b:f3:84:98:e2:80:31:71:
         e2:c2:94:96:af:87:55:77:d4:e1:65:7c:f7:d6:f9:97:69:7e:
         30:8b:e2:b4:64:e8:8c:aa:1d:45:4f:ee:8f:fc:b8:5c:a0:a3:
         fd:3d:07:b9:1a:b1:6c:34:8b:29:5b:97:16:a6:e7:01:30:f3:
         9e:bf:1a:d2:90:09:22:94:e9:c1:bd:b4:7b:16:3f:1d:d2:41:
         92:04:eb:bc:cc:26:6c:2a:f1:53:21:94:fc:1b:8f:0c:01:a5:
         23:db:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org