Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/00e076579cae84c35a05e8c045a53cce698f8801.roa
File:                     00e076579cae84c35a05e8c045a53cce698f8801.roa (raw, json)
Hash identifier:          eJA9vjBbz2rjtfQ997YP4muxPyVVUeo9A46jlEk/3iI=
Subject key identifier:   02:31:1C:A5:06:0D:54:C6:14:BF:B8:34:40:BE:2C:C8:79:8A:76:97
Certificate issuer:       /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial:       114E2C
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/00e076579cae84c35a05e8c045a53cce698f8801.roa
Signing time:             Wed 31 Jan 2024 07:30:08 +0000
ROA not before:           Wed 31 Jan 2024 07:30:08 +0000
ROA not after:            Fri 30 Jan 2026 07:30:08 +0000
asID:                     271991
IP address blocks:        168.195.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134124 (0x114e2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
        Validity
            Not Before: Jan 31 07:30:08 2024 GMT
            Not After : Jan 30 07:30:08 2026 GMT
        Subject: CN=00e076579cae84c35a05e8c045a53cce698f8801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1b:68:6f:83:72:7b:9e:d5:f9:37:d3:04:d9:
                    4b:1c:86:57:dc:b4:0e:7a:12:b2:96:8c:97:fa:6d:
                    30:7f:0e:53:fe:9f:ca:7f:7c:c5:f9:e3:fb:ce:3c:
                    0d:9c:0e:b1:0e:2c:51:5d:48:a1:1a:11:0d:63:b1:
                    30:2c:97:c4:d2:3d:8d:53:2b:87:9e:25:b2:76:f3:
                    92:e7:a1:7d:97:b8:1c:ab:ff:05:18:53:ff:43:0f:
                    dc:d7:a4:99:84:07:b8:8f:d7:49:98:97:62:bf:b8:
                    b6:78:71:79:8b:d3:24:8a:6e:99:43:dc:df:05:4e:
                    04:23:55:b1:de:fd:4c:a8:14:43:92:10:f0:61:78:
                    28:84:e0:82:aa:48:dd:24:9d:61:cf:86:83:9f:78:
                    bb:1e:b6:1b:75:54:5b:fb:b9:46:c8:81:99:93:5c:
                    e8:b2:ef:e8:ca:45:d3:b1:d0:fc:40:4a:f4:8c:2f:
                    57:bd:26:d3:d6:62:6c:b7:f9:2c:42:d2:58:26:c9:
                    a4:25:53:15:38:b5:7b:6c:ea:24:35:66:1a:1a:c0:
                    4a:f8:e0:74:4e:06:e2:85:12:3a:52:6b:cc:9f:06:
                    99:d4:72:ac:00:ec:54:5d:60:68:34:b7:e7:c8:7b:
                    20:85:9d:71:00:3f:c8:23:dc:b3:c0:3b:ae:e8:0f:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:31:1C:A5:06:0D:54:C6:14:BF:B8:34:40:BE:2C:C8:79:8A:76:97
            X509v3 Authority Key Identifier:
                keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/00e076579cae84c35a05e8c045a53cce698f8801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:e1:e0:ff:11:2a:e8:6a:f6:9e:97:c1:61:d0:fb:29:33:
         67:56:fd:e7:c9:58:0b:0e:70:f6:e6:4a:08:b6:36:70:aa:f1:
         40:65:a7:4b:6f:f8:34:b9:58:d6:c7:42:35:c2:5c:05:c9:0e:
         1e:18:03:2f:94:1d:ee:57:41:e5:15:c4:f5:9a:02:7c:c1:9d:
         4d:18:9e:55:c1:22:53:db:6d:c9:28:85:dc:2c:17:cb:26:08:
         78:76:c0:92:9e:a8:d7:a1:1b:4d:2d:f8:90:38:93:bd:8e:0d:
         9f:15:26:bc:f2:6c:96:8d:4d:05:10:41:14:cb:30:b8:3b:9b:
         6b:9b:ce:1e:5a:b7:e2:20:9f:79:70:5d:39:d8:28:20:4e:6b:
         48:9d:c4:51:30:95:3e:0c:dd:a1:ed:4e:d8:fa:b0:e1:84:ec:
         f1:93:f4:56:fe:d6:3e:0d:9e:63:ea:b1:2d:d7:4b:3c:4d:43:
         5b:67:df:e9:7f:75:fa:70:38:a3:b9:3c:d0:f2:33:e0:6f:f9:
         33:c4:f5:86:bb:bf:a5:56:10:c0:8e:20:66:23:85:c1:c8:ea:
         e5:8e:64:4e:59:0b:66:24:0f:06:52:9a:dd:6a:60:96:c5:6a:
         36:ae:33:1e:4e:9c:06:08:2c:76:5b:d6:0d:15:b3:be:d5:55:
         65:01:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org