Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/1b5ab8234325f14c5b30d985dfed4ca8234324db.roa
File:                     1b5ab8234325f14c5b30d985dfed4ca8234324db.roa (raw, json)
Hash identifier:          s/VvW7e1bdRA73ODEB8/yqZYKaWY5c/qzGreLQeUKvY=
Subject key identifier:   6C:F4:EF:D5:3B:F6:62:A7:AE:DF:84:CB:95:94:50:91:99:05:4D:F1
Certificate issuer:       /CN=aed98b75fb50f119b25488999dc2dad31cb479cd
Certificate serial:       0F5EEA
Authority key identifier: 84:D0:82:30:2D:5B:3B:90:72:8E:04:4E:D6:5A:50:33:98:C9:DD:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aed98b75fb50f119b25488999dc2dad31cb479cd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/1b5ab8234325f14c5b30d985dfed4ca8234324db.roa
Signing time:             Sat 12 Jun 2021 02:25:49 +0000
ROA not before:           Fri 11 Jun 2021 03:00:00 +0000
ROA not after:            Sun 11 Jun 2023 03:00:00 +0000
asID:                     263753
IP address blocks:        131.72.236.0/24 maxlen: 24
                          131.72.237.0/24 maxlen: 24
                          131.72.238.0/24 maxlen: 24
                          131.72.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007338 (0xf5eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed98b75fb50f119b25488999dc2dad31cb479cd
        Validity
            Not Before: Jun 11 03:00:00 2021 GMT
            Not After : Jun 11 03:00:00 2023 GMT
        Subject: CN=1b5ab8234325f14c5b30d985dfed4ca8234324db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:42:e8:c7:eb:72:6e:03:8e:2b:25:76:5b:
                    84:77:7a:d2:8d:23:e4:c7:32:62:ff:da:9a:ae:6a:
                    01:dd:61:1c:c1:53:8b:14:57:6e:6e:7a:d3:0c:0e:
                    ad:d9:1f:b6:d7:7e:8a:35:c1:5a:9f:05:e9:d8:d7:
                    56:0e:fa:97:7d:5e:a8:61:8c:f8:12:11:3c:01:16:
                    28:c5:80:25:af:e1:47:11:fb:db:3d:48:d7:cc:6e:
                    5b:92:97:b5:5b:85:cd:c0:f3:5d:f4:87:96:26:35:
                    26:cf:31:2d:72:b2:54:48:94:eb:dd:f2:b6:85:23:
                    a9:d5:6d:79:98:b5:f3:4f:66:54:d8:9e:c2:49:32:
                    e9:97:97:99:b2:01:23:b9:8a:52:5f:3d:f7:74:e7:
                    65:3f:9c:7c:b3:f9:8d:d5:66:86:17:a9:e6:56:d0:
                    b9:3f:c3:9d:b0:7c:3d:96:15:c1:33:9d:03:79:ac:
                    56:0f:b0:a6:53:9c:89:d3:15:6f:83:39:d3:61:4e:
                    08:66:34:21:a6:8e:93:41:19:0b:f1:08:38:6a:26:
                    7a:a7:d1:c2:23:b8:4b:0e:b2:41:f4:8d:13:0f:2d:
                    d7:0a:3f:93:38:60:19:ad:31:f5:0c:4f:19:82:bc:
                    7f:83:15:bd:54:1c:70:4f:95:2f:29:4c:a0:c8:c6:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F4:EF:D5:3B:F6:62:A7:AE:DF:84:CB:95:94:50:91:99:05:4D:F1
            X509v3 Authority Key Identifier:
                keyid:84:D0:82:30:2D:5B:3B:90:72:8E:04:4E:D6:5A:50:33:98:C9:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aed98b75fb50f119b25488999dc2dad31cb479cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/1b5ab8234325f14c5b30d985dfed4ca8234324db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c3a606-b966-4377-98ec-dfba4ab7c3c3/aed98b75fb50f119b25488999dc2dad31cb479cd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:ad:83:6d:bc:15:8a:91:c1:4d:69:e8:e5:6e:4d:36:3f:
         66:a5:55:50:3a:2b:20:4a:b8:c2:84:94:fb:41:b1:94:17:4b:
         2a:6e:2e:a7:d9:97:ea:cc:6e:a5:bf:63:68:79:50:01:36:87:
         62:22:56:0e:40:a2:46:b0:a2:82:c8:c2:a5:c7:b6:9c:02:65:
         b8:9a:35:ed:84:cc:7a:08:8c:14:7a:68:0c:ad:26:37:1d:9d:
         f0:a8:ec:20:13:46:99:62:f7:f3:12:43:ec:7c:83:3e:40:16:
         71:c4:5d:2e:47:0b:50:15:da:a8:00:e5:3b:e2:61:4b:6e:93:
         4d:91:ab:75:c3:10:0e:04:8d:22:b9:ac:a8:9a:4c:21:33:fc:
         78:03:1c:6b:f0:c2:4a:20:9a:38:e6:6d:41:62:eb:82:6c:98:
         52:17:b7:38:6f:f5:33:33:be:75:32:dd:d8:d8:b9:44:0c:4f:
         ee:dc:77:d3:f3:2d:30:8c:62:7c:78:be:1e:ef:97:e2:11:10:
         e4:b4:3e:44:fd:71:75:6f:4e:03:26:75:c8:cd:5e:eb:48:ab:
         23:19:1f:9e:45:aa:f7:18:18:3e:e8:12:a4:56:10:53:37:de:
         36:9f:c4:40:c8:39:1f:a6:12:37:b7:21:35:96:29:3a:61:f4:
         c1:d6:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org