Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/ff320338e39db2d98c1fa163fa55ebe9ee7319df.roa
File:                     ff320338e39db2d98c1fa163fa55ebe9ee7319df.roa (raw, json)
Hash identifier:          wtrILoMJNRA60c5MqTqPmpHzgNZK3b2wjzgr36Qv5dw=
Subject key identifier:   96:C2:00:D3:F7:6E:9E:BB:AD:5A:95:25:CE:6F:80:53:60:08:43:F4
Certificate issuer:       /CN=2140dc21f090f67e262500e16150c1488a57ea18
Certificate serial:       066D61
Authority key identifier: 7A:25:37:17:15:A8:99:5F:0E:61:B8:3D:8A:91:28:64:41:D9:7B:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2140dc21f090f67e262500e16150c1488a57ea18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/ff320338e39db2d98c1fa163fa55ebe9ee7319df.roa
Signing time:             Mon 04 Dec 2023 11:43:04 +0000
ROA not before:           Mon 04 Dec 2023 11:43:04 +0000
ROA not after:            Mon 04 Dec 2028 11:43:04 +0000
asID:                     271908
IP address blocks:        131.255.17.0/24 maxlen: 24
                          131.255.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421217 (0x66d61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2140dc21f090f67e262500e16150c1488a57ea18
        Validity
            Not Before: Dec  4 11:43:04 2023 GMT
            Not After : Dec  4 11:43:04 2028 GMT
        Subject: CN=ff320338e39db2d98c1fa163fa55ebe9ee7319df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:e5:a8:50:50:3c:66:a0:95:28:34:24:a0:
                    f5:d5:dd:c2:f8:fd:fa:e6:03:cd:0c:30:91:91:96:
                    99:32:11:25:ae:09:f9:7c:4f:3b:64:ec:1c:ec:db:
                    27:b9:89:2d:aa:30:49:28:0b:c6:98:6d:b0:8b:62:
                    d3:41:a2:5f:0e:d6:ae:54:04:26:05:f2:d2:cd:73:
                    cd:97:8b:2e:b8:5e:30:c7:3f:a4:20:b4:9c:f3:0e:
                    a0:e2:0f:a0:b8:11:ac:78:ff:93:d8:ec:0f:11:3d:
                    db:fa:76:20:e6:5f:d6:57:7e:ce:54:a7:fe:2a:78:
                    34:7e:02:e3:b7:57:01:43:2b:0b:d2:36:2f:83:ac:
                    cf:3f:f4:c3:9d:d4:60:e6:32:b8:6d:e0:7f:33:c7:
                    6c:82:7d:e3:47:be:df:b6:a7:d4:ac:22:4d:32:db:
                    0d:b0:3c:94:70:8c:97:e9:24:3d:4c:0a:6b:7b:b6:
                    f7:3b:a7:74:34:46:89:c8:23:23:8d:9f:ba:98:3e:
                    3e:07:0d:42:b2:5e:93:c1:a8:70:5d:7b:ed:88:d7:
                    ba:dc:48:fd:31:20:3b:7c:f2:77:e4:2c:d8:91:7e:
                    35:50:6d:e0:e3:6e:a7:d3:48:de:c6:9e:88:bd:25:
                    b9:a5:18:f8:28:5b:1a:cb:e6:01:7e:83:6c:ee:2d:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:00:D3:F7:6E:9E:BB:AD:5A:95:25:CE:6F:80:53:60:08:43:F4
            X509v3 Authority Key Identifier:
                keyid:7A:25:37:17:15:A8:99:5F:0E:61:B8:3D:8A:91:28:64:41:D9:7B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2140dc21f090f67e262500e16150c1488a57ea18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/ff320338e39db2d98c1fa163fa55ebe9ee7319df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/2140dc21f090f67e262500e16150c1488a57ea18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0-131.255.19.255

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:2d:29:2a:34:23:4d:a7:48:27:d0:f5:02:76:b0:20:2a:
         28:8d:27:64:7b:a0:cb:03:e6:63:44:6a:bd:d2:52:89:bd:85:
         b0:f9:78:02:10:8e:82:79:37:0f:fe:f6:f6:21:79:b6:86:69:
         d9:c3:40:fc:16:bd:e4:b4:0e:33:f1:29:48:22:c3:b8:4a:70:
         f2:b9:37:36:48:93:ef:58:cd:b9:80:9d:1f:fc:8e:c8:bd:9e:
         f7:8c:f7:86:8d:1b:b6:47:4d:71:38:dc:11:9e:e0:ad:3a:25:
         4b:70:2f:b6:d0:e8:78:dd:1c:4f:3c:19:f4:4e:b7:2c:a5:a3:
         4f:83:5b:81:97:e1:de:bb:86:24:57:40:3d:cb:e0:e1:d4:f8:
         97:15:28:a6:86:f3:74:1a:07:0a:0e:68:b9:68:78:00:b3:2d:
         38:fa:e2:c7:ff:de:68:01:0b:db:1b:dc:c4:5b:38:c2:70:45:
         d8:3f:7f:6e:41:19:6c:89:89:5d:30:31:b3:c5:11:b9:c8:a6:
         af:8a:3f:1f:88:17:40:2f:16:cf:06:9b:61:89:4a:90:83:1b:
         19:9d:3c:69:ba:a2:d1:25:ac:ba:3f:e8:9f:a3:f2:db:8e:28:
         de:4d:b9:70:4d:51:47:30:db:60:3b:06:b6:8d:e4:9b:42:d6:
         a9:23:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org