Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa
File:                     032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa (raw, json)
Hash identifier:          QVBbOIRSy/8bippAbqOtxKL7GcC39oNDG1ZpVVlajEw=
Subject key identifier:   BE:4F:92:BA:0E:64:1A:4B:94:2E:94:CF:41:4F:CA:96:08:A5:91:C0
Certificate issuer:       /CN=466e43c330240907a2659f129b7552a9a8972ea2
Certificate serial:       1221F8
Authority key identifier: 30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa
Signing time:             Thu 29 Jun 2023 08:30:01 +0000
ROA not before:           Wed 28 Jun 2023 08:30:01 +0000
ROA not after:            Fri 27 Jun 2025 08:30:01 +0000
asID:                     271872
IP address blocks:        128.201.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188344 (0x1221f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e43c330240907a2659f129b7552a9a8972ea2
        Validity
            Not Before: Jun 28 08:30:01 2023 GMT
            Not After : Jun 27 08:30:01 2025 GMT
        Subject: CN=032b55cc2c096fc2e191567e4a93f3fd8bfcc04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:ec:87:99:0a:95:9e:ea:86:88:a1:1d:cb:
                    05:24:f4:01:cb:1a:07:6f:97:c8:30:0f:d5:c4:73:
                    7e:f6:4c:12:e7:c5:85:9a:da:55:a4:92:06:8b:a7:
                    5f:10:94:53:76:0b:35:26:8e:cc:51:ce:67:74:33:
                    1b:0f:f3:26:ed:c2:43:c3:1b:c0:15:db:2f:01:be:
                    79:62:a9:6d:d6:cd:a6:1b:09:f5:91:a3:de:6b:03:
                    8d:1c:69:05:2a:9d:55:e3:c2:a4:1f:39:6f:20:fa:
                    eb:56:4a:86:a0:09:04:ff:39:9f:1c:92:81:62:35:
                    f3:0c:31:d0:ff:de:fe:1c:ae:ba:f5:85:28:ce:4d:
                    dc:72:5c:06:70:80:91:1a:11:a6:d7:1f:e7:83:33:
                    22:1b:19:04:11:db:1d:e3:05:80:37:8b:1b:e4:91:
                    cc:f7:41:b7:a0:85:00:c2:00:42:3e:3c:d5:55:ee:
                    51:97:ad:71:12:0d:34:97:d1:40:af:10:94:6c:03:
                    7a:7e:e6:14:48:c3:61:f6:0a:77:01:90:bb:63:6f:
                    97:87:e4:7f:4e:fc:81:d2:d4:e3:c8:ef:e3:65:6f:
                    5f:aa:b8:fb:22:82:31:83:45:98:9b:1e:bf:34:f6:
                    fd:6b:76:56:14:43:9d:5f:0b:66:74:ed:66:14:f6:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4F:92:BA:0E:64:1A:4B:94:2E:94:CF:41:4F:CA:96:08:A5:91:C0
            X509v3 Authority Key Identifier:
                keyid:30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:32:59:80:ed:35:bf:51:21:93:04:96:0e:1d:5a:b9:aa:
         cd:db:63:01:b9:45:46:17:be:0b:09:cb:42:7e:cd:61:53:1f:
         60:00:9c:cb:e4:da:9f:e7:ac:3b:ea:07:69:2d:b9:98:0f:70:
         6c:2f:57:52:ea:97:f3:32:6b:2e:e2:c0:ca:be:5c:f1:09:2c:
         6c:09:30:33:3c:60:50:52:d7:17:ac:0e:68:ec:54:9e:c7:88:
         38:0d:26:09:70:5f:6a:89:89:d8:f0:8d:1c:76:2a:f4:f9:b9:
         3c:db:8c:33:17:d7:ca:03:ee:58:a4:96:85:ef:cb:22:35:1d:
         b9:c7:48:93:ea:e3:63:89:ae:28:6c:70:40:0e:04:4f:8c:b6:
         c8:2e:5c:32:ce:15:3c:cb:70:c2:e9:cd:81:ad:8b:98:bc:7d:
         02:55:23:79:96:b5:76:08:99:f8:65:0d:10:4e:44:d1:a0:62:
         20:96:6d:38:e0:c2:b9:7a:ba:1b:63:4c:0c:95:b8:13:c9:6f:
         91:4d:bb:c4:a8:25:53:ad:30:f8:a5:b6:c3:57:f6:18:8a:70:
         51:52:d1:d6:b8:65:e4:f2:ec:17:4d:54:ae:98:74:80:72:ad:
         4f:43:c6:ab:cb:5d:b7:41:22:11:44:74:06:c4:03:e8:49:3c:
         65:f6:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org