Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/4432d26dc74615248b406a74f46a15ebf22a4fdd.roa
File:                     4432d26dc74615248b406a74f46a15ebf22a4fdd.roa (raw, json)
Hash identifier:          Jdu2jaX9R9Yk1R92Upl9Rk66gU3rFFpaGtqcx3QTUqc=
Subject key identifier:   80:59:71:E6:F1:2C:97:04:CA:5C:5B:20:F6:A2:6D:3B:E9:28:B1:13
Certificate issuer:       /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial:       111FF1
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/4432d26dc74615248b406a74f46a15ebf22a4fdd.roa
Signing time:             Mon 11 Apr 2022 15:21:24 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     269924
IP address blocks:        207.191.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122289 (0x111ff1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=4432d26dc74615248b406a74f46a15ebf22a4fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:3e:0a:bf:12:09:8f:ca:fb:f8:8f:d9:17:
                    ae:15:9e:77:40:76:fc:e9:ca:6c:67:35:3f:cc:a7:
                    c4:c2:e8:40:22:5d:d9:3a:46:94:53:38:6b:5f:4e:
                    52:4a:eb:97:77:5a:40:9f:37:ae:50:ff:70:67:f8:
                    5c:90:f5:7e:82:89:34:04:23:3a:85:6e:03:79:ce:
                    7e:46:f4:e9:2b:05:21:7c:28:3f:23:44:40:fe:49:
                    0c:49:70:5d:b2:42:bd:81:90:f5:2b:16:2d:48:9c:
                    a9:9a:5d:b2:ca:0e:94:f0:45:4a:ea:f8:3d:0a:1a:
                    da:be:ed:6e:17:c2:51:f8:2c:cc:ee:20:89:2f:af:
                    2a:25:41:05:61:00:44:6b:9b:46:aa:30:99:2d:58:
                    c3:1f:2e:8e:09:27:2b:1b:09:fe:9e:88:a8:f6:18:
                    cd:d9:67:50:1e:ba:1e:fe:28:fd:b9:24:dc:1d:90:
                    a6:95:1e:b8:ce:a6:38:ff:6b:60:de:84:33:33:50:
                    35:4e:b8:e1:0f:16:a3:a4:d6:71:da:da:22:be:31:
                    55:52:77:57:a1:5f:60:51:a2:26:5b:e0:2c:62:3e:
                    a2:9f:3b:f6:a8:d9:39:8c:38:10:06:ea:a8:d8:2a:
                    ca:12:27:98:36:0a:83:3f:ca:76:75:0f:16:8a:eb:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:59:71:E6:F1:2C:97:04:CA:5C:5B:20:F6:A2:6D:3B:E9:28:B1:13
            X509v3 Authority Key Identifier:
                keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/4432d26dc74615248b406a74f46a15ebf22a4fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:f2:de:5b:ab:9b:43:78:45:5f:47:62:ce:84:3f:b0:72:b4:
         0b:5d:95:ab:d3:e6:01:37:0c:6b:bc:c9:1a:8b:c3:bf:0e:f7:
         8c:dc:c5:b7:87:70:ce:aa:d2:2c:36:13:b2:38:10:e9:44:3f:
         8b:18:f4:0e:92:bd:d8:77:e1:08:07:88:4b:1d:7f:00:15:07:
         2d:bd:47:83:d5:b7:ab:c0:19:c8:b4:e7:8c:53:fc:e4:1d:fe:
         6d:94:2f:d8:1b:a0:13:68:c0:33:c2:0c:59:50:5d:eb:81:0d:
         13:89:71:ff:7f:ad:c7:53:57:b2:7b:54:26:26:73:b2:4d:d5:
         a1:c6:ce:32:d3:70:b3:78:32:39:0f:55:d9:f7:3e:59:d2:fb:
         56:e4:b0:01:26:4b:8e:9e:66:36:c9:d5:2e:30:7a:e6:d4:b0:
         e4:5c:3b:1f:1c:39:f1:a2:67:6e:73:c9:c2:12:ac:44:7b:bb:
         27:a9:6d:f4:d8:c4:b0:f2:02:ac:fa:9a:0f:8b:65:41:47:d7:
         6a:6f:3c:b9:d6:be:81:db:db:5b:a1:53:4a:83:79:b9:30:c7:
         d4:b5:de:a1:69:40:ca:85:e4:01:2f:da:b3:c5:45:c5:c9:b1:
         c0:91:6d:bb:29:15:d5:06:fd:4a:8d:34:a6:a0:44:be:ec:53:
         17:40:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:45:27 2023 by rpki-client on console-fra.rpki-client.org