Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa
File:                     fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa (raw, json)
Hash identifier:          wfWr3baJSZoQBEXW5V+Q7ZAmzWGVumY35dv/E/q6mkY=
Subject key identifier:   8D:7D:72:2F:C4:2A:BE:43:CA:B4:A6:86:0F:2F:1C:DC:4B:0C:67:1E
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       210C37
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa
Signing time:             Wed 14 Jun 2023 02:16:58 +0000
ROA not before:           Tue 13 Jun 2023 02:16:58 +0000
ROA not after:            Sat 14 Jun 2025 02:16:58 +0000
asID:                     21575
IP address blocks:        148.102.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165815 (0x210c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Jun 13 02:16:58 2023 GMT
            Not After : Jun 14 02:16:58 2025 GMT
        Subject: CN=fa5d1398237f20f4a5967d5e10d8def7c5c8fb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:02:d1:2a:43:40:c9:c1:93:92:ce:9a:79:
                    bf:29:f7:a6:10:f0:2f:4f:c4:a1:9c:a3:45:bb:9b:
                    ea:ec:92:51:5c:f3:47:b3:f2:cf:90:f3:90:c3:67:
                    05:d7:b4:f9:f3:19:e5:09:80:e5:be:2e:63:e3:b2:
                    50:75:91:bd:3b:40:c6:5e:71:b9:f1:b3:2e:ba:b2:
                    39:05:26:ea:1f:f1:55:b3:b6:11:24:c8:8f:cd:65:
                    3a:04:84:47:5e:ed:f5:f5:45:7d:39:1c:36:1a:8f:
                    5c:de:3e:88:b2:7b:d1:f5:21:3d:c8:af:26:91:67:
                    45:14:9b:ad:d1:f5:8d:43:5a:ce:f0:24:bb:f5:66:
                    55:03:ad:f5:f2:19:24:b8:5f:20:8c:1d:48:ba:3a:
                    52:5e:81:48:66:66:30:22:03:e3:bf:ed:bb:1b:dd:
                    dc:6e:d9:51:87:7b:bf:7f:d4:17:eb:49:ab:2c:0d:
                    a3:72:8e:7e:29:04:d2:19:9a:b6:b5:9e:92:b5:19:
                    0f:7e:84:12:b5:6a:e7:c8:ed:16:44:e1:4c:08:d4:
                    da:a3:6d:bf:e2:99:9a:5d:0e:da:51:2f:e2:09:c2:
                    01:6f:3d:bd:5a:d7:57:84:74:1c:21:ca:33:3f:4b:
                    08:a2:86:6e:ad:90:e5:c0:24:1e:7b:9c:ad:72:b5:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7D:72:2F:C4:2A:BE:43:CA:B4:A6:86:0F:2F:1C:DC:4B:0C:67:1E
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:ca:91:01:fd:f3:01:d3:f0:b6:17:6d:61:a2:79:1e:d3:
         e8:70:e1:7c:b0:4c:ae:38:0b:32:67:11:14:03:44:ea:f1:5f:
         2c:11:29:eb:83:76:42:93:aa:bc:5d:a8:6e:37:0b:5e:88:d7:
         77:63:0b:4c:d6:3c:2d:fe:30:49:1a:3c:f0:bf:7a:02:26:4d:
         81:5e:63:7d:b4:09:35:a9:5c:13:34:bb:f0:b0:b8:7c:ed:16:
         51:79:81:76:94:4c:9d:d1:64:f3:88:91:ea:ef:c7:a8:f2:84:
         7b:dd:88:52:f1:d9:e0:6f:fd:f8:58:ea:c2:9d:3f:60:67:a5:
         70:51:30:59:26:b6:e2:26:6c:08:53:67:d7:51:36:34:81:9a:
         6b:53:b7:56:d4:5e:7b:28:38:fb:02:31:b1:a1:c7:a8:94:ec:
         85:2f:4f:08:e4:0a:6a:6c:04:ab:a7:04:b7:c9:7b:74:e4:c5:
         03:06:19:c4:11:08:08:3e:60:cd:55:00:46:ab:eb:ae:f5:c3:
         a4:f8:3d:be:a2:bb:58:28:6d:11:3e:e2:97:1c:15:30:ac:60:
         9b:75:56:91:1e:f4:22:de:a9:d1:08:5b:3d:83:58:cd:b0:49:
         13:ca:46:0a:58:79:f0:db:55:56:1c:ad:38:24:ee:f1:79:b8:
         a7:9a:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org