Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/01ce530717cd9859f7f14ef2751c804f230cecf5.roa
File:                     01ce530717cd9859f7f14ef2751c804f230cecf5.roa (raw, json)
Hash identifier:          Sor0ms3vTTa3yjZ877vQAWPxud79HOIBveBC5ipH6JQ=
Subject key identifier:   AC:2A:F0:A1:7B:52:26:79:72:AF:37:C7:70:C1:83:93:58:A4:EE:E2
Certificate issuer:       /CN=3443505eddac7b5aa6eddaedee91340561a130ec
Certificate serial:       123A95
Authority key identifier: D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/01ce530717cd9859f7f14ef2751c804f230cecf5.roa
Signing time:             Thu 29 Jun 2023 08:30:04 +0000
ROA not before:           Wed 28 Jun 2023 08:30:04 +0000
ROA not after:            Fri 27 Jun 2025 08:30:04 +0000
asID:                     263744
IP address blocks:        168.196.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194645 (0x123a95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3443505eddac7b5aa6eddaedee91340561a130ec
        Validity
            Not Before: Jun 28 08:30:04 2023 GMT
            Not After : Jun 27 08:30:04 2025 GMT
        Subject: CN=01ce530717cd9859f7f14ef2751c804f230cecf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:80:6b:66:be:cf:b8:37:bd:0a:03:c6:f9:
                    b0:3b:8c:95:8d:6e:9b:53:7a:6c:f3:dd:5f:e0:70:
                    84:c9:f7:60:04:34:cd:84:c7:c6:87:d5:53:87:ac:
                    d5:b2:a0:b4:58:22:2f:5d:15:55:a0:40:90:28:04:
                    49:8a:14:31:03:04:e3:58:bd:e9:d7:b0:a3:e7:f8:
                    7e:85:23:f3:e8:c8:2a:80:91:7b:a5:22:e0:86:c0:
                    d0:2c:79:e6:ef:14:0b:29:2e:9f:ff:9b:96:b7:bd:
                    17:53:c0:14:c9:ba:02:a6:d1:fa:58:89:8a:b1:ab:
                    1d:89:d0:10:13:e6:d3:2e:a4:18:14:be:72:fc:da:
                    aa:de:9e:e4:53:ba:5b:e3:e4:df:00:f9:e1:a1:83:
                    5f:58:7f:61:74:7f:ed:0a:c0:ed:84:67:92:1a:fb:
                    4f:f2:32:7a:ae:36:4e:9c:10:cf:14:04:db:07:39:
                    b9:91:df:dc:1d:68:a6:e6:e9:24:bf:08:9e:30:e2:
                    3e:a4:59:f0:58:e2:bd:7a:d7:4f:09:fd:f7:c2:8f:
                    02:aa:3e:c1:f4:49:64:32:bf:59:7f:aa:ad:90:6c:
                    98:c4:f1:1a:c7:2e:ec:69:03:f0:36:8e:72:9c:17:
                    32:68:91:87:c5:15:6e:b4:11:da:6a:4d:15:85:3c:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2A:F0:A1:7B:52:26:79:72:AF:37:C7:70:C1:83:93:58:A4:EE:E2
            X509v3 Authority Key Identifier:
                keyid:D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/01ce530717cd9859f7f14ef2751c804f230cecf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:52:82:ea:8d:68:cb:30:0a:34:c2:76:bf:8a:e0:10:a3:
         f2:01:51:92:88:49:01:52:cf:2a:82:c5:6d:73:75:8f:71:3c:
         b3:85:ea:2f:59:8f:ad:70:60:a9:2c:1d:5e:21:29:20:b6:9e:
         46:cd:25:1c:de:96:87:24:c7:91:43:4f:f8:3b:1b:af:ac:bd:
         58:20:29:b7:13:d7:0d:ed:d2:77:41:86:d0:a2:b8:00:ad:20:
         d2:7f:a5:f1:b2:65:77:84:4b:0d:46:60:13:ed:96:e9:12:40:
         9e:67:b8:86:a1:80:c1:48:b5:c2:28:94:95:c1:da:ca:03:33:
         9a:a5:c0:91:25:8a:67:b9:a9:80:a8:2e:86:7f:03:90:99:99:
         e6:db:24:41:84:b0:0a:32:97:9b:f7:23:d3:73:71:ff:fd:c1:
         f5:54:99:8b:e2:02:4e:8c:c8:7c:ea:27:ef:aa:9d:de:4b:76:
         7d:cd:bf:6b:f7:41:fe:e6:88:b8:35:50:ef:4a:8c:04:6e:16:
         08:04:ae:b7:6b:c3:b4:b0:61:95:b8:14:7d:38:bb:5a:5f:e4:
         8f:c6:9f:e3:f5:2f:5e:8c:98:ca:5b:77:26:71:87:b1:5d:55:
         f0:f7:54:f4:03:dc:90:a9:9a:fe:ff:b7:71:11:ba:ac:50:b2:
         13:1b:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org