Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa
File:                     f525abc7390cb0308830adc374e2c934ab548830.roa (raw, json)
Hash identifier:          DY4zVNJ7Kmc9DYF1LZ8GSZb4dL6CtLO3vSQnfGQzam8=
Subject key identifier:   52:6E:66:80:0F:5F:A4:C5:C1:ED:93:D9:E3:DA:E0:3E:2E:1E:08:B1
Certificate issuer:       /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial:       111629
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa
Signing time:             Mon 11 Apr 2022 15:17:01 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Thu 11 Apr 2024 03:00:00 +0000
asID:                     269924
IP address blocks:        207.191.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119785 (0x111629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2024 GMT
        Subject: CN=f525abc7390cb0308830adc374e2c934ab548830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:bb:80:75:87:e8:0c:57:60:ca:3c:7c:ad:
                    91:b7:98:6a:7d:7b:ea:1c:d5:b7:77:5c:3d:b4:6a:
                    84:91:3e:d6:77:f2:e5:8a:b6:81:2d:9a:44:85:6b:
                    79:f6:53:98:ab:9b:be:e0:2f:ed:85:69:84:b1:23:
                    e2:92:4e:fa:ef:9d:bd:74:86:62:14:9b:60:c9:30:
                    6c:29:54:3c:0f:c1:8b:30:81:cc:a4:d2:13:f6:94:
                    a2:6c:3a:33:c9:4a:d0:ea:42:4a:16:05:46:e8:54:
                    30:42:14:dc:c0:0b:c8:66:ab:c4:11:0f:9d:b1:22:
                    56:f5:ef:f1:b3:0e:76:0f:57:08:91:90:0a:bb:35:
                    e0:b7:dd:64:fc:12:75:36:82:ff:1f:15:9f:36:fc:
                    d7:0e:01:c0:97:e7:ac:3f:14:f2:63:8c:f7:0d:4f:
                    50:15:bb:42:3b:9a:54:96:92:77:84:7b:00:40:90:
                    81:16:e4:6a:36:d4:8a:92:85:f6:85:62:5d:7d:42:
                    0d:7c:64:28:9d:4a:3d:37:e7:6a:2c:d8:6c:f3:71:
                    55:82:88:ba:ec:34:a4:85:e4:3b:d4:78:d4:0c:64:
                    56:b9:8d:5d:e7:17:b4:6b:6b:2a:b7:ab:3c:3e:f4:
                    92:80:da:7c:8a:23:7d:11:a6:11:99:c6:b4:f5:e8:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:66:80:0F:5F:A4:C5:C1:ED:93:D9:E3:DA:E0:3E:2E:1E:08:B1
            X509v3 Authority Key Identifier:
                keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8e:0a:cc:ae:c6:61:ec:7e:56:fb:b1:0c:aa:d1:42:98:0d:
         0b:f4:f3:15:d8:95:2e:c1:4a:49:b0:0e:5b:0f:7f:50:a1:72:
         66:af:ad:51:13:63:47:41:bb:1f:3c:c8:c9:ce:88:c6:6d:c7:
         b1:a4:df:a1:cc:66:e6:6a:e5:68:7d:ad:23:ee:eb:2a:ee:e1:
         4c:4e:76:26:33:01:75:0d:dc:2c:45:6d:a6:6a:90:97:60:c1:
         f5:3d:a5:aa:0e:77:4d:c8:9c:79:8d:75:7e:4d:19:d3:a2:84:
         50:66:68:54:f9:78:f2:22:fe:57:e0:2d:ae:be:81:e0:fb:f0:
         d8:83:2b:7d:1f:85:38:ba:06:da:31:9a:a3:4b:bb:91:47:d7:
         ee:e2:56:ad:0a:a2:ce:f8:a8:ab:02:d3:f4:6f:a3:be:8c:00:
         d0:c8:62:f0:50:c8:ad:8c:e9:07:87:12:18:72:45:eb:d6:4b:
         9b:ec:ba:b3:4e:19:ce:38:a8:74:26:f2:ec:8a:db:d2:84:c0:
         18:7f:ea:f1:a2:bb:27:f5:ba:c8:2b:71:74:8f:3e:21:c8:14:
         43:bc:e9:3f:4c:47:e0:b0:a3:18:9c:1d:e9:e3:b5:41:c4:79:
         03:ca:83:20:5e:e1:59:29:c0:de:9a:f1:be:14:01:5b:39:f2:
         fd:4c:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:45:29 2023 by rpki-client on console-fra.rpki-client.org