Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa
File:                     bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa (raw, json)
Hash identifier:          uzwvQJ7C5qMi1tUy0oTE2p5+9Csc+Fmpt8xOZjPQ1Eo=
Subject key identifier:   83:F8:60:25:77:A7:74:6D:F3:93:70:A4:55:54:F1:7D:76:12:35:B0
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       24398F
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa
Signing time:             Tue 17 Oct 2023 22:00:54 +0000
ROA not before:           Mon 16 Oct 2023 22:00:54 +0000
ROA not after:            Fri 17 Oct 2025 22:00:54 +0000
asID:                     273041
IP address blocks:        168.234.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374031 (0x24398f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Oct 16 22:00:54 2023 GMT
            Not After : Oct 17 22:00:54 2025 GMT
        Subject: CN=bc30c574bc98bef27dcfed0e47ff468d805fd8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:84:b4:d0:3b:9b:15:56:07:a5:50:6a:a0:
                    c3:8f:82:05:29:7d:b8:5e:cd:ff:f6:dd:9d:fb:d6:
                    f8:be:09:81:f0:bb:4e:53:c4:13:d8:a9:aa:81:fd:
                    0c:61:41:b6:77:16:c5:85:c2:b0:31:29:b2:d4:74:
                    eb:e2:a2:fa:81:68:e7:3b:bd:b4:c5:97:c4:36:2a:
                    66:a8:bd:6b:01:18:4f:d7:a1:b5:31:13:65:a0:ef:
                    dc:49:51:c9:52:89:b2:a1:78:a6:0a:34:87:29:b0:
                    c6:72:06:be:9c:57:eb:73:f0:1d:bf:6e:e2:b6:70:
                    74:39:dc:5b:9b:73:c4:1f:bc:5b:61:ca:54:4d:62:
                    89:e1:db:4b:d5:71:63:ff:53:96:3c:69:d9:44:94:
                    d2:1d:e2:a3:e6:14:2b:c2:4f:95:3b:61:4f:30:2c:
                    ac:40:e9:87:7f:83:21:8c:9e:80:ef:96:74:19:af:
                    89:dc:06:13:25:01:04:9a:f6:9a:da:b0:3a:36:96:
                    0c:5c:6b:82:f6:92:f6:0b:d4:b9:4c:89:b7:06:b5:
                    69:6e:85:e4:6e:db:3a:68:93:55:4d:38:3a:09:0d:
                    a4:a2:97:84:64:9c:c3:95:cb:eb:d3:35:c7:93:9f:
                    f7:55:e7:42:ee:3a:8d:8d:b3:d4:d3:5f:ce:87:59:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:60:25:77:A7:74:6D:F3:93:70:A4:55:54:F1:7D:76:12:35:B0
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/bc30c574bc98bef27dcfed0e47ff468d805fd8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:ae:ef:1a:69:b9:e5:7b:ed:99:22:6c:96:35:f5:da:d5:
         fc:71:b8:53:7a:df:12:eb:17:b2:30:89:bc:07:4f:a0:71:bd:
         cf:c4:48:70:b8:35:99:35:6e:94:b1:08:b2:ac:a4:b0:90:e5:
         7d:31:7f:24:3d:78:c2:bc:4e:d7:cb:f0:18:0d:50:bb:b4:05:
         d0:54:50:e2:97:76:6e:58:b9:2b:db:93:ee:23:97:21:cc:ad:
         22:54:5d:2d:f0:0a:1a:dd:38:17:ad:8e:fd:a0:4d:d2:c4:49:
         3d:da:1f:0c:c9:26:9c:33:71:76:82:c2:69:e8:65:57:88:41:
         8c:23:07:44:80:93:c3:dc:c1:5c:db:5c:82:32:da:77:76:1d:
         0a:52:e8:f3:77:c0:a6:c0:d1:68:fd:e3:5b:a3:fb:db:2f:b0:
         88:0f:70:25:35:66:76:c1:79:d2:35:86:d8:0f:8e:c8:a5:1a:
         6f:bd:ca:07:5f:42:a1:75:bf:2c:2c:7f:39:f4:d3:cc:3c:a9:
         54:c3:d7:0b:a4:4f:4e:31:4e:bf:0d:9c:03:f3:ac:ad:85:2e:
         a2:ce:59:f9:b7:b3:bd:89:56:78:ca:8f:2b:f4:f2:36:4a:46:
         bc:f5:fe:09:3a:72:83:fc:b4:12:fa:4f:97:26:e3:22:c6:cb:
         a6:84:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org