Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/160c327c522ae387ad3554f5b449937a340e09c2.roa
File:                     160c327c522ae387ad3554f5b449937a340e09c2.roa (raw, json)
Hash identifier:          NTp2XYnmuGj1FHmi/SUdwU9VhC6tdsNrM6oKJ2FVRu0=
Subject key identifier:   75:BF:A1:6D:E9:8D:C8:D1:3A:57:3F:06:32:FC:D6:9A:B3:E6:CA:88
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       243FCC
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/160c327c522ae387ad3554f5b449937a340e09c2.roa
Signing time:             Tue 17 Oct 2023 22:03:37 +0000
ROA not before:           Mon 16 Oct 2023 22:03:37 +0000
ROA not after:            Fri 17 Oct 2025 22:03:37 +0000
asID:                     273041
IP address blocks:        168.234.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375628 (0x243fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Oct 16 22:03:37 2023 GMT
            Not After : Oct 17 22:03:37 2025 GMT
        Subject: CN=160c327c522ae387ad3554f5b449937a340e09c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:8a:65:d6:aa:1a:ae:11:60:e0:b3:42:5e:
                    41:2d:24:d8:01:37:4a:13:c9:e1:c2:eb:db:1c:b7:
                    85:bb:5c:46:8a:69:69:09:cd:71:ef:70:17:18:06:
                    3c:63:32:3e:d3:86:a2:75:c4:be:70:a1:59:28:e6:
                    2d:be:fc:ae:b2:3c:57:68:86:d6:e6:4f:86:c1:1b:
                    ef:da:97:0a:ea:1c:20:50:81:06:c8:71:6e:f3:2d:
                    46:1a:4b:4d:d0:80:50:3a:88:a5:0f:bd:2a:78:ab:
                    04:e8:7c:9c:c9:ca:5d:4f:c9:b6:4f:c3:72:13:70:
                    cb:bc:9c:bb:fd:0c:a2:5c:80:4b:a2:c8:f8:b1:6d:
                    01:c4:b3:6e:dc:0c:89:30:a9:05:67:70:4a:09:8d:
                    aa:2b:72:43:e6:c6:ad:c6:43:89:31:13:57:b6:01:
                    e1:70:2d:04:91:72:14:91:09:a1:81:9f:ac:f7:1d:
                    af:70:87:14:53:85:98:d7:b4:e5:61:a0:44:08:6b:
                    a0:a3:a7:90:e2:3b:69:57:db:c2:db:db:de:b4:00:
                    d2:43:f1:76:c8:50:6f:82:80:3b:1b:92:48:dd:c3:
                    fb:ac:16:57:70:73:e2:d2:88:0b:63:68:d0:38:d7:
                    49:fb:4a:57:d0:28:53:12:21:01:02:89:00:25:10:
                    a2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:A1:6D:E9:8D:C8:D1:3A:57:3F:06:32:FC:D6:9A:B3:E6:CA:88
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/160c327c522ae387ad3554f5b449937a340e09c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:78:7e:e8:4b:8c:d1:2f:45:d5:ad:0f:59:14:ea:57:ea:64:
         f0:75:aa:99:05:7a:fb:05:2c:19:55:d6:40:42:5a:cb:84:00:
         c3:9a:98:bd:a0:eb:0f:d5:2f:e7:81:13:7c:17:7e:30:99:ae:
         b8:89:26:51:df:e7:ea:ae:2e:46:5b:93:ce:f5:ad:8c:a6:ed:
         f5:26:94:46:56:b0:7b:3f:a2:52:87:32:aa:14:46:ad:9f:4c:
         bd:fd:6c:e8:b6:79:62:3b:72:02:22:e3:e1:0b:45:39:bb:74:
         65:90:1d:70:ed:49:0b:9f:1f:1b:c7:7e:89:46:f9:5f:a6:f4:
         b5:b9:58:3f:57:cb:4f:e1:fc:43:85:2a:3c:c9:81:95:15:c4:
         46:49:bd:7d:26:5e:fa:cb:c6:cd:98:f5:0c:86:e8:db:48:8a:
         84:ec:9b:0e:2a:47:84:9c:89:da:b2:19:61:3b:2f:0a:54:e0:
         65:82:dc:8f:9a:28:71:40:3a:de:73:32:ef:cb:d3:e5:12:08:
         77:96:de:47:73:1d:40:f4:c8:02:d9:aa:ed:e5:39:c0:7e:2c:
         75:64:4a:b5:97:9a:b0:27:84:b3:d2:02:df:8e:bb:c0:aa:00:
         c4:48:b3:f4:ba:84:6c:85:54:89:b9:f0:ce:1b:a7:86:43:71:
         d6:c6:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org