Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/6d3e0a2c465d4b757b3fb67d9bdc9f1ac981e50f.roa
File:                     6d3e0a2c465d4b757b3fb67d9bdc9f1ac981e50f.roa (raw, json)
Hash identifier:          woYBwYdUCyTEA7wDPoW6WHrmFxFCs3nS9AKEtK1DsiE=
Subject key identifier:   E1:01:9B:57:D9:C8:C5:17:AC:AC:90:AD:8D:6B:96:25:3F:F2:CB:AA
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       220328
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/6d3e0a2c465d4b757b3fb67d9bdc9f1ac981e50f.roa
Signing time:             Thu 20 Jul 2023 16:59:25 +0000
ROA not before:           Wed 19 Jul 2023 16:59:24 +0000
ROA not after:            Sun 20 Jul 2025 16:59:24 +0000
asID:                     262166
IP address blocks:        168.234.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229032 (0x220328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Jul 19 16:59:24 2023 GMT
            Not After : Jul 20 16:59:24 2025 GMT
        Subject: CN=6d3e0a2c465d4b757b3fb67d9bdc9f1ac981e50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ea:e2:68:e3:90:b9:43:79:82:54:af:16:37:
                    b2:af:29:cc:1e:3c:a9:a8:10:81:2d:fb:d4:dd:b1:
                    a0:ec:83:db:6d:2b:91:65:22:c0:2f:41:4a:65:33:
                    34:7e:b5:5e:1e:09:bf:97:e2:75:e0:0b:0a:16:d6:
                    c2:ae:b6:30:94:9b:dc:ec:a9:3b:05:8d:ad:e5:40:
                    d6:c1:b7:3e:a0:4f:25:c5:62:5b:90:43:46:9e:f3:
                    5b:77:2e:e3:5e:8c:a9:ac:f1:81:8f:92:e7:14:44:
                    55:10:f3:29:0e:76:dd:58:07:a6:a8:83:b0:e4:10:
                    d4:24:99:ee:ba:e9:f6:8b:7b:95:c0:0d:5c:d2:94:
                    00:8c:31:ee:1d:1a:8d:28:5d:61:0a:d1:f1:25:a4:
                    3d:ee:c5:5f:8b:8f:51:68:4e:25:58:93:8e:f4:eb:
                    40:30:65:1e:f5:bb:12:7e:7b:d9:d0:8a:47:cb:11:
                    07:6a:2e:1d:59:64:36:8a:51:c0:c0:79:02:c3:35:
                    d8:62:0f:7d:1e:18:df:79:07:c9:6d:51:45:1f:78:
                    8c:96:c0:39:34:db:12:ce:8b:74:df:f1:2a:1e:f6:
                    91:96:a8:36:5a:5f:c6:49:ea:44:79:3a:bb:ad:74:
                    66:6e:5e:6d:cd:c5:94:89:b1:66:5c:d0:63:42:52:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:9B:57:D9:C8:C5:17:AC:AC:90:AD:8D:6B:96:25:3F:F2:CB:AA
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/6d3e0a2c465d4b757b3fb67d9bdc9f1ac981e50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:e3:d3:4b:17:05:e1:2c:bc:c0:f0:c9:b8:e3:1e:62:e1:
         60:de:a3:9f:88:c2:84:27:0a:5a:2b:05:ad:05:16:da:48:b3:
         a4:20:5a:62:ee:d2:f3:03:9e:dd:97:19:0e:14:34:eb:1c:08:
         95:05:dc:1d:ef:cf:37:f5:bc:2e:5b:d2:9b:97:bc:8a:bf:d8:
         6a:ba:af:74:f8:ee:8f:6a:c1:ce:d6:ff:25:fd:4f:1d:12:85:
         d2:7c:b9:62:6c:06:63:7c:7a:b9:1a:02:c9:84:b8:8c:4f:2d:
         30:fb:08:61:b5:01:b3:76:b5:f6:a8:09:5c:54:87:b1:a5:ef:
         3e:7f:a9:1b:ea:59:24:8e:66:ac:26:7b:83:c5:50:42:a9:0d:
         ae:d5:e1:ab:e7:a6:19:74:8f:06:cf:7f:3d:a2:95:8a:87:d2:
         40:4a:c7:03:d6:b4:a7:ae:ce:6b:8d:ea:bb:94:42:e0:d0:a3:
         9a:b9:08:3a:7f:a3:1c:cc:2e:c4:a0:4d:2b:32:9d:c6:cb:af:
         78:e6:e7:77:a2:89:9e:fc:98:67:c3:ee:6a:d3:9a:d6:23:02:
         da:b2:77:36:2b:a8:e3:20:7c:13:bc:f5:fe:b8:22:f3:d2:ca:
         a9:44:cd:0f:21:68:77:0b:17:12:ce:12:82:e4:b2:60:aa:97:
         ff:b1:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org