Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/2ccdfe8c886b5ce37a60fa7d18f751ce17fac7da.roa
File:                     2ccdfe8c886b5ce37a60fa7d18f751ce17fac7da.roa (raw, json)
Hash identifier:          AwPnQi8sV3sfHXBZ59xWi5ByYriw18bzl7A224mq3/4=
Subject key identifier:   E5:0C:F2:E5:5D:91:6C:09:E1:62:6E:DE:54:DE:71:B0:F4:23:29:E2
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       1F5C02
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/2ccdfe8c886b5ce37a60fa7d18f751ce17fac7da.roa
Signing time:             Mon 17 Apr 2023 18:47:35 +0000
ROA not before:           Sun 16 Apr 2023 18:47:35 +0000
ROA not after:            Thu 17 Apr 2025 18:47:35 +0000
asID:                     27929
IP address blocks:        168.234.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055170 (0x1f5c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Apr 16 18:47:35 2023 GMT
            Not After : Apr 17 18:47:35 2025 GMT
        Subject: CN=2ccdfe8c886b5ce37a60fa7d18f751ce17fac7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ae:95:96:ce:b1:a2:90:13:55:16:d4:2e:3a:
                    c0:7e:1e:ff:68:17:2a:71:65:1e:a2:5f:54:a5:16:
                    eb:6f:3e:c2:83:97:11:0e:b0:3c:98:eb:54:20:12:
                    3e:f2:d4:e1:41:5b:ac:a8:46:42:58:e1:eb:d7:a7:
                    6e:78:95:21:e0:a9:b9:06:f7:ab:e6:5f:88:0c:33:
                    f0:14:cb:cf:37:00:45:72:fa:35:2c:76:ee:4d:27:
                    06:51:ff:eb:7b:6e:45:01:63:60:ef:95:d4:33:c3:
                    14:a8:b0:15:9c:af:69:40:c2:34:ae:bc:8c:f6:81:
                    15:e6:66:c3:7c:2c:16:42:09:0b:b6:a3:22:c4:a8:
                    36:6c:3c:89:d1:93:9a:dd:32:e8:09:4d:a9:1e:db:
                    59:51:98:7c:2c:45:f1:3d:49:0d:2f:c7:bd:83:6e:
                    d1:7e:19:97:38:1d:be:1e:3e:93:30:fd:db:73:74:
                    f6:e7:83:c6:d2:12:ff:a9:78:cf:a9:78:de:fa:ed:
                    bb:e0:7d:f5:42:30:be:dd:4a:33:15:80:68:f1:12:
                    a4:ee:01:f1:9b:8b:df:de:b1:3b:fa:8f:54:84:2d:
                    e8:97:92:30:e0:69:9e:d1:6f:6c:54:3f:49:04:0b:
                    9d:34:2d:a1:30:15:f2:56:4e:7e:1a:ff:29:8d:a3:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:F2:E5:5D:91:6C:09:E1:62:6E:DE:54:DE:71:B0:F4:23:29:E2
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/2ccdfe8c886b5ce37a60fa7d18f751ce17fac7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:17:1e:63:ab:75:4f:75:b4:38:f3:00:68:24:81:af:68:4f:
         42:1c:52:df:6a:15:07:85:11:4e:69:fe:5b:21:c4:80:0a:6c:
         bc:19:fc:66:60:58:27:f2:7b:10:d9:6c:ef:34:f5:b7:60:51:
         5e:63:ad:59:fb:8e:68:97:e2:70:2a:ee:76:4d:07:72:2d:99:
         60:a5:7d:2f:24:df:9e:9c:0c:ed:bf:06:5e:d0:f1:3f:57:40:
         dc:91:5b:1d:fe:e2:7e:ef:22:71:e5:58:38:9d:3e:4a:a2:4e:
         52:4b:ec:d9:ca:7d:42:fa:7b:a9:21:2a:47:ee:42:74:86:db:
         72:92:60:51:ff:94:79:18:b3:48:d2:cc:43:84:4c:aa:8d:6f:
         1c:9f:f7:55:c2:1f:b4:de:f0:a2:82:62:c5:ee:7b:3e:bc:b6:
         5e:2a:c5:e6:48:f1:5a:12:ea:78:54:3e:0f:50:86:d1:7d:d2:
         f3:92:7a:b6:73:d6:a1:7e:0a:07:00:36:66:26:c8:dc:45:02:
         07:40:6f:1a:a7:80:b1:68:9f:1a:22:44:c6:46:56:26:16:95:
         8f:da:3a:b8:f4:5a:ad:5a:a5:10:06:cb:03:42:73:fc:f2:38:
         fc:52:87:3b:8b:b5:72:9f:d0:ba:4f:08:b7:fc:6b:f6:5c:c4:
         60:9a:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org