Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bd50144ac32d55ae8cd08ed9231a3f69649ff030.roa
File:                     bd50144ac32d55ae8cd08ed9231a3f69649ff030.roa (raw, json)
Hash identifier:          YJgCuLk8VfzNdLwJcYqKqo0/ZIyR352HazXaccf9eqE=
Subject key identifier:   E8:74:28:8C:4E:A1:0B:43:B3:A6:DB:57:F3:BC:07:87:53:09:58:2D
Certificate issuer:       /CN=4765b8b9f74b776a4e530fc87f986c651911f727
Certificate serial:       16CA7E
Authority key identifier: F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bd50144ac32d55ae8cd08ed9231a3f69649ff030.roa
Signing time:             Fri 24 Mar 2023 08:30:07 +0000
ROA not before:           Thu 23 Mar 2023 08:30:07 +0000
ROA not after:            Sat 22 Mar 2025 08:30:07 +0000
asID:                     264754
IP address blocks:        168.194.140.0/24 maxlen: 24
                          168.194.141.0/24 maxlen: 24
                          168.194.142.0/24 maxlen: 24
                          168.194.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493630 (0x16ca7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765b8b9f74b776a4e530fc87f986c651911f727
        Validity
            Not Before: Mar 23 08:30:07 2023 GMT
            Not After : Mar 22 08:30:07 2025 GMT
        Subject: CN=bd50144ac32d55ae8cd08ed9231a3f69649ff030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:53:a5:53:1e:93:d6:35:58:43:8b:f1:63:
                    81:f0:e0:df:45:30:ae:b5:8f:92:f1:b3:27:a7:7d:
                    99:d6:9a:7c:b7:c1:36:5d:2a:7d:f7:e7:b4:cb:f7:
                    69:20:83:0a:61:7f:4b:ef:cb:d8:53:14:9b:b7:ca:
                    67:bb:7c:a9:48:2e:71:ca:12:be:2d:47:81:83:c3:
                    eb:3c:70:67:76:49:f3:a7:79:96:f2:84:62:b6:de:
                    98:f8:84:d7:d0:5f:cd:65:c2:c4:ab:cf:58:5a:8d:
                    1a:b1:6c:89:67:e5:57:8c:2c:54:ab:e4:25:dd:7e:
                    01:c6:c6:4c:12:12:7a:f9:4f:65:7d:dd:9a:da:c6:
                    17:4c:d2:2b:76:ed:c3:f7:88:f8:9e:c8:ae:a5:bb:
                    0f:6c:b8:2d:57:f1:a2:4c:69:54:24:57:15:e8:02:
                    e4:d3:26:b2:5c:6e:a5:22:c2:b5:c5:0b:89:82:9c:
                    3d:dc:80:c7:d5:b8:7c:87:4b:e4:3e:75:fe:7a:d4:
                    90:0f:a4:9a:75:61:06:5e:52:da:5b:fc:e8:bb:42:
                    27:b3:3d:3e:7e:04:d7:04:48:aa:c0:13:05:57:7b:
                    28:92:55:10:71:ab:47:54:a2:87:25:82:ae:02:62:
                    77:08:98:94:31:b3:ac:05:14:cb:40:12:69:dd:e3:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:28:8C:4E:A1:0B:43:B3:A6:DB:57:F3:BC:07:87:53:09:58:2D
            X509v3 Authority Key Identifier:
                keyid:F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/bd50144ac32d55ae8cd08ed9231a3f69649ff030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/4765b8b9f74b776a4e530fc87f986c651911f727.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:43:66:c9:58:1b:c0:86:66:5c:b1:f7:5b:e0:d5:83:49:b8:
         42:48:f6:e8:33:18:3b:75:e5:53:eb:a6:e9:a3:76:5c:76:84:
         99:ba:6a:cb:07:5c:f7:9a:7e:65:85:ef:2e:76:f7:1d:f9:f5:
         f3:89:62:8d:2a:0a:15:98:f0:73:0a:a9:f0:a2:c7:9d:9c:80:
         8f:da:a4:8b:eb:2d:d8:3b:87:5a:0b:a7:5b:6c:2a:8e:4f:2a:
         6a:d3:9d:16:0d:fc:8c:f7:a0:34:1c:ab:b7:c9:9c:26:33:3c:
         df:27:8c:cb:d7:92:76:ff:33:4f:dc:22:1d:b6:e3:bb:c4:64:
         12:27:1f:6b:5d:6a:ff:28:d0:87:08:13:d2:6f:63:74:ba:41:
         ce:a2:37:92:95:78:d7:68:72:ec:94:c1:a8:06:5e:5f:2d:1f:
         4f:c9:85:52:23:37:aa:c8:50:5e:77:b8:76:7e:02:de:35:4d:
         71:22:46:9e:ed:6f:80:2a:cc:8c:d9:b7:1d:f9:59:11:8d:b4:
         37:a0:48:e8:86:4b:69:7a:d6:5d:19:d6:1c:98:b1:d9:d6:64:
         32:b1:e6:a7:5a:bb:77:41:6a:e3:61:ec:8b:6b:53:af:f6:aa:
         dd:cb:9d:c5:65:b7:4f:8f:46:48:79:b7:37:9f:19:5c:3e:46:
         cc:81:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org