Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/72ba040c6cb583b3d8d2916884ec368f5c6dccaf.roa
File:                     72ba040c6cb583b3d8d2916884ec368f5c6dccaf.roa (raw, json)
Hash identifier:          wc0cB51chedSyK4iMkc49Y6Fz9w9d7lLiE+j6dSxtJs=
Subject key identifier:   12:02:91:44:65:2D:03:27:C2:B0:55:AC:D0:68:75:2F:30:D8:2C:86
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       2025F3
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/72ba040c6cb583b3d8d2916884ec368f5c6dccaf.roa
Signing time:             Tue 16 May 2023 17:11:24 +0000
ROA not before:           Mon 15 May 2023 17:11:23 +0000
ROA not after:            Fri 16 May 2025 17:11:23 +0000
asID:                     262166
IP address blocks:        168.234.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106867 (0x2025f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:11:23 2023 GMT
            Not After : May 16 17:11:23 2025 GMT
        Subject: CN=72ba040c6cb583b3d8d2916884ec368f5c6dccaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:0f:ee:41:d4:3f:fc:f8:0f:23:8b:e5:c4:
                    fa:f3:ff:8c:e9:86:b7:7f:bd:61:32:cc:eb:a1:f2:
                    79:fd:16:b6:21:21:f3:97:62:d3:c6:0e:6a:ea:33:
                    72:3e:ed:2e:ab:2b:4a:e9:fa:07:f9:ca:88:5b:92:
                    14:96:a2:12:b3:5a:f1:94:8c:c1:19:36:76:5c:32:
                    6c:f4:05:48:20:79:7c:92:19:51:e8:20:90:23:c0:
                    c3:5c:f0:7c:3a:c6:64:4c:ba:4a:52:4d:5f:8f:5f:
                    bc:91:b4:4e:3d:a8:3e:18:64:a6:ec:ee:8e:c4:a6:
                    96:50:ea:2b:48:d5:75:9d:b5:16:1e:9e:f4:9e:80:
                    c5:5f:99:e7:c3:29:32:aa:0f:a5:60:c5:6a:37:90:
                    73:77:e9:28:fa:9d:c3:55:5e:15:21:90:e9:f9:09:
                    cb:54:e0:41:a8:2b:dc:c4:45:e2:58:20:2a:1e:02:
                    ab:1f:02:b5:be:54:7f:15:25:f8:b0:f4:ce:b8:40:
                    39:0d:5a:55:28:de:cc:c1:b6:11:80:45:40:0a:39:
                    6d:ff:cc:f4:47:ad:1f:91:c7:c2:95:71:24:4b:ba:
                    04:53:7d:fd:90:f3:af:52:f6:37:24:f4:b2:45:cf:
                    24:d6:4a:e6:27:b2:ef:fc:80:ac:6f:77:06:07:06:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:02:91:44:65:2D:03:27:C2:B0:55:AC:D0:68:75:2F:30:D8:2C:86
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/72ba040c6cb583b3d8d2916884ec368f5c6dccaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:bc:16:90:5c:aa:18:83:60:eb:0b:83:b7:45:92:ba:d3:24:
         15:6c:06:34:d7:f4:fa:60:ff:92:17:80:45:50:2b:99:c1:4f:
         32:b9:68:e2:e6:e6:7a:4c:55:22:9b:33:01:11:f4:95:cc:c8:
         19:9d:d6:e3:e6:7b:0c:56:0b:f5:c2:eb:c6:50:c8:79:78:81:
         f7:2e:74:96:e0:96:29:af:a7:91:26:00:48:cb:9a:1e:c4:0f:
         e2:ea:36:bf:5f:85:d9:84:aa:96:98:3a:fa:eb:28:1c:11:33:
         d2:7a:64:e9:e0:a6:63:d5:8d:91:dc:88:18:be:b4:e4:62:83:
         ce:96:fb:2f:8d:e2:61:20:e6:4b:8a:b4:ff:e3:02:cd:88:d7:
         5c:2c:6f:dc:d8:45:d7:92:00:3d:ed:15:7c:e6:1b:66:4a:31:
         68:34:a7:9a:14:af:06:b2:ca:2c:80:8b:d4:a8:4d:1a:04:e6:
         10:3c:c2:98:67:02:aa:8d:ff:94:c4:c9:ed:0d:83:f5:0d:42:
         2e:e9:49:5f:3b:f3:f8:f2:45:ce:d7:89:77:cf:dd:03:24:ca:
         ab:52:0d:ea:95:40:13:fc:10:8b:0f:52:f6:84:90:d7:15:50:
         cd:5f:27:7d:dd:92:c8:30:a8:80:18:3a:c3:e9:de:cc:e5:80:
         1e:20:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org