Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/62d6ce4938545482cf5d32416badadee60923896.roa
File:                     62d6ce4938545482cf5d32416badadee60923896.roa (raw, json)
Hash identifier:          xr2cajt0VdETe92VtiDS4nMoimqXSbWyef64/Du8Ae0=
Subject key identifier:   FA:0F:46:0B:7E:6C:E4:3C:38:6E:FE:9C:D6:2E:92:5E:14:71:C4:C4
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       21C05A
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/62d6ce4938545482cf5d32416badadee60923896.roa
Signing time:             Fri 18 Aug 2023 18:31:09 +0000
ROA not before:           Thu 17 Aug 2023 18:31:09 +0000
ROA not after:            Mon 18 Aug 2025 18:31:09 +0000
asID:                     52232
IP address blocks:        131.0.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211930 (0x21c05a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Aug 17 18:31:09 2023 GMT
            Not After : Aug 18 18:31:09 2025 GMT
        Subject: CN=62d6ce4938545482cf5d32416badadee60923896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:c0:d2:7d:c5:d4:8b:8e:66:9a:42:b4:8c:
                    c1:8c:36:c6:39:67:28:b7:b4:b2:20:10:6c:b1:93:
                    7d:82:53:b0:10:9a:72:bd:de:bc:cd:ce:dc:80:16:
                    eb:40:17:b1:56:af:8a:8e:42:35:62:fb:15:19:1d:
                    5c:8d:f1:cc:a9:ce:08:5e:ae:e4:63:d9:02:70:b9:
                    7b:b6:ca:cb:62:76:fd:3f:30:e0:0e:cf:88:db:20:
                    01:94:4c:e0:1b:af:69:eb:00:0d:75:62:97:29:71:
                    9e:2f:52:40:e6:96:a2:c2:a3:60:24:db:f0:4a:40:
                    95:e0:97:a3:e1:2b:b3:6e:c2:d0:06:73:bf:1c:c0:
                    fd:c4:25:fd:66:45:e6:b9:d4:b3:b3:e2:23:b0:dc:
                    4f:4f:68:45:eb:1a:e3:05:72:eb:e8:7c:76:b3:c6:
                    22:32:8a:d8:b7:7d:27:87:4d:66:42:0d:44:d9:a9:
                    00:e1:cf:25:c3:38:fb:5d:e1:d1:f4:4f:00:a3:2f:
                    64:33:d8:2c:95:b6:bd:05:a0:5d:5f:6f:ef:72:aa:
                    dc:a0:3a:69:7f:0c:8a:cd:4e:04:85:9f:35:39:ec:
                    6b:3d:ec:60:ec:3d:61:e8:64:c1:d0:a5:f6:fd:77:
                    04:f3:bf:7a:18:4d:d3:f6:35:c8:0f:00:5a:50:69:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:46:0B:7E:6C:E4:3C:38:6E:FE:9C:D6:2E:92:5E:14:71:C4:C4
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/62d6ce4938545482cf5d32416badadee60923896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:08:ce:dd:a5:c6:6d:ca:99:db:62:e7:16:d2:aa:c7:72:e2:
         8c:d1:7e:fb:cc:7b:a6:96:e2:c8:d2:35:f3:7b:50:25:d3:66:
         d8:a2:36:dd:2f:3a:81:27:6a:05:23:b6:ca:df:85:af:ea:dd:
         bb:a5:1d:a8:b8:ea:9c:0f:22:bd:83:99:a1:08:17:fd:22:4e:
         62:ca:d2:97:0c:4b:c4:42:fa:84:2f:26:00:98:ad:60:f2:12:
         6d:ce:9e:f0:02:99:a6:0a:7c:9f:4c:d5:49:94:74:36:6d:49:
         0b:6e:87:9f:a2:f9:5b:2b:d3:42:9c:30:d7:f1:03:c9:ee:62:
         2c:ee:3a:0f:cc:df:5c:96:94:c5:a2:1e:a0:9f:0b:d1:3a:bf:
         fc:bd:a0:3f:59:4f:a2:3f:eb:1c:87:9e:12:94:18:4f:c9:bc:
         42:49:7c:89:4b:86:17:b1:d1:84:03:dc:c5:63:25:44:7f:34:
         ea:2f:fc:40:18:7c:7f:1d:da:44:38:ee:8c:24:63:bf:61:87:
         90:7a:fc:d7:f0:50:09:19:e5:30:6f:f9:5c:76:21:29:30:1a:
         81:ed:9d:c2:c3:d0:6a:16:ef:56:6a:4a:7a:63:8d:53:f9:62:
         2d:20:56:3c:8a:c3:b2:10:ac:dc:bb:dc:8f:be:ff:ee:d5:be:
         04:3a:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org