Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/ae5ac193e4291025d55f2d39ad3c540e51ead7a4.roa
File:                     ae5ac193e4291025d55f2d39ad3c540e51ead7a4.roa (raw, json)
Hash identifier:          t6HQ/bNDRcCA5zEJZNEYrzfw+wkFSPN4gmFOqD7ciOU=
Subject key identifier:   A6:98:63:D9:5D:9B:60:D3:5C:6A:14:17:01:CF:03:3C:4C:90:63:F8
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       203960
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/ae5ac193e4291025d55f2d39ad3c540e51ead7a4.roa
Signing time:             Tue 16 May 2023 17:44:39 +0000
ROA not before:           Mon 15 May 2023 17:44:39 +0000
ROA not after:            Fri 16 May 2025 17:44:39 +0000
asID:                     262166
IP address blocks:        168.234.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111840 (0x203960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:44:39 2023 GMT
            Not After : May 16 17:44:39 2025 GMT
        Subject: CN=ae5ac193e4291025d55f2d39ad3c540e51ead7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:d5:21:85:50:f2:b7:13:8d:a3:e3:d2:f1:
                    14:dd:32:b5:00:e7:be:f8:86:c5:44:cb:c8:1e:b7:
                    cf:11:23:a0:93:02:d4:d0:9e:eb:71:2c:40:90:46:
                    ed:88:44:2a:c9:06:99:b2:ad:df:8a:dd:1d:47:ad:
                    a4:f5:9e:b8:2c:10:a1:80:9e:39:d5:91:54:f6:fa:
                    e4:57:a8:ff:ad:d1:bb:b5:1a:04:a8:2d:5c:70:39:
                    05:95:16:0e:67:40:5d:5c:ce:9c:db:35:be:1d:33:
                    fe:1a:ce:9f:34:87:61:e1:d1:66:cc:26:9d:02:0a:
                    26:1a:39:5f:9b:29:23:a0:49:4e:8d:6d:30:ba:e3:
                    41:55:40:a3:db:30:33:06:a2:c4:45:1b:63:3e:c2:
                    1c:a3:b9:a8:ab:a5:2d:d5:a5:3d:4f:42:fe:85:f5:
                    08:3a:a0:a9:1b:7c:b4:b5:2e:d3:cf:d5:51:49:8f:
                    b1:c7:71:d7:59:e9:a5:23:83:3d:83:15:ae:4d:c3:
                    79:69:10:bb:7e:54:f0:a8:cc:e5:f9:c4:74:4e:14:
                    67:53:95:1f:8e:cb:0f:35:1c:20:de:64:71:7f:df:
                    d0:d4:49:53:b5:ff:fc:5b:27:e3:f4:fa:e3:b9:f5:
                    22:5b:b1:59:c7:9a:a9:0f:02:5c:87:a9:0f:85:45:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:63:D9:5D:9B:60:D3:5C:6A:14:17:01:CF:03:3C:4C:90:63:F8
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/ae5ac193e4291025d55f2d39ad3c540e51ead7a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:df:bf:a4:d4:a3:30:da:8b:1d:b1:29:9b:01:e9:71:6d:
         ed:e1:26:7f:5a:7d:10:3f:34:4b:c6:bd:74:3f:45:08:09:35:
         3e:d8:bb:dc:fc:f6:47:45:fd:50:a9:1f:54:80:4d:4c:2d:8b:
         07:c8:ff:7f:fc:5d:a7:9c:77:df:77:cf:84:20:2b:32:44:63:
         d2:b1:70:b4:d0:09:0f:fb:d2:6d:92:b8:83:a8:1b:7f:82:16:
         d1:76:92:c3:ef:1c:13:6e:ed:08:d0:57:7d:f7:c0:d3:ea:e8:
         93:7e:7f:0b:b6:e2:47:5f:f0:bf:95:b8:b6:ea:11:05:e5:5d:
         0f:77:0c:ce:9f:7d:ea:e1:42:c9:a4:95:8a:be:9f:33:e7:77:
         5b:a4:11:0b:d5:bd:4f:b3:6a:1d:f7:2e:04:9a:55:18:16:27:
         09:13:c2:dc:5f:28:2e:a5:cf:ac:6d:3d:38:05:ae:a7:04:fc:
         7b:00:ab:9f:b6:8e:98:9b:73:8f:42:4b:51:d6:79:1f:40:91:
         d6:99:ff:16:a5:df:f2:0c:18:97:48:5e:6b:fa:d2:80:3f:b8:
         b9:3b:92:30:20:cd:88:58:c9:5a:bd:5d:a4:29:95:e9:1a:36:
         5c:a0:34:46:56:d4:cd:ec:dc:cc:cc:90:c5:0f:85:9f:46:a2:
         8b:be:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org