Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/c108c56bdf1b4810d2dcc07d7e51f2294dd0f4d3.roa
File:                     c108c56bdf1b4810d2dcc07d7e51f2294dd0f4d3.roa (raw, json)
Hash identifier:          iBehjlCqWwsgVSQPdIIntu8pwRFT5keDj970hq2gY98=
Subject key identifier:   BB:1F:9B:4B:BA:88:9F:F9:F6:1D:4F:6D:7F:C7:0A:87:6A:F4:66:9B
Certificate issuer:       /CN=098bd67d41529269ed3f8480514d1dc399560651
Certificate serial:       01588C
Authority key identifier: D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/098bd67d41529269ed3f8480514d1dc399560651.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/c108c56bdf1b4810d2dcc07d7e51f2294dd0f4d3.roa
Signing time:             Thu 19 Oct 2023 19:04:39 +0000
ROA not before:           Thu 19 Oct 2023 19:04:39 +0000
ROA not after:            Sun 19 Oct 2025 19:04:39 +0000
asID:                     52396
IP address blocks:        166.75.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88204 (0x1588c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098bd67d41529269ed3f8480514d1dc399560651
        Validity
            Not Before: Oct 19 19:04:39 2023 GMT
            Not After : Oct 19 19:04:39 2025 GMT
        Subject: CN=c108c56bdf1b4810d2dcc07d7e51f2294dd0f4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:18:9f:1f:18:43:12:69:9f:16:f1:a3:3f:
                    66:d5:0b:78:8e:71:99:9f:4a:97:98:fc:89:ff:ab:
                    e8:da:1e:b8:23:1c:ac:e8:a9:a5:fb:95:9b:bc:d2:
                    a0:77:b2:a8:73:7d:72:92:cf:8a:d1:af:b1:de:65:
                    0f:7d:89:90:e1:33:66:03:57:3a:99:ab:82:23:4f:
                    d9:b1:89:35:e4:55:71:71:da:65:fa:c4:67:9c:11:
                    bd:cd:7f:19:da:fb:b2:a8:fc:5b:69:9d:d8:a4:67:
                    aa:f9:a9:7f:2f:19:4d:ad:53:9f:64:3e:a3:1d:38:
                    d5:99:bc:71:b3:21:b4:fd:98:fd:e4:e7:8b:38:77:
                    67:cc:28:a5:5d:8e:d3:d9:bd:88:f9:2a:2a:9e:51:
                    05:b4:18:45:f0:71:26:c0:72:56:f9:7c:0c:d2:c1:
                    75:2d:df:c3:a6:90:8b:81:30:96:92:6e:7e:ce:bb:
                    88:4f:38:c0:b6:9d:42:72:3d:a2:7c:7b:91:f5:e6:
                    8e:3d:d5:1c:7b:ee:80:08:f9:19:8e:c6:bd:0d:da:
                    d9:75:64:41:f6:8a:11:73:73:0a:cd:f1:20:15:e2:
                    2e:96:22:fd:ea:e5:c6:54:4e:a3:88:c4:25:08:42:
                    aa:60:35:e7:76:e1:6c:1a:91:23:68:7d:d5:e3:fe:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1F:9B:4B:BA:88:9F:F9:F6:1D:4F:6D:7F:C7:0A:87:6A:F4:66:9B
            X509v3 Authority Key Identifier:
                keyid:D1:4E:AD:7A:D8:EE:39:C8:B6:11:49:1F:7C:11:B8:AD:67:68:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/098bd67d41529269ed3f8480514d1dc399560651.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/c108c56bdf1b4810d2dcc07d7e51f2294dd0f4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4501569-7383-4d2c-a173-8fbbd17beab8/098bd67d41529269ed3f8480514d1dc399560651.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:97:59:a5:01:22:d2:ea:3a:08:df:6a:ba:74:de:77:08:
         b5:26:d4:67:7f:c2:82:8a:3f:48:64:8e:99:d7:76:dc:2c:ed:
         4a:27:61:74:8f:35:c7:d6:4d:1e:4e:c0:8f:0e:05:ab:94:1b:
         f2:55:cc:ba:8f:67:eb:21:04:ae:7f:5c:d6:01:9d:38:71:8d:
         4e:a8:7e:10:0d:10:ac:11:b3:ae:44:96:b6:61:29:b0:2f:a4:
         5f:b6:76:a6:42:42:e7:cb:f2:7f:67:64:15:98:d4:9a:f3:ce:
         9c:8b:42:e0:e3:73:5e:4b:6a:00:54:7c:15:27:34:8e:78:14:
         04:86:b9:02:47:50:34:a5:28:65:3e:15:6b:87:7a:45:21:69:
         1a:50:9a:a7:a7:7d:99:0b:03:17:77:d8:01:fe:52:da:2a:0e:
         30:59:da:63:7d:9f:6d:1c:c7:94:49:a1:7d:e5:a4:0d:4e:e6:
         7c:73:8d:30:48:bc:53:cd:51:fa:31:b9:e1:c2:20:26:3b:3e:
         de:53:63:c9:72:94:be:13:56:89:28:7a:2a:40:b0:af:4a:0d:
         01:53:4c:65:f9:04:2c:40:60:8c:0b:06:c6:2f:bf:7d:10:f8:
         98:bd:5b:07:89:02:04:68:f5:5c:de:53:f2:88:e5:cf:cd:d1:
         c4:fe:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org