Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/de948e5d7a7b865ee9d17ebd846a417d2d44c659.roa
File:                     de948e5d7a7b865ee9d17ebd846a417d2d44c659.roa (raw, json)
Hash identifier:          Duj2IY4CSGMne6XVgwFSBRHAQijIDOUpMJnIrQJ86Ss=
Subject key identifier:   F5:20:8B:27:12:C9:51:08:9B:76:D8:B4:B7:47:C7:4F:92:D0:81:43
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       23599A
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/de948e5d7a7b865ee9d17ebd846a417d2d44c659.roa
Signing time:             Tue 26 Sep 2023 17:26:26 +0000
ROA not before:           Mon 25 Sep 2023 17:26:20 +0000
ROA not after:            Fri 26 Sep 2025 17:26:20 +0000
asID:                     272097
IP address blocks:        157.100.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316698 (0x23599a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Sep 25 17:26:20 2023 GMT
            Not After : Sep 26 17:26:20 2025 GMT
        Subject: CN=de948e5d7a7b865ee9d17ebd846a417d2d44c659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:de:ac:85:0a:ec:e3:2c:e8:c8:2b:ce:e2:5b:
                    33:0e:0d:6e:5e:2b:10:3f:32:a9:6e:90:8d:f1:65:
                    60:37:9e:a6:18:3a:e5:95:f1:d5:ee:d0:b6:c2:d0:
                    79:b3:fc:cc:b5:87:12:9f:3f:50:6b:eb:14:ea:bb:
                    3d:1f:cf:ff:57:73:b2:1b:51:88:16:c6:a4:59:ca:
                    01:a7:c0:d3:fe:72:0f:f8:83:22:00:ef:17:9e:d4:
                    40:1b:a1:44:e5:d1:82:71:67:bf:6b:19:1b:5c:26:
                    24:63:2f:34:b9:2a:2a:87:89:96:db:5d:8c:9b:f6:
                    13:86:60:f8:e6:55:4a:3f:2f:78:c8:d9:16:3c:58:
                    1f:0b:e8:1c:e1:f0:72:7c:dd:ff:10:ca:53:4c:02:
                    b7:b7:54:41:6f:d7:b4:bd:0d:f1:0a:77:a5:3e:e5:
                    52:3a:6b:a6:a8:e3:77:59:99:21:21:b4:70:8e:56:
                    8f:3f:45:8b:31:f2:b2:93:83:8b:fe:54:04:ec:77:
                    35:20:e7:56:ea:6e:cc:d2:06:a0:c0:01:99:10:ef:
                    2b:88:1f:18:34:21:b5:18:55:29:04:30:54:2d:91:
                    99:ff:5c:e1:09:88:ff:af:58:78:4d:1c:f0:d8:05:
                    36:12:7f:eb:43:1d:03:58:27:98:cf:6f:54:ed:49:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:8B:27:12:C9:51:08:9B:76:D8:B4:B7:47:C7:4F:92:D0:81:43
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/de948e5d7a7b865ee9d17ebd846a417d2d44c659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:a8:5a:73:5f:d6:57:66:88:96:cb:f4:f2:ab:26:c5:a8:
         8b:61:a6:77:8a:13:e0:4c:7c:76:6d:e5:cb:ef:dc:0d:cf:49:
         ac:cc:c5:be:c3:13:d2:17:1e:eb:09:95:e3:8c:c5:aa:0b:df:
         e9:fb:b5:83:07:2b:6b:2e:50:0f:41:d7:c8:23:64:40:70:b0:
         90:3b:93:cc:19:bc:6e:e4:59:81:cb:22:87:bb:0a:6c:4a:a1:
         d4:49:4a:ae:2d:aa:2b:21:13:18:40:83:bb:58:c1:bb:6a:5b:
         b0:a4:2a:92:5f:c3:d0:ed:8a:95:e6:b3:bb:9f:50:ca:46:80:
         ce:ec:c7:89:2d:27:5a:0a:a0:54:3b:54:2d:16:22:f8:f2:0e:
         26:f1:ab:a9:14:2c:2f:0a:55:3d:2a:89:ec:90:92:87:31:a0:
         50:1d:77:0c:37:a1:22:98:f6:44:c9:13:5a:a7:51:92:13:4b:
         76:6f:12:99:2f:50:c1:db:24:80:23:00:06:7e:32:1b:2c:04:
         e0:2c:5f:f8:9e:b8:41:7f:dc:af:62:32:ec:49:d8:89:78:eb:
         66:59:91:27:d4:7b:44:fe:76:62:12:7f:c7:33:cc:83:be:e0:
         ee:4c:18:1a:1d:5e:6b:96:9b:12:21:c3:4b:23:f6:30:2c:c6:
         7c:e9:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org