Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa
File:                     5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa (raw, json)
Hash identifier:          uYfUYW5pmuGPojBGdfw1d/XtEfsCmowDWMaJn8/Rav4=
Subject key identifier:   F0:1C:D7:06:E4:64:D5:75:CF:1C:89:7F:EA:56:33:7B:2D:1A:03:5B
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       234F5C
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa
Signing time:             Tue 26 Sep 2023 17:26:22 +0000
ROA not before:           Mon 25 Sep 2023 17:26:20 +0000
ROA not after:            Fri 26 Sep 2025 17:26:20 +0000
asID:                     52257
IP address blocks:        157.100.251.0/24 maxlen: 24
                          157.100.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314076 (0x234f5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Sep 25 17:26:20 2023 GMT
            Not After : Sep 26 17:26:20 2025 GMT
        Subject: CN=5624e8666aa25b6d2bf15df1fd6249110ffa0e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:f1:62:c9:2a:6f:eb:36:eb:cc:4d:0e:c1:
                    71:cb:bf:26:6a:79:e9:1a:fe:ac:5b:3f:01:42:40:
                    c0:2f:21:82:c7:f2:80:54:79:40:32:e9:01:f9:4f:
                    5d:4a:8f:d2:a0:a2:7b:d2:16:0c:66:10:ad:91:41:
                    90:02:54:95:eb:6c:80:12:10:b3:fa:ba:2d:cc:79:
                    7c:49:8d:89:e5:88:f8:f3:ec:90:bb:a9:f3:2b:3b:
                    03:b0:0a:6e:49:c7:11:ee:5d:df:50:26:6e:3d:da:
                    cd:ab:21:de:84:25:0e:0f:03:68:7c:94:07:a4:78:
                    b9:93:2f:8f:b3:43:9c:32:2d:78:43:2d:e9:53:46:
                    42:c7:8e:c4:98:a3:b0:f9:d6:41:78:55:a1:91:ec:
                    f9:d7:f9:85:a1:5f:08:66:7e:95:96:8e:2c:7f:16:
                    0d:bd:8a:9d:3c:75:68:6f:59:e6:89:7e:fe:ba:24:
                    cd:ec:69:cb:14:18:0b:b2:f7:a1:b1:cf:3e:65:db:
                    40:95:79:ea:e2:dc:1d:1c:ad:34:1f:b6:f2:d2:78:
                    6a:e8:53:d0:2b:d5:b0:49:5d:ab:4d:a1:00:1b:fe:
                    bd:1d:e3:be:b8:2c:be:75:c2:7b:93:94:20:73:6c:
                    3b:c5:e7:74:4f:95:f2:cf:66:25:f5:7b:03:85:dd:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:D7:06:E4:64:D5:75:CF:1C:89:7F:EA:56:33:7B:2D:1A:03:5B
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.251.0-157.100.252.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:7d:08:66:44:a1:0c:a7:81:00:1a:70:b1:56:ca:ee:bb:
         98:3e:ba:5e:da:9b:ed:73:ab:8d:5d:31:6a:48:61:a5:3f:6b:
         a5:61:19:93:ee:5f:5c:e6:28:fa:14:4b:9e:37:80:d0:6d:74:
         ff:f8:92:14:c4:13:5c:14:2c:03:3e:73:05:9a:33:07:ae:65:
         da:30:6f:f7:16:26:a9:c6:2c:f1:9a:d7:4a:99:a6:06:69:5f:
         ac:2b:ee:0e:19:43:e3:e3:7c:81:35:0c:c2:e4:ab:65:24:68:
         7f:2f:e6:2b:27:f0:e5:6b:ef:17:29:0c:38:cc:9f:61:67:b9:
         e0:f1:f2:4d:77:5f:07:76:6f:87:b0:90:72:d7:9b:99:61:ca:
         78:ec:2e:77:0c:5e:4a:92:dc:5e:e5:ee:d0:f1:5b:f8:71:51:
         df:42:e9:95:52:e5:73:aa:17:7f:27:0a:88:c0:9c:e0:75:0e:
         62:91:40:b1:53:07:6b:76:56:89:89:01:e0:63:44:7b:6c:8e:
         4a:3b:2f:7f:46:48:d9:08:4c:60:0a:58:29:44:c7:73:43:d7:
         a3:1b:ae:4c:0b:b1:95:1e:1c:2a:68:68:20:89:c1:2b:64:3f:
         7b:f3:35:4e:fd:dc:e9:15:b3:3a:32:5b:39:b7:cb:16:ec:0b:
         77:ce:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org