Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/51edc363b8e6cef96158957d9725836e2cc06a8a.roa
File:                     51edc363b8e6cef96158957d9725836e2cc06a8a.roa (raw, json)
Hash identifier:          BD29LJuVwcoc29438nAfBhfc0MzuLFC/T55vngJ9Uys=
Subject key identifier:   EF:E3:DC:7E:C3:53:F2:6B:77:E0:36:56:69:F6:7C:22:64:71:E1:6C
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       235D30
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/51edc363b8e6cef96158957d9725836e2cc06a8a.roa
Signing time:             Tue 26 Sep 2023 17:26:27 +0000
ROA not before:           Mon 25 Sep 2023 17:26:20 +0000
ROA not after:            Fri 26 Sep 2025 17:26:20 +0000
asID:                     272883
IP address blocks:        157.100.37.0/24 maxlen: 24
                          157.100.42.0/24 maxlen: 24
                          157.100.46.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317616 (0x235d30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Sep 25 17:26:20 2023 GMT
            Not After : Sep 26 17:26:20 2025 GMT
        Subject: CN=51edc363b8e6cef96158957d9725836e2cc06a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:7a:46:1e:d3:b0:2b:98:1b:d5:2d:7e:11:
                    32:59:7f:08:c6:46:bd:e8:40:b1:13:1a:0d:3e:66:
                    3b:bc:35:46:c0:71:9c:7f:d7:1a:b8:5e:44:40:08:
                    79:7a:e7:60:3e:48:c8:e8:d6:6b:79:40:de:29:b6:
                    1e:c1:d4:5f:36:72:f1:7e:fa:77:40:fb:39:f0:1b:
                    1a:4f:a9:a6:b6:12:18:52:3a:69:16:36:32:1e:88:
                    d9:28:8b:48:85:62:97:0d:fa:ab:a8:02:64:c2:49:
                    2f:30:4e:ee:d7:37:4a:38:c5:02:ea:c4:04:a7:11:
                    39:71:07:42:d1:95:77:eb:9a:fe:fd:2b:60:d5:0f:
                    5c:fa:fe:b1:be:f2:8a:f9:17:e0:34:02:e4:4e:1b:
                    e7:f6:07:36:37:49:df:98:3c:16:7b:7b:7d:b3:c9:
                    1a:cf:af:ee:99:d7:fd:ea:29:72:3f:fb:bd:42:e1:
                    a3:c1:f6:10:e5:50:cf:6f:23:aa:5f:fe:72:35:54:
                    44:2c:11:1b:5f:5e:53:3b:bc:13:20:8b:dd:d0:d6:
                    d9:ca:8f:72:d6:df:0e:29:42:12:86:a2:3d:4a:85:
                    65:f1:de:64:78:95:cd:5a:0b:92:29:6e:3e:04:05:
                    7a:ab:0a:dc:cc:8e:ba:b7:33:97:2c:ae:9b:b7:a8:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:DC:7E:C3:53:F2:6B:77:E0:36:56:69:F6:7C:22:64:71:E1:6C
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/51edc363b8e6cef96158957d9725836e2cc06a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.37.0/24
                  157.100.42.0/24
                  157.100.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:32:af:59:e0:1d:bc:00:ee:85:17:12:d2:eb:a1:6e:f5:
         dd:31:3a:2a:3d:82:97:83:c8:98:30:28:34:8c:92:4b:00:57:
         f2:44:57:4d:29:12:ef:9c:8f:51:41:b2:87:54:6f:84:63:ea:
         aa:d3:05:8a:76:65:f4:88:b3:47:ab:8c:44:3c:ec:d5:f9:71:
         e4:e4:38:fb:74:97:93:f9:fe:cb:3b:ba:7d:87:55:11:bd:29:
         18:c8:f2:ca:14:7a:a0:08:27:cf:2a:c4:cd:2f:60:91:82:28:
         92:8f:9c:1a:31:7d:18:e1:b0:eb:84:75:9a:5d:c3:af:66:92:
         bd:ee:d2:e3:c3:14:68:d7:4b:6f:d8:ac:7c:8a:2a:40:b6:52:
         ee:ba:e4:b9:53:a8:39:84:b7:f0:87:35:a9:67:2e:9b:5f:7c:
         23:55:ad:22:21:8d:ee:4e:86:ea:bb:36:12:16:ea:1f:da:6e:
         3a:b1:e5:ef:0b:0d:31:b7:25:84:45:14:1f:94:a5:67:b2:91:
         34:dd:bf:4f:12:ca:0b:1f:21:f7:99:93:f8:bc:05:14:cd:d5:
         82:f8:a8:69:e0:03:68:7f:6d:21:67:87:ea:59:5f:42:75:c5:
         84:18:b9:c3:13:cd:4d:e9:51:c4:3b:41:46:bc:d9:48:9a:51:
         f0:16:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org