Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/4101ce54a178065e90e6488a0713a91842c1c656.roa
File:                     4101ce54a178065e90e6488a0713a91842c1c656.roa (raw, json)
Hash identifier:          0zg26pUDxnTwdrsgS5qosUJrB8xC8tBzjw5zb34KH0M=
Subject key identifier:   19:37:A8:77:08:A3:51:EC:AC:B0:8F:74:D4:DA:12:A7:98:F8:18:A0
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       2761EA
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/4101ce54a178065e90e6488a0713a91842c1c656.roa
Signing time:             Wed 28 Feb 2024 07:00:53 +0000
ROA not before:           Wed 28 Feb 2024 07:00:53 +0000
ROA not after:            Sat 28 Feb 2026 07:00:53 +0000
asID:                     262255
IP address blocks:        168.234.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580970 (0x2761ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Feb 28 07:00:53 2024 GMT
            Not After : Feb 28 07:00:53 2026 GMT
        Subject: CN=4101ce54a178065e90e6488a0713a91842c1c656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:49:3a:15:73:5f:04:a1:0f:4d:75:f3:8f:
                    1a:29:83:b0:87:5f:51:18:d4:b4:ed:b8:6a:37:92:
                    c7:ba:5c:72:a0:42:2d:76:50:0e:b8:43:34:4e:89:
                    64:1d:be:4a:84:f5:93:df:3d:c2:6c:b9:1f:e4:67:
                    c3:79:09:eb:b4:69:a8:e7:e3:7d:0c:15:c8:03:c5:
                    e4:df:e4:85:74:58:01:b5:63:6b:7b:9c:4b:a5:e1:
                    0f:9d:fc:74:19:d9:d5:26:e2:e5:57:88:a9:d7:b5:
                    fc:c5:2e:cc:e9:fb:90:a7:0c:ef:3e:94:f3:b2:52:
                    51:af:69:c0:51:97:b1:f4:20:a5:c7:d2:8a:61:95:
                    84:3c:f4:16:d9:89:26:09:d0:57:dc:45:71:70:ec:
                    df:5a:49:68:50:59:45:7f:89:2f:d2:16:4c:b5:1b:
                    ac:1f:1e:30:41:28:30:7d:4c:51:7c:e5:7f:bf:f0:
                    82:8e:fa:ed:7c:ff:f9:49:e3:b0:77:5f:cc:c6:1a:
                    b9:ef:52:4f:ce:34:c1:17:ba:9b:e3:93:58:7d:7b:
                    6a:52:d3:ac:c0:db:b7:96:d8:ac:b0:c1:f4:a4:f2:
                    31:ce:21:19:d3:fc:0e:99:68:e2:f4:43:99:20:d4:
                    bb:3d:99:76:54:bf:cb:43:d3:0b:d1:16:5f:03:20:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:37:A8:77:08:A3:51:EC:AC:B0:8F:74:D4:DA:12:A7:98:F8:18:A0
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/4101ce54a178065e90e6488a0713a91842c1c656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:17:36:e1:db:9d:5b:a0:d2:80:65:8f:a4:a8:55:db:d0:c4:
         6a:c8:cd:cc:ab:f2:d7:b8:7b:b8:e7:55:11:19:8e:f6:df:ba:
         3d:3c:e1:00:de:07:38:11:f6:e2:43:a4:46:56:9f:6e:2c:e7:
         bf:91:18:b1:1c:fe:18:d7:70:a9:b3:49:48:d7:41:07:a3:10:
         02:01:6a:a3:09:69:40:fe:f6:2c:46:17:b7:1c:ed:a8:c5:75:
         c1:8f:70:ae:85:d1:57:15:69:2d:cd:5e:0a:f5:25:69:84:37:
         c3:4d:83:7b:22:e6:66:9a:7c:f1:09:c6:49:32:18:e3:46:72:
         7d:f2:47:5f:0b:d5:9c:07:28:75:b9:6e:a6:f8:68:2d:9a:80:
         0c:97:19:7b:f6:81:56:6b:cc:3f:54:19:52:2c:96:96:e7:97:
         69:3a:bc:75:99:1c:b5:3f:e1:5f:d1:82:1f:19:ca:79:6e:10:
         43:11:d1:27:07:9f:72:60:f8:00:28:3f:dd:31:47:29:e3:07:
         28:4d:5d:93:b4:e9:b7:43:bc:bd:6a:85:3b:1f:54:18:47:ec:
         b6:b5:29:18:2d:f1:6a:e1:69:55:ca:1e:e4:40:41:c9:a5:d5:
         63:6f:7c:38:6e:30:75:f0:7e:78:87:12:a8:12:25:d7:0d:c5:
         ae:40:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org