Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f2559f328a3747916bd08306d1caa7286725d077.roa
File:                     f2559f328a3747916bd08306d1caa7286725d077.roa (raw, json)
Hash identifier:          Kgn3A3jCK4S1JEejUsEOqBV+t+FozzcQKO7BTwGUFnw=
Subject key identifier:   8C:F7:8B:8A:74:05:37:82:06:5A:86:5E:13:12:39:AC:05:1F:32:E2
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       204253
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f2559f328a3747916bd08306d1caa7286725d077.roa
Signing time:             Tue 16 May 2023 17:50:35 +0000
ROA not before:           Mon 15 May 2023 17:50:35 +0000
ROA not after:            Fri 16 May 2025 17:50:35 +0000
asID:                     262166
IP address blocks:        168.234.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114131 (0x204253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:50:35 2023 GMT
            Not After : May 16 17:50:35 2025 GMT
        Subject: CN=f2559f328a3747916bd08306d1caa7286725d077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:e9:af:67:db:03:26:92:be:99:7c:9c:de:
                    22:1d:67:b6:b0:47:1e:8a:49:f9:64:14:9d:1e:0f:
                    31:fc:a4:6e:38:b8:a8:96:e7:59:df:94:de:52:66:
                    89:7e:28:b0:1d:3b:05:0b:b1:0b:97:6e:5c:ec:ba:
                    13:e0:e4:07:37:55:bb:f0:e3:d5:33:ee:0e:04:ed:
                    f0:39:34:df:93:61:08:91:7e:18:e3:da:43:bb:41:
                    9d:7e:82:de:b8:ce:c8:41:12:bb:1e:df:d7:7d:2d:
                    83:bf:7d:aa:d3:00:fc:2e:91:b5:a2:69:b2:34:65:
                    6d:bd:17:03:c5:65:b7:68:71:b0:e6:af:a8:66:16:
                    7d:53:fd:de:49:10:68:bf:d3:73:26:cb:44:99:73:
                    1b:38:ba:9d:5d:3d:15:bc:18:ea:78:9e:85:44:8d:
                    1a:d2:d3:fb:e6:ef:6f:6e:78:01:d7:f8:e8:ab:2e:
                    95:f8:3a:58:d4:49:cb:5a:5b:b4:ab:24:f3:b9:7e:
                    1b:e7:bb:78:b5:a3:37:96:95:92:35:25:c0:d0:3f:
                    8e:92:24:a4:8d:3c:3e:b6:27:50:a6:20:f1:b2:31:
                    05:9f:d8:8e:71:91:b5:05:53:19:ad:67:79:b6:aa:
                    52:d8:67:6f:86:9f:ec:b3:5e:d1:63:7d:d8:43:8f:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:8B:8A:74:05:37:82:06:5A:86:5E:13:12:39:AC:05:1F:32:E2
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f2559f328a3747916bd08306d1caa7286725d077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:07:9f:28:95:19:7e:54:5d:03:6f:2b:3e:9d:17:4c:c7:ab:
         d1:0e:2b:23:c3:2f:01:a9:b5:13:7d:24:32:86:d5:e7:90:ad:
         73:65:d8:37:e8:1d:89:7a:15:b7:25:af:ef:4a:e9:0d:8f:cd:
         19:e2:51:70:fc:62:78:d8:15:00:64:cf:2f:c2:f9:55:26:b7:
         ea:ac:94:20:0f:c3:7e:07:67:b8:5b:88:2c:7a:d1:84:42:45:
         cc:c3:bc:9d:99:a3:55:cd:5a:44:00:e1:81:92:ee:05:14:25:
         8a:61:89:e5:9a:6f:fe:cc:c5:be:4b:86:b7:80:d5:1c:b9:c5:
         ae:0d:c0:43:3d:8c:4a:4e:4a:92:76:71:af:95:91:02:83:48:
         07:da:c9:23:b9:b0:48:01:b3:82:3f:c0:97:70:fb:b3:c0:11:
         1d:51:7c:97:fa:f6:d2:28:e6:e2:d3:82:e8:92:b8:a2:c1:78:
         83:fd:36:b6:78:fe:47:e0:9d:c7:fa:ab:f1:50:01:01:af:fb:
         41:eb:81:c1:64:f7:ef:90:58:8a:0b:12:c7:e6:06:a1:af:4e:
         c6:c7:20:0f:5b:be:f6:17:d5:85:0f:5d:b4:32:9f:9d:b4:cb:
         16:0e:36:0f:b3:dc:93:d4:fb:29:22:a5:b8:19:7e:83:f3:f8:
         81:bc:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org