Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa
File:                     e17015a6f2218fd08e260d1f80c6150ab949afb9.roa (raw, json)
Hash identifier:          RXKFsWx59PPYmwQcslqCpRm1odn6snp8pBK8xhzkdSg=
Subject key identifier:   43:BA:04:65:5F:CD:36:5E:2F:03:63:10:78:2E:39:BF:A9:A7:70:9F
Certificate issuer:       /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial:       12947D
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa
Signing time:             Tue 30 Aug 2022 20:04:04 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Fri 29 Sep 2023 03:00:00 +0000
asID:                     64127
IP address blocks:        167.249.28.0/24 maxlen: 24
                          167.249.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217661 (0x12947d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2023 GMT
        Subject: CN=e17015a6f2218fd08e260d1f80c6150ab949afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:76:d0:b8:f1:f4:29:f5:51:32:3f:6e:5f:
                    af:b9:f8:7e:4e:00:3a:14:49:8b:59:f2:f9:66:2e:
                    dd:cc:d7:b8:dd:08:9a:fc:82:2a:6e:42:77:08:d3:
                    03:6c:46:9d:0a:46:cf:34:42:e4:9d:31:16:9c:47:
                    f2:63:d4:0b:72:72:4e:19:73:82:d6:59:1c:dc:b4:
                    09:6c:84:98:ba:4e:c3:77:72:c0:52:96:12:cb:bc:
                    fc:98:17:b1:64:3d:93:d6:0b:e9:e8:1a:37:6f:0c:
                    ea:0f:f5:fc:d3:97:35:50:bc:7a:fc:0d:f3:fa:6b:
                    c6:b5:3b:2f:af:9d:9d:b5:ca:8c:04:0f:91:e3:a0:
                    d3:23:fa:8c:ba:da:f6:4f:e4:8b:c0:98:10:b1:24:
                    5e:68:e8:9d:10:df:94:56:4a:4f:66:74:db:10:b2:
                    18:98:ae:6d:54:cd:d6:55:b7:37:5e:13:46:b7:85:
                    59:16:e1:fc:7e:96:c0:4d:ee:04:8b:a1:d3:18:f5:
                    60:4e:38:76:83:5f:ee:e7:75:10:ed:52:77:41:cc:
                    cb:c6:99:79:40:1a:46:70:60:e0:06:ed:bd:0b:2b:
                    00:94:bf:be:0d:e6:9e:39:fb:fe:f9:be:f7:55:fa:
                    9a:78:d5:1c:9e:c8:af:0e:5a:d2:84:60:15:7c:a1:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:04:65:5F:CD:36:5E:2F:03:63:10:78:2E:39:BF:A9:A7:70:9F
            X509v3 Authority Key Identifier:
                keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/24
                  167.249.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:50:44:8a:b9:61:a4:cf:30:0d:d5:dd:51:5f:1b:57:9b:09:
         ae:b4:3b:6a:2f:f9:d3:33:11:76:6e:04:d4:c0:8e:fa:92:ab:
         ee:83:b5:be:d1:bc:72:cd:1e:2e:6f:a7:28:8e:b2:75:2b:10:
         34:44:c8:9e:e4:c3:43:53:62:98:0a:16:aa:23:a9:b1:e6:65:
         84:b8:c1:88:90:5e:23:cb:dc:d7:c3:a8:2f:67:c5:d8:4d:60:
         e9:ea:95:c3:19:ac:9b:08:18:92:ff:1f:80:77:de:08:81:8a:
         df:1c:b7:09:2a:de:c3:2f:76:23:05:fe:46:57:73:57:37:f7:
         77:26:33:3a:2d:4b:6f:00:29:8a:1c:c2:ad:ca:b2:dd:d7:96:
         58:31:29:08:20:8a:19:0c:3a:2b:21:c6:2d:b1:9c:ee:1a:93:
         d1:bc:ee:2a:f5:6e:17:0c:4c:a2:70:d1:8a:fe:3f:fb:cb:68:
         a5:f8:75:6e:8e:4f:d1:86:18:9d:66:bf:07:57:98:81:34:20:
         02:1b:62:49:97:e3:1d:a2:69:16:0a:4d:7c:ea:f1:7a:d0:1c:
         44:6e:14:c6:e0:28:8e:c5:ad:ca:c7:21:96:85:dc:05:4b:ba:
         bf:23:e6:92:3f:55:98:18:31:e5:47:86:72:54:b4:38:21:66:
         58:9b:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org