Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d932293da976cfb98d91e398e808f553bb6f6317.roa
File:                     d932293da976cfb98d91e398e808f553bb6f6317.roa (raw, json)
Hash identifier:          tlwMj51RhOgcNipbp5KA0pvXYQQKvoNVCyYhx3UTiPQ=
Subject key identifier:   76:E8:B4:0D:25:EC:1C:0E:39:E5:85:86:24:7A:DA:64:51:D4:AB:A4
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       275D2B
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d932293da976cfb98d91e398e808f553bb6f6317.roa
Signing time:             Tue 27 Feb 2024 23:37:43 +0000
ROA not before:           Tue 27 Feb 2024 23:37:42 +0000
ROA not after:            Fri 27 Feb 2026 23:37:42 +0000
asID:                     262166
IP address blocks:        168.234.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579755 (0x275d2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Feb 27 23:37:42 2024 GMT
            Not After : Feb 27 23:37:42 2026 GMT
        Subject: CN=d932293da976cfb98d91e398e808f553bb6f6317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:e1:43:be:c4:59:35:50:ea:35:28:76:e2:
                    cc:f6:e9:13:fd:a6:62:57:aa:17:0d:fc:b5:47:34:
                    f2:56:6b:fc:1e:6a:02:e8:05:e2:d4:75:51:12:cc:
                    4b:e6:f2:99:ec:97:0c:26:9e:ff:67:48:b1:9c:cb:
                    84:4d:13:c7:89:da:d6:d4:11:f1:19:69:5e:53:4a:
                    34:88:13:67:1c:52:b4:60:76:68:2c:d4:4a:1f:d8:
                    e9:eb:5e:2d:32:44:2d:57:aa:be:88:66:40:a4:c9:
                    10:37:42:2a:8e:ee:6f:bd:2c:b8:1d:c8:2d:79:37:
                    a3:fa:3d:14:50:f3:e3:73:f6:60:e4:40:7d:fb:f8:
                    34:a1:5a:9a:ab:ec:91:84:f5:9e:8c:b3:53:c7:71:
                    2f:85:d0:33:b8:0a:a4:99:64:08:e3:20:cc:62:34:
                    02:46:84:f2:c1:02:1d:d3:96:e2:68:bb:9c:d5:79:
                    93:a9:1c:1a:03:86:07:67:80:cc:3a:91:a5:56:23:
                    4a:2b:12:1e:bb:e0:8b:5d:06:98:6a:38:d6:cb:01:
                    30:60:e2:97:d1:ef:be:8b:d8:33:bd:0f:8f:93:4d:
                    22:6a:90:f8:71:26:83:87:f6:91:d2:8b:04:4e:ce:
                    5d:cc:4e:a2:8f:40:4e:24:d9:f2:a7:48:fa:8a:3f:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:B4:0D:25:EC:1C:0E:39:E5:85:86:24:7A:DA:64:51:D4:AB:A4
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d932293da976cfb98d91e398e808f553bb6f6317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:16:d1:54:2d:60:0d:66:76:3a:25:a0:63:47:cd:8f:87:3e:
         dc:c0:9d:4a:c9:a9:ba:99:35:84:15:23:fe:fe:b1:a6:6d:07:
         3b:bd:a0:d2:5f:7e:0b:e1:42:63:3f:d2:ad:86:e7:38:92:10:
         bf:dd:5a:2d:7a:15:88:76:15:a8:a1:28:0a:d7:72:d2:21:43:
         10:42:0b:94:01:f9:d9:77:91:95:cf:7a:72:7a:a5:fb:a4:ae:
         bd:39:20:07:af:81:0a:f7:29:f7:f9:0d:ca:eb:6f:26:2f:ce:
         86:77:00:d1:f9:3a:93:58:f6:f6:4e:0a:ac:0e:ce:bd:c7:40:
         e1:89:a5:63:b6:99:8c:0a:4c:ac:0c:2c:5e:79:19:c4:dd:c9:
         f6:7f:71:0d:13:3c:a8:63:e3:7b:0c:80:17:cd:78:8a:5a:66:
         fc:c5:33:b5:93:2c:de:3f:bf:06:45:c6:4f:a5:2f:14:b3:89:
         d1:cd:2e:22:e3:72:35:7c:18:db:5e:57:32:52:bf:59:63:6b:
         a9:ba:9f:84:fd:c1:91:fa:ed:5e:4c:ad:d4:2b:ca:b1:db:dd:
         22:95:54:30:0a:71:d2:7e:b0:38:90:13:f2:7e:c6:66:dd:f1:
         56:ec:43:46:08:23:a9:67:e7:8e:9c:3b:cb:87:52:22:93:6b:
         80:f2:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org