Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/c6049387110e0aaa9fade6720ae5f4fbc3e93a2a.roa
File:                     c6049387110e0aaa9fade6720ae5f4fbc3e93a2a.roa (raw, json)
Hash identifier:          3AzEWOa9RqpTfGGjA/K820Ymg9Z+pXpK97YGqrcNwsE=
Subject key identifier:   3E:3D:95:22:15:DC:6E:86:29:99:DC:3C:3A:26:A6:7E:AA:4E:3D:42
Certificate issuer:       /CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
Certificate serial:       17D858
Authority key identifier: 3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/c6049387110e0aaa9fade6720ae5f4fbc3e93a2a.roa
Signing time:             Tue 03 Oct 2023 14:04:54 +0000
ROA not before:           Mon 02 Oct 2023 14:04:54 +0000
ROA not after:            Fri 03 Oct 2025 15:04:54 +0000
asID:                     264685
IP address blocks:        168.227.96.0/22 maxlen: 24
                          168.227.96.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562712 (0x17d858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
        Validity
            Not Before: Oct  2 14:04:54 2023 GMT
            Not After : Oct  3 15:04:54 2025 GMT
        Subject: CN=c6049387110e0aaa9fade6720ae5f4fbc3e93a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:f0:ff:7d:34:10:5e:79:84:a5:3e:b4:31:
                    c0:9e:d5:4d:5e:db:3d:c8:cf:2e:97:60:04:6e:df:
                    02:8d:7c:b8:0c:1f:e5:c9:aa:52:e1:08:a1:ec:51:
                    34:60:0b:67:69:50:35:1a:ef:58:3a:b8:a8:59:6a:
                    d7:2c:53:08:e6:17:b0:88:be:b2:c0:4c:b5:8d:44:
                    ec:27:de:44:63:c9:e4:4f:1c:56:b5:a0:df:f1:50:
                    44:b4:e8:7c:64:2e:41:78:6c:c6:f9:01:19:2a:29:
                    ec:99:61:14:16:e1:a2:81:ea:b1:08:f9:e9:ad:31:
                    0c:0c:2d:59:70:9a:b3:92:79:f4:e5:30:39:63:5a:
                    dc:9b:f4:dd:fb:0a:04:4a:0e:94:6c:f7:c2:33:87:
                    fa:96:1d:a0:a5:a1:3e:4c:47:17:7a:68:6a:07:3e:
                    50:0e:7b:62:31:88:a9:3d:32:86:bc:7f:ea:5f:bb:
                    84:a1:6c:87:e1:62:ef:ee:4f:51:43:b9:6b:d5:3d:
                    e4:b3:25:50:fc:c1:fb:aa:d1:38:86:87:0b:a6:f3:
                    25:34:36:6e:d5:20:75:37:be:a4:39:39:88:bd:a8:
                    25:6d:83:dd:54:f5:5c:51:58:bc:4d:c9:0d:ac:30:
                    52:88:67:ff:7a:bb:18:23:cb:a5:9d:fb:6a:7f:ad:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:95:22:15:DC:6E:86:29:99:DC:3C:3A:26:A6:7E:AA:4E:3D:42
            X509v3 Authority Key Identifier:
                keyid:3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/c6049387110e0aaa9fade6720ae5f4fbc3e93a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:d6:0a:69:75:da:00:90:fe:f3:ce:be:c7:94:93:7d:84:
         b1:22:7d:10:20:01:ef:18:b5:a6:5b:b7:a9:a7:06:fc:f4:8c:
         86:dd:9f:0f:f0:1f:1f:c8:8e:22:db:f2:a2:1e:fd:8a:03:da:
         27:d5:19:1d:31:27:ff:93:41:e8:d0:4f:0e:e1:83:61:ef:d1:
         f7:4c:58:2b:fe:1e:3d:71:d3:0b:5a:b8:5c:5d:bd:17:a7:7a:
         51:e1:b0:74:e1:d9:23:ce:b5:8b:3f:d8:c6:f3:14:ca:a7:f5:
         f9:c8:9c:28:e0:87:08:b1:a3:db:af:ec:d6:58:11:cf:00:75:
         a4:b7:ed:a7:50:d9:f8:f1:2a:f7:0b:76:f8:2e:ea:ae:fa:bc:
         ae:db:58:c1:67:01:4f:29:7c:df:7c:b9:0e:23:0f:84:74:3b:
         8e:1b:13:d4:fd:d6:6c:9b:02:2d:71:a6:b7:10:85:db:51:2f:
         60:83:60:4a:e5:da:2a:46:a4:91:c5:76:92:ef:20:cc:9b:97:
         cc:89:18:36:73:c8:9d:6e:8b:dd:34:7a:00:41:f7:a4:f4:53:
         70:23:ed:ce:32:c3:13:f9:af:60:2d:06:18:31:4b:46:23:31:
         fb:5a:af:4c:5f:54:24:0c:a5:2c:9e:c5:36:72:db:03:07:df:
         82:7f:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org