Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/9f7e8946d6ac54fb816eb6973c2cccc072888b85.roa
File:                     9f7e8946d6ac54fb816eb6973c2cccc072888b85.roa (raw, json)
Hash identifier:          fAWxbhaeXWtzwIlR8PXygUSmZWhb8Mh/rVm5+0hCM5Q=
Subject key identifier:   78:04:80:44:F3:F6:AF:53:AF:61:04:66:AA:76:CA:59:2F:C8:EA:42
Certificate issuer:       /CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
Certificate serial:       B084
Authority key identifier: 3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/9f7e8946d6ac54fb816eb6973c2cccc072888b85.roa
Signing time:             Wed 24 Mar 2021 14:31:58 +0000
ROA not before:           Wed 24 Mar 2021 14:31:58 +0000
ROA not after:            Tue 24 Mar 2026 14:31:58 +0000
asID:                     264685
IP address blocks:        168.227.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45188 (0xb084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
        Validity
            Not Before: Mar 24 14:31:58 2021 GMT
            Not After : Mar 24 14:31:58 2026 GMT
        Subject: CN=9f7e8946d6ac54fb816eb6973c2cccc072888b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:d7:ee:fb:e5:98:2b:8c:fb:66:1e:2b:b8:
                    dd:89:33:c8:c0:1f:9d:1d:22:d9:57:b9:ff:9a:05:
                    d5:ee:93:63:fb:ba:0a:95:d7:92:1a:52:0a:ee:93:
                    1c:ee:f6:9f:6b:ac:fa:4e:ba:d6:1f:1b:4c:a8:28:
                    fc:12:2a:2e:94:9a:a5:f1:b4:54:0f:8f:af:64:71:
                    24:2d:91:5c:e5:03:ed:04:ce:8c:6f:6d:f7:c7:26:
                    09:1f:56:ec:1d:d2:72:91:06:09:7a:1c:42:a6:2e:
                    9d:48:dd:17:f4:b2:2b:73:bb:c2:4e:f4:8f:d1:0b:
                    e2:70:19:dd:62:d9:ea:a2:84:04:f7:3a:15:d2:b2:
                    87:4f:5c:ae:8c:63:bc:e3:49:02:e6:ef:ce:97:77:
                    a3:fe:f7:33:06:c6:6c:ab:06:d7:5b:d1:cc:5e:2e:
                    1f:ef:b8:7a:96:0d:c3:30:c3:69:5e:7d:82:53:f9:
                    ea:88:c1:d4:6d:f8:64:5f:34:8a:dc:7a:f2:0f:d2:
                    60:ea:ee:27:dd:9b:3c:20:a4:fe:26:d7:7f:68:80:
                    b8:dc:2b:a9:ad:b7:a4:12:63:05:09:b7:9b:82:3c:
                    c0:8c:78:91:e7:8a:ec:ba:df:07:db:ee:7c:bf:51:
                    1f:39:93:cc:ae:fa:88:2d:38:42:00:62:09:c7:95:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:80:44:F3:F6:AF:53:AF:61:04:66:AA:76:CA:59:2F:C8:EA:42
            X509v3 Authority Key Identifier:
                keyid:3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/9f7e8946d6ac54fb816eb6973c2cccc072888b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:60:1f:b2:94:46:df:01:8a:18:c7:5b:a3:88:58:da:8b:c2:
         38:4b:84:bc:21:a9:a1:c9:4a:e3:67:c5:bf:a7:1f:a8:ec:d5:
         f3:39:55:58:12:51:c4:ce:7e:62:85:fa:7c:7d:a1:4f:b2:56:
         8e:4b:5a:28:18:d5:39:fb:4f:b4:20:39:c9:65:c0:bf:e6:70:
         9d:55:08:cb:0f:46:23:c2:8b:d4:1c:3b:45:36:f4:0b:b1:03:
         25:f2:59:58:74:ff:44:ae:d9:8e:20:18:a9:76:c9:34:58:da:
         e9:69:18:73:00:ff:d5:af:a7:a9:8a:a1:e2:df:81:8e:19:bd:
         20:0a:58:11:09:2b:9f:69:b9:ec:07:8b:15:fe:0d:a9:6f:98:
         6f:ff:44:e5:f7:ae:9d:f3:fb:4c:6b:e3:05:fc:b2:c6:99:03:
         60:25:21:cf:0f:6d:4c:fc:3a:4e:9b:36:4a:ba:2b:2a:c5:dd:
         04:a3:3b:50:6b:0b:58:84:73:48:c9:08:6b:82:ac:02:7d:a8:
         27:f0:fb:9a:9b:49:1a:b1:b6:dc:ce:6f:3e:ae:f6:95:85:9f:
         9f:e5:f2:de:0d:e1:2f:38:29:5c:87:98:59:15:1d:84:53:31:
         ba:ff:7f:ca:d4:b5:b5:97:f8:41:63:2e:0e:5f:ba:17:c8:27:
         17:0e:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org