Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b37e0bc1e71164e2b527262d9c96ebfb57b4c0ee.roa
File:                     b37e0bc1e71164e2b527262d9c96ebfb57b4c0ee.roa (raw, json)
Hash identifier:          MH6Yu74FqJsc7odnY6QpHEDwKBgqlL4jYWMZ/xQOe5M=
Subject key identifier:   30:8D:9A:98:7E:FB:6A:D1:22:31:57:34:88:91:EE:7E:55:55:D5:C0
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       07710C
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b37e0bc1e71164e2b527262d9c96ebfb57b4c0ee.roa
Signing time:             Sat 28 Jan 2023 14:39:38 +0000
ROA not before:           Thu 26 Jan 2023 14:37:34 +0000
ROA not after:            Tue 28 Jan 2025 14:37:34 +0000
asID:                     271998
IP address blocks:        131.72.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487692 (0x7710c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Jan 26 14:37:34 2023 GMT
            Not After : Jan 28 14:37:34 2025 GMT
        Subject: CN=b37e0bc1e71164e2b527262d9c96ebfb57b4c0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:9b:06:11:46:c4:88:aa:d0:92:93:4f:84:
                    5e:61:a7:25:9c:bf:d8:39:9f:cb:75:e7:83:8f:da:
                    76:00:5f:a4:4a:81:c8:84:62:de:48:67:65:3d:86:
                    95:76:9a:91:ac:46:f1:5e:22:48:e8:12:16:ce:7c:
                    13:ef:39:bc:a3:5f:72:df:48:df:9f:ba:74:1b:af:
                    ae:6c:21:60:47:e5:1f:4d:f0:31:a2:90:f2:07:a9:
                    be:87:ca:a3:a9:1e:d8:e3:d1:4a:e8:4c:24:27:12:
                    a8:09:29:56:5c:a0:09:76:8e:f1:35:be:2d:97:fd:
                    38:a5:55:f7:19:6c:de:33:06:75:93:c5:e7:c4:d3:
                    47:4e:cd:6a:de:3a:5e:69:1b:63:d0:00:7d:52:cf:
                    a4:1e:ad:45:9d:05:b8:52:28:22:de:bd:f1:2c:8d:
                    07:80:2d:05:bd:b0:44:44:8b:9e:71:51:73:f4:76:
                    b1:cf:cf:65:62:04:72:45:1f:34:0d:99:a4:24:45:
                    0b:93:c3:24:5e:c1:50:78:11:cc:e0:0e:f9:8d:39:
                    f5:e4:a9:75:25:da:12:76:72:0c:cb:30:e3:2c:2e:
                    c2:bd:25:22:d9:52:44:97:c9:6f:74:c5:9e:76:76:
                    46:0d:1a:6a:91:cb:e3:86:09:cf:04:45:83:9b:07:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8D:9A:98:7E:FB:6A:D1:22:31:57:34:88:91:EE:7E:55:55:D5:C0
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/b37e0bc1e71164e2b527262d9c96ebfb57b4c0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:71:b4:02:43:e8:02:50:12:65:3f:39:cd:97:df:5f:c7:48:
         bb:69:89:94:d9:54:4d:d2:b0:4b:63:01:4c:11:04:ba:9a:99:
         25:97:30:7b:2a:2b:06:c7:3c:b3:a8:68:e8:84:2b:c1:ef:9b:
         a2:3d:dc:cc:43:01:92:39:58:9c:03:4b:24:39:83:0e:74:2b:
         29:61:c0:01:b3:68:2d:ac:6c:eb:97:1b:e1:a4:46:8a:33:ea:
         7f:d2:a5:78:60:be:33:59:7b:5e:82:9b:75:1b:73:d0:f4:14:
         c2:8f:e9:6c:40:40:88:51:ff:d6:39:d1:b7:2c:7c:f8:79:e4:
         25:b4:f7:a3:8d:d8:97:25:0d:aa:32:4f:f2:a1:1e:0a:6d:a0:
         3d:b5:f4:3f:bf:bd:e4:76:b0:a8:aa:3a:db:d6:77:6c:9e:a8:
         df:25:18:6a:af:a5:34:51:2f:0c:f5:77:b4:76:15:c8:3f:aa:
         b5:91:79:61:71:5d:cf:c2:c5:52:6b:20:ad:78:ca:24:e5:d3:
         25:71:f0:aa:ea:8d:3f:00:8c:b1:fe:d9:20:d6:ec:ed:73:16:
         c3:17:62:16:46:c1:0f:63:c4:91:dc:11:20:f4:a0:6c:d5:e6:
         e9:35:13:6f:53:63:55:91:06:8a:fe:fa:cb:2a:96:13:6e:85:
         26:05:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org