Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1626fdf655245ad9f6b748d3d5d65c109cf14b6c.roa
File:                     1626fdf655245ad9f6b748d3d5d65c109cf14b6c.roa (raw, json)
Hash identifier:          6KWyw89m3mktg6AESYB6Fx6FC7GbUO5JZd7tR8JgqHA=
Subject key identifier:   E9:AA:A9:0D:C0:72:6A:76:D7:A1:CF:C9:32:B3:43:20:DF:AA:4E:74
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       20353A
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1626fdf655245ad9f6b748d3d5d65c109cf14b6c.roa
Signing time:             Tue 16 May 2023 17:41:52 +0000
ROA not before:           Mon 15 May 2023 17:41:52 +0000
ROA not after:            Fri 16 May 2025 17:41:52 +0000
asID:                     262166
IP address blocks:        168.234.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110778 (0x20353a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:41:52 2023 GMT
            Not After : May 16 17:41:52 2025 GMT
        Subject: CN=1626fdf655245ad9f6b748d3d5d65c109cf14b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:61:97:90:fd:65:cd:96:4c:39:1d:30:e7:
                    9d:39:8c:b0:1c:6e:0c:2c:fa:3a:b7:45:88:46:80:
                    65:b7:9b:ed:52:19:12:a9:56:11:55:31:05:1a:ca:
                    b8:30:66:16:bd:0b:1e:32:ef:0f:21:18:1d:65:c7:
                    69:c9:e8:97:a8:ed:ce:c0:70:02:57:3a:47:9f:fa:
                    c7:6b:78:dc:76:75:c3:b4:f6:e9:bf:87:70:ef:07:
                    a3:7a:da:4e:15:1b:bc:8a:30:52:df:f2:35:1d:29:
                    72:34:a0:93:ea:7a:ec:6a:65:91:81:f4:29:80:8b:
                    01:fb:ab:3a:40:0c:99:0b:68:d2:f2:1e:97:11:d8:
                    6f:69:6b:8b:46:6f:6b:6a:21:f7:52:3e:e2:97:40:
                    fa:bd:64:f9:5a:55:e1:5f:a1:a8:55:ed:9a:34:de:
                    fb:55:65:4f:29:e0:bd:30:85:64:44:1b:ef:d2:db:
                    c6:7d:60:b2:88:96:1f:a9:cc:91:a4:b1:a1:4c:97:
                    05:06:ba:57:67:55:2e:c7:c9:a8:18:af:e7:d9:57:
                    58:83:79:f6:f6:ef:47:6b:0d:93:b9:b3:91:72:6d:
                    f3:52:d8:93:4c:c1:7f:14:85:45:e0:9c:3d:5b:ee:
                    fd:62:58:b2:5e:0d:52:b2:af:f7:65:66:8b:f3:76:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:A9:0D:C0:72:6A:76:D7:A1:CF:C9:32:B3:43:20:DF:AA:4E:74
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1626fdf655245ad9f6b748d3d5d65c109cf14b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:80:d6:3a:ab:61:c6:89:38:37:c3:17:3c:c3:d1:32:2e:33:
         31:96:5b:12:49:49:63:bc:31:40:1b:66:a4:cf:de:59:07:8b:
         fe:23:29:13:6c:c2:b9:a6:c2:9b:d4:b6:a9:68:2a:65:d6:bf:
         3f:fb:42:72:18:29:ed:ef:2a:e2:04:9d:45:8f:e4:b5:76:a9:
         24:1a:85:30:bd:54:f5:de:51:c2:7f:a5:08:a6:68:fd:a4:e9:
         14:33:56:95:d6:9d:19:7b:4b:0e:0f:4e:63:df:ec:1e:86:ec:
         5c:25:0d:06:4e:2e:5d:8a:c3:c1:35:37:f4:eb:22:36:98:c6:
         f6:bd:48:18:bf:0e:b4:e8:74:cb:5a:29:61:db:dc:6d:2a:82:
         10:f2:6c:1b:5d:ac:55:60:a7:a3:66:00:3d:e3:6c:99:09:4b:
         a7:d8:31:a0:da:8e:fc:f0:ec:00:ce:f6:fe:f0:5f:99:64:95:
         1f:d7:e4:0b:6a:4b:95:c4:32:da:19:54:b0:46:98:93:51:d0:
         6c:ff:45:47:91:ab:b6:fd:66:34:0f:9d:2b:23:41:14:42:5f:
         ca:50:6a:64:2d:1c:4c:f7:81:66:2d:97:8c:2b:dd:8d:20:10:
         50:6e:ca:0f:4b:da:29:d6:e4:91:2f:61:d0:e5:bf:78:6f:2b:
         97:ab:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org