Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dc71aebcaabea184844666a5a62108fbce985ddb.roa
File:                     dc71aebcaabea184844666a5a62108fbce985ddb.roa (raw, json)
Hash identifier:          wY65FBEhavzYotV6wsle/S490vQ8N8CcVRpHH3VaBdo=
Subject key identifier:   54:1A:42:3C:A5:0A:8E:38:13:40:D4:99:51:F2:86:E0:88:4C:47:F4
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       2028E5
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dc71aebcaabea184844666a5a62108fbce985ddb.roa
Signing time:             Tue 16 May 2023 17:20:54 +0000
ROA not before:           Mon 15 May 2023 17:20:54 +0000
ROA not after:            Fri 16 May 2025 17:20:54 +0000
asID:                     262166
IP address blocks:        168.234.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107621 (0x2028e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:20:54 2023 GMT
            Not After : May 16 17:20:54 2025 GMT
        Subject: CN=dc71aebcaabea184844666a5a62108fbce985ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:be:31:54:bd:b3:fc:cd:42:02:97:3c:a9:
                    27:0d:ba:84:a0:1d:16:d7:54:4e:1c:e5:73:b0:2f:
                    e7:47:c5:a7:8f:bd:ac:cc:f4:b0:3c:79:71:5b:c9:
                    ce:db:d1:c6:cd:1a:bd:8c:aa:b5:5f:51:8d:aa:a0:
                    36:bd:8f:7a:1c:5c:a8:9d:b9:72:97:e6:e4:3e:94:
                    ce:c4:0e:a1:b6:86:c7:dd:54:e0:b8:1a:8a:78:55:
                    80:31:72:f2:b8:c5:6e:d5:07:dc:47:0f:28:4a:12:
                    90:18:d4:9c:7b:7f:a8:78:39:eb:45:80:e7:b4:ee:
                    3f:68:32:d9:a9:5f:9e:38:fe:b4:e1:b8:8d:9d:03:
                    a0:78:fb:ea:a2:0b:1f:0a:a7:1f:f9:bc:f8:f8:40:
                    bc:28:3a:47:79:b0:27:69:e4:28:fc:a1:01:03:43:
                    b5:6e:13:83:70:77:2c:b5:0a:21:a0:da:2d:a7:f5:
                    27:0f:10:a6:4f:68:d3:93:32:60:6c:a0:af:53:1e:
                    6d:e5:e7:d1:f2:69:ab:a9:0f:1d:20:34:78:b5:a1:
                    9e:8d:03:6a:1a:38:9a:2e:9b:b7:04:de:49:cf:9d:
                    28:c7:17:7c:5b:60:ef:06:39:e3:3b:44:20:fc:23:
                    1c:c8:39:82:b6:19:64:80:0e:89:eb:1f:da:71:47:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1A:42:3C:A5:0A:8E:38:13:40:D4:99:51:F2:86:E0:88:4C:47:F4
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dc71aebcaabea184844666a5a62108fbce985ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:dc:14:db:37:80:b0:7c:39:09:7f:d4:2d:13:88:2e:99:
         b6:2b:e4:86:f9:b7:c4:d9:b1:f7:1f:d4:cf:11:18:12:8e:ac:
         92:dc:c4:97:92:aa:cc:54:9d:42:44:4c:7d:6a:7b:ed:3f:7d:
         ab:e7:6d:e8:a3:e6:cc:ca:08:f1:18:2e:24:aa:11:90:e7:53:
         60:f2:fa:41:d7:02:12:cd:c7:f1:28:65:76:f1:ad:9f:cb:fa:
         5a:81:b9:8f:f6:24:43:29:44:39:da:39:95:e3:6a:42:ab:ae:
         2d:f5:f7:3d:ad:b8:f2:c9:28:46:62:93:28:ff:75:2c:05:da:
         91:22:bf:53:20:4b:75:bb:0b:07:a6:3f:af:5b:fc:b4:53:ec:
         86:fb:7d:d5:ca:21:f1:11:50:9d:44:58:c4:74:93:d2:e2:9f:
         2f:05:b5:bd:83:74:5d:b5:a2:47:57:e7:5a:57:05:7f:3d:f0:
         6d:1c:77:aa:65:bc:ac:a2:15:96:c8:a6:66:6c:72:ad:39:50:
         96:5a:7c:63:c2:59:b4:3b:e1:dc:14:88:bf:6e:e2:2b:e7:13:
         19:d6:08:80:a3:12:b6:17:43:34:d4:82:19:e6:df:01:6c:ed:
         85:54:2c:4e:84:27:58:18:92:65:0c:99:d6:53:fc:46:ab:95:
         84:a5:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org