Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c4dc33f53b1638a8f380b00a42703c0cd548c403.roa
File:                     c4dc33f53b1638a8f380b00a42703c0cd548c403.roa (raw, json)
Hash identifier:          NiEOMt/KjK5GjD+s6VQh0tuaQ1+trKddvxn0WdF6fRk=
Subject key identifier:   0E:A3:3B:36:CA:B0:1C:0C:82:A9:99:6A:9A:35:B9:2A:25:90:C5:07
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1F23D8
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c4dc33f53b1638a8f380b00a42703c0cd548c403.roa
Signing time:             Tue 28 Nov 2023 19:02:56 +0000
ROA not before:           Tue 28 Nov 2023 19:02:56 +0000
ROA not after:            Fri 28 Nov 2025 19:02:56 +0000
asID:                     17147
IP address blocks:        163.247.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040792 (0x1f23d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Nov 28 19:02:56 2023 GMT
            Not After : Nov 28 19:02:56 2025 GMT
        Subject: CN=c4dc33f53b1638a8f380b00a42703c0cd548c403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:47:31:67:e2:8a:56:c5:02:d2:73:12:68:
                    a9:91:f2:cd:0a:fd:c4:09:45:1a:63:18:a8:0b:84:
                    f4:9f:b0:d8:a8:b7:c9:5a:42:9f:aa:95:81:c2:1e:
                    01:97:e8:a8:31:5a:48:a5:6c:2a:0f:4a:b8:d1:b6:
                    c8:b1:43:ad:29:98:55:e5:fe:bc:8c:3e:12:50:62:
                    49:31:58:db:85:9c:de:60:09:1c:83:c2:ac:7d:e9:
                    c0:f9:6e:62:2b:3b:d7:a1:c5:03:49:3f:04:f3:b5:
                    44:bf:02:f6:50:0b:2a:9e:64:39:a2:69:5d:65:5a:
                    fa:88:52:14:f8:c1:09:33:45:e2:ab:1b:ae:08:00:
                    73:d6:af:d1:d9:23:1c:6f:e6:9b:5b:6b:bf:39:f1:
                    6e:fd:f9:5e:ed:d9:9d:78:96:a3:b4:45:da:ca:36:
                    7f:7d:ac:8b:c0:b1:da:c9:83:c1:ce:26:b9:45:e7:
                    16:65:87:dc:b9:b9:97:12:fa:e0:e3:93:b1:66:18:
                    b2:f5:45:e6:48:3d:04:12:c5:f7:f1:f4:63:9c:5a:
                    17:c3:6c:41:6f:88:e1:ec:96:8f:75:f8:f7:f7:2d:
                    53:f1:04:0b:0d:88:ac:32:90:dc:3d:ca:b3:cc:7e:
                    57:5a:50:b1:6a:be:35:54:ed:dc:f9:e4:e7:89:13:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A3:3B:36:CA:B0:1C:0C:82:A9:99:6A:9A:35:B9:2A:25:90:C5:07
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/c4dc33f53b1638a8f380b00a42703c0cd548c403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:bc:e9:71:84:0c:11:c8:9e:81:d0:e5:21:7e:38:da:27:2d:
         35:36:dc:0f:4b:00:ee:7a:16:4e:68:23:a9:fd:06:40:22:cb:
         ad:c5:cd:4e:1b:f0:ed:e0:5b:e2:55:e6:2e:23:17:f0:21:52:
         4e:95:51:87:82:aa:2b:68:06:37:47:1e:1e:70:d9:64:79:49:
         f5:97:2e:63:f5:6e:0f:33:43:24:8d:ad:81:f2:94:79:d2:1c:
         72:db:16:e1:f5:13:6b:ae:d8:69:15:cf:76:ea:80:47:0e:30:
         01:62:aa:3e:26:4c:87:bf:80:94:91:f8:21:b9:1d:51:70:25:
         9b:26:5b:3c:4d:e7:26:22:1a:2c:51:74:34:44:d3:3f:2b:ab:
         5d:02:8f:0d:73:34:60:da:27:a4:db:ee:c2:65:1a:13:ed:e1:
         4e:a0:fe:6b:d5:31:9e:4a:a7:8f:08:8b:78:d7:5d:58:5f:99:
         45:fc:74:44:a6:21:60:c1:1b:2d:f1:18:45:44:44:10:dd:26:
         c6:46:4d:1d:f0:57:3a:ad:d6:6a:4b:c5:ca:51:16:a1:84:7f:
         73:cf:94:55:6d:ae:81:43:dc:6b:8f:d4:4e:e8:d8:f2:da:74:
         19:5a:8b:49:6f:06:a1:79:b6:2f:8e:ea:20:64:15:64:ba:28:
         a1:49:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org