Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2e33164-3cc0-47c8-b3e4-592df3cd3689/1b87db5f13ea4367e4b49db3a44e024f224a4488.roa
File:                     1b87db5f13ea4367e4b49db3a44e024f224a4488.roa (raw, json)
Hash identifier:          iKb/tPaztEFEKqQEm6YQN48uK5QQv49P2ICtSZJchcg=
Subject key identifier:   1E:A5:8E:CC:25:BF:DC:75:63:56:9C:C8:28:11:5F:E6:84:A8:DE:A9
Certificate issuer:       /CN=7248a5ea3e04428d83fe75b0bcdb893561cb5aa6
Certificate serial:       218D16
Authority key identifier: 80:6E:4D:88:91:C5:9A:94:E1:39:6E:E4:E6:02:E0:BF:BF:4D:58:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7248a5ea3e04428d83fe75b0bcdb893561cb5aa6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2e33164-3cc0-47c8-b3e4-592df3cd3689/1b87db5f13ea4367e4b49db3a44e024f224a4488.roa
Signing time:             Fri 26 Jan 2024 00:28:49 +0000
ROA not before:           Fri 26 Jan 2024 00:28:49 +0000
ROA not after:            Mon 26 Jan 2026 00:28:49 +0000
asID:                     262202
IP address blocks:        165.183.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198806 (0x218d16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7248a5ea3e04428d83fe75b0bcdb893561cb5aa6
        Validity
            Not Before: Jan 26 00:28:49 2024 GMT
            Not After : Jan 26 00:28:49 2026 GMT
        Subject: CN=1b87db5f13ea4367e4b49db3a44e024f224a4488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:14:b5:3a:59:c9:f3:29:66:6f:94:d8:3c:
                    7d:e0:d4:00:04:28:52:81:e2:94:f5:ac:e6:a7:ec:
                    34:d0:9c:34:8d:7e:49:06:55:26:67:61:59:13:34:
                    12:52:e7:b9:cf:39:86:4e:14:ff:8f:da:4c:04:72:
                    8e:2a:f2:0f:8b:aa:9b:33:d1:87:c9:ce:a7:7c:96:
                    52:49:f0:45:98:c0:35:d0:31:99:b6:d4:46:c1:85:
                    5f:1e:e2:4e:40:7d:95:7d:6f:d5:05:3b:f5:4e:59:
                    e0:10:a3:0c:e6:e9:3b:fc:81:6e:d1:21:9d:31:f8:
                    c4:f1:97:6e:b2:f9:65:cd:ec:c7:10:ad:76:d4:eb:
                    75:74:c8:bf:fb:be:c1:c0:9d:82:69:17:80:63:b8:
                    26:7c:58:d6:b5:80:6f:1b:33:f7:8d:ce:8f:ba:21:
                    c3:61:0e:bf:1b:69:d1:92:7f:a1:bb:a1:9e:18:36:
                    7f:47:69:e6:20:4c:6d:f2:19:a1:65:70:08:ea:dd:
                    b1:11:0b:cb:40:80:52:bc:05:b0:27:ce:a4:83:aa:
                    61:76:2c:3d:3c:15:8a:22:c6:6f:c3:b6:24:c6:6a:
                    3c:90:91:4b:46:5e:00:63:d2:e2:10:a8:c4:50:96:
                    6b:e5:61:b0:00:69:58:d7:7d:44:69:af:d6:f7:96:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:8E:CC:25:BF:DC:75:63:56:9C:C8:28:11:5F:E6:84:A8:DE:A9
            X509v3 Authority Key Identifier:
                keyid:80:6E:4D:88:91:C5:9A:94:E1:39:6E:E4:E6:02:E0:BF:BF:4D:58:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7248a5ea3e04428d83fe75b0bcdb893561cb5aa6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2e33164-3cc0-47c8-b3e4-592df3cd3689/1b87db5f13ea4367e4b49db3a44e024f224a4488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2e33164-3cc0-47c8-b3e4-592df3cd3689/7248a5ea3e04428d83fe75b0bcdb893561cb5aa6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.183.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:7b:2f:de:4f:48:c3:87:0e:e7:da:6f:08:61:86:f8:70:
         66:43:26:bb:6a:0e:5a:36:34:a1:bf:8e:4e:af:c1:5a:d2:e7:
         a8:dd:57:f7:b7:d6:2f:ec:b8:bd:a5:b4:6b:04:e7:b5:eb:fb:
         ce:12:8c:6f:43:c5:0a:18:19:37:fd:6c:fd:72:c2:9c:dc:c8:
         06:c3:34:c4:ab:ca:c7:12:a3:9b:80:f6:22:a6:c9:9c:ff:b3:
         51:88:51:26:61:d4:30:0d:ba:a4:b1:7a:84:7e:3d:1d:f3:44:
         21:dc:d2:04:a0:d0:9c:d5:5e:35:c9:53:6e:b1:13:bb:24:7d:
         3e:7e:88:82:f6:02:10:c8:2e:11:1f:03:4a:34:e2:b8:ae:84:
         f9:00:56:7c:9a:38:7d:e7:95:01:36:1d:e1:50:a3:4d:f0:68:
         da:36:ce:d9:92:6d:0b:26:c3:0a:63:47:c3:1d:21:ee:cc:26:
         7b:60:14:75:9e:16:71:de:93:1f:f8:b6:18:99:0c:2d:67:4a:
         62:1d:cb:dd:5d:b3:6e:21:18:b8:b2:42:78:d6:5e:9d:94:ce:
         b6:c3:a4:6b:23:e5:c7:43:d3:3e:c3:bc:76:b2:d7:55:0e:bc:
         b0:6b:55:65:65:f3:96:d5:69:cc:da:27:a2:72:42:52:ae:4e:
         0b:4d:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org