Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a027d0f1cb7b28d3f69416412afd83e34a83d32f.roa
File:                     a027d0f1cb7b28d3f69416412afd83e34a83d32f.roa (raw, json)
Hash identifier:          AxvFi/pUwZDEXK5vWWXqTFER4UUbJoZyHNkhAfUF4VI=
Subject key identifier:   EA:13:A9:E7:5D:C3:62:E8:BC:34:2D:87:FE:22:C3:FA:EF:5A:38:10
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24E5A2
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a027d0f1cb7b28d3f69416412afd83e34a83d32f.roa
Signing time:             Tue 26 Sep 2023 17:12:53 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     266688
IP address blocks:        168.197.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418082 (0x24e5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=a027d0f1cb7b28d3f69416412afd83e34a83d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:01:e4:4a:79:bd:ed:36:ca:27:ea:72:1c:
                    34:f8:3a:5e:be:a0:26:70:91:cf:5f:b3:ae:9d:93:
                    9e:20:3c:94:70:1e:5c:d6:f6:c6:60:df:cc:c3:88:
                    a7:3e:b5:e7:aa:66:16:db:4d:38:53:fb:09:d6:3c:
                    59:b2:7e:81:8a:1a:6f:67:31:d3:b2:23:9b:f8:15:
                    e2:ca:64:c9:2e:a5:46:8f:ff:69:a6:e0:8b:db:f7:
                    37:9a:42:2f:08:91:14:76:95:84:40:42:2e:ee:16:
                    47:fa:43:67:ff:ce:24:55:75:ee:f9:91:29:45:8d:
                    15:2e:fb:ba:e5:e2:d4:4a:fe:17:df:c6:c8:08:14:
                    c7:94:c3:70:6c:3c:8a:f7:5f:ad:b0:e0:b8:76:79:
                    2e:2a:4e:d2:e2:81:d0:b7:1d:1e:55:01:fa:4a:af:
                    3d:8c:1f:f2:4c:eb:66:d7:f5:1a:8f:03:ec:7f:5c:
                    c5:92:5d:43:78:27:50:96:b3:3d:80:01:0f:1f:de:
                    18:ed:ba:20:4f:33:50:d3:74:51:af:12:d9:13:3d:
                    6b:9e:1d:f6:5b:78:b6:4c:62:91:ab:be:2e:a7:e9:
                    35:4b:96:21:18:5d:a7:19:da:5d:84:b1:71:5a:56:
                    3f:0c:95:1e:56:eb:6b:b3:7e:40:3a:a8:d4:dd:64:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:13:A9:E7:5D:C3:62:E8:BC:34:2D:87:FE:22:C3:FA:EF:5A:38:10
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a027d0f1cb7b28d3f69416412afd83e34a83d32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:cc:44:0f:f5:6e:a5:e2:79:f6:7e:67:d2:05:7e:bd:61:e9:
         88:eb:29:a9:d3:ed:e9:0b:67:fb:cd:65:fd:ae:20:68:94:4f:
         11:62:94:fe:28:21:ae:70:a4:e8:4a:fc:ec:5c:a4:11:91:22:
         17:34:7a:af:f2:df:77:0f:c3:ce:d2:d5:f1:27:8c:8e:93:4f:
         8f:c2:07:39:bb:b9:77:90:1f:76:6e:34:bc:06:70:e2:1b:dd:
         54:7b:80:82:ba:2e:7e:41:24:a3:4b:b9:f4:24:44:12:6c:58:
         05:e7:89:a4:a3:68:a6:a7:83:87:0e:c3:32:76:ce:50:ed:40:
         66:eb:3d:1c:22:f4:9d:18:49:2c:b1:b8:82:dc:bb:e9:1d:46:
         f8:0a:bc:3c:49:e0:fd:20:c1:8b:f8:48:89:43:eb:c7:ec:61:
         2e:d1:17:34:93:4e:2b:53:d4:27:20:83:fd:a9:3f:f2:f6:a2:
         18:e8:3f:eb:96:cf:d6:51:5b:fd:df:2c:34:19:21:b5:de:c1:
         8b:6b:13:1e:72:91:53:de:25:43:59:48:cd:4c:47:71:c7:ff:
         41:9d:bd:53:ee:0f:b0:8f:8f:bc:c7:03:af:ff:10:b6:b3:6e:
         3e:0f:fb:30:51:2a:75:0c:99:6d:6c:35:76:5e:12:d5:31:12:
         39:75:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org