Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/75569d5056e21fd7be31c1ac29a2b91bafaac586.roa
File:                     75569d5056e21fd7be31c1ac29a2b91bafaac586.roa (raw, json)
Hash identifier:          0gGGUC4e9HjFHPRvkON61X+cp0axqM6bDdntwVInpIs=
Subject key identifier:   D6:29:04:7E:5F:4E:BF:0C:E9:DF:C2:18:29:D3:69:F5:7E:5B:E3:92
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       204CFB
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/75569d5056e21fd7be31c1ac29a2b91bafaac586.roa
Signing time:             Tue 16 May 2023 18:33:23 +0000
ROA not before:           Mon 15 May 2023 18:33:23 +0000
ROA not after:            Fri 16 May 2025 18:33:23 +0000
asID:                     262166
IP address blocks:        168.234.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116859 (0x204cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 18:33:23 2023 GMT
            Not After : May 16 18:33:23 2025 GMT
        Subject: CN=75569d5056e21fd7be31c1ac29a2b91bafaac586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:af:4e:bf:29:05:42:75:3e:ef:3d:30:47:
                    c0:24:4e:cd:9f:19:13:a1:a6:89:bb:22:bc:74:d1:
                    48:a8:6b:6e:d1:5b:ea:4a:b6:bc:35:f9:af:95:8c:
                    a6:a9:10:eb:40:d9:78:8d:4a:e2:61:1a:b4:5d:25:
                    69:81:23:6e:77:68:ff:dc:b7:06:2f:99:e0:e0:30:
                    ba:b8:36:f1:05:e5:3e:43:81:95:80:53:83:5c:fa:
                    92:c8:7f:2c:3e:3b:2f:89:96:c9:e7:9f:39:98:a3:
                    de:0e:8e:be:4e:e2:b7:8d:c5:e1:1b:93:6d:9c:5f:
                    d3:7b:03:ea:29:a2:e1:9a:31:d1:c1:cf:f3:23:a9:
                    25:47:11:a0:bc:a7:11:2d:7c:6b:c4:55:cb:27:20:
                    a5:2a:22:d5:0f:cb:a0:aa:0f:0d:f5:ef:d2:8a:ce:
                    3e:14:4b:ce:98:d5:f0:72:b3:c2:68:90:df:bf:71:
                    7f:f8:1e:1a:9f:e5:5b:ca:6d:6f:cb:f0:b0:8a:19:
                    0f:e9:dd:bc:fc:44:c2:fd:cc:59:1b:53:63:58:de:
                    fc:ca:1c:98:68:8e:cd:2a:6e:92:5b:f8:f1:4d:21:
                    09:ea:9a:7c:95:25:68:78:cd:14:be:97:16:9e:c9:
                    f5:6f:33:bb:c2:5c:01:cb:f3:e8:0e:b9:4a:39:47:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:04:7E:5F:4E:BF:0C:E9:DF:C2:18:29:D3:69:F5:7E:5B:E3:92
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/75569d5056e21fd7be31c1ac29a2b91bafaac586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:d4:32:9a:c4:b2:e2:98:28:81:55:2b:fa:77:1e:37:b5:
         de:00:ac:4b:c5:47:54:dd:23:d3:7b:9c:cf:0b:66:91:94:ae:
         87:ec:37:94:0b:9d:5f:c8:d4:ca:1d:14:7e:e9:fa:9a:a3:74:
         65:67:98:dc:40:8e:04:39:2c:0f:3f:a8:bc:b6:1a:fd:7c:3c:
         0b:9c:ba:0d:cc:8f:6e:1a:61:5e:f9:ee:a1:33:8a:14:47:7e:
         be:f3:3d:ce:e9:2f:7c:4b:cb:30:50:6d:b4:99:50:d1:46:ad:
         fc:5f:b3:8c:59:20:06:34:9d:ba:08:c1:72:db:95:15:43:05:
         87:b4:02:ec:fd:1b:91:aa:1a:4d:98:2b:1d:24:c6:c9:cc:af:
         4b:e2:61:1d:c7:6d:db:72:5f:74:59:f0:82:54:57:3c:39:c7:
         f0:6b:27:7f:20:d4:55:65:8d:83:0f:d7:6a:67:7a:d3:a6:b7:
         de:6a:ed:d1:ec:19:92:62:36:9f:13:40:62:db:78:d0:09:dc:
         08:25:41:d8:6f:82:9e:71:89:1d:ec:41:03:ad:4c:e7:90:43:
         67:ca:16:7c:4f:ae:ea:e8:e9:b6:8d:23:34:52:63:e4:5c:b2:
         8e:a2:fb:0c:66:c7:82:ed:ab:e1:f9:7d:63:f0:07:b6:07:9d:
         8a:84:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org