Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4ea31b08840de0883b3621cccf2985ccc7fead9b.roa
File:                     4ea31b08840de0883b3621cccf2985ccc7fead9b.roa (raw, json)
Hash identifier:          5T4ZwGJOgQdHbJQv45OxxM8Ck6FC27/Eim4Pbvi7RVU=
Subject key identifier:   B0:5A:F2:F6:92:5C:2A:BE:49:58:B2:88:48:F9:CA:4E:77:54:42:FF
Certificate issuer:       /CN=d3e258591b81b726517d993ac9db01b629da36e1
Certificate serial:       07CC18
Authority key identifier: DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4ea31b08840de0883b3621cccf2985ccc7fead9b.roa
Signing time:             Wed 19 Oct 2022 15:09:39 +0000
ROA not before:           Thu 09 Dec 2021 03:00:00 +0000
ROA not after:            Sun 10 Dec 2023 03:00:00 +0000
asID:                     265707
IP address blocks:        192.140.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511000 (0x7cc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e258591b81b726517d993ac9db01b629da36e1
        Validity
            Not Before: Dec  9 03:00:00 2021 GMT
            Not After : Dec 10 03:00:00 2023 GMT
        Subject: CN=4ea31b08840de0883b3621cccf2985ccc7fead9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:ec:3c:82:41:5e:9b:ae:83:7c:50:d2:f3:
                    31:8f:ae:d3:7e:f1:e2:81:e4:c7:1a:32:4b:a8:2b:
                    4d:9d:36:66:b9:28:ac:74:96:dd:81:ff:21:6c:23:
                    62:d2:df:3e:8d:5a:76:e3:19:ed:7b:87:7a:4b:a0:
                    08:8e:a6:bc:2d:1f:f3:01:99:c4:08:1e:d0:0e:6f:
                    6d:2b:1a:36:2c:23:19:cc:96:4b:96:d1:75:8a:b0:
                    b3:4c:e0:1c:ca:b5:12:cb:bb:c4:89:44:8c:66:8e:
                    9f:bd:5c:e5:f4:96:a8:09:ab:35:ff:f1:67:c3:c1:
                    84:3a:59:dc:05:73:01:15:be:b2:55:2e:45:fe:40:
                    11:65:83:ca:10:79:65:71:d3:7c:55:7c:fc:8b:b2:
                    2b:ae:46:ec:04:73:5f:fe:d9:50:75:c4:90:ae:b6:
                    5b:b0:fa:5e:1c:dc:78:b1:c8:4b:b1:cf:f2:95:e2:
                    a2:77:96:61:77:42:92:82:8c:b5:8b:4e:f5:84:57:
                    98:ee:7e:9f:74:f5:2c:aa:f2:0a:e7:1a:16:56:d5:
                    b2:c5:9b:3f:e6:d1:db:43:83:8e:41:14:31:e3:d8:
                    7e:94:bc:33:2b:f0:e5:e4:1a:a3:25:94:69:d6:ed:
                    f9:bf:1c:3f:c4:5a:e8:7e:49:0f:bc:99:f2:0c:f5:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5A:F2:F6:92:5C:2A:BE:49:58:B2:88:48:F9:CA:4E:77:54:42:FF
            X509v3 Authority Key Identifier:
                keyid:DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4ea31b08840de0883b3621cccf2985ccc7fead9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/d3e258591b81b726517d993ac9db01b629da36e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:3d:40:ac:5a:2d:32:de:3d:61:9a:85:ac:29:ba:7e:3c:
         b6:d5:e8:72:b6:24:16:d4:5f:98:75:df:7f:73:da:24:9d:73:
         07:31:92:d8:84:81:7c:ea:6e:ac:6d:74:a5:aa:a3:b0:42:7d:
         6c:01:f1:ae:50:75:48:d3:2d:b6:fb:19:ac:ed:d0:11:b4:18:
         ed:c3:8f:06:20:c5:16:c1:0b:cf:cd:a9:70:18:16:1c:d8:e3:
         03:51:ea:20:00:a2:21:63:1c:f4:c5:d3:33:0d:97:50:93:4f:
         37:88:06:ae:e8:63:cc:f3:e1:2b:69:a2:63:ad:11:ec:39:f4:
         c8:90:df:e9:79:07:d8:ed:a3:42:9f:ac:cb:f8:a3:4e:b4:df:
         04:a8:01:ee:fc:a8:9a:2c:8d:e9:64:a7:2b:3d:e0:85:21:f3:
         81:9c:e8:ab:e4:75:b7:96:98:46:dc:59:0d:44:4c:d7:63:cf:
         3f:db:f2:2f:6f:b8:e7:3f:cd:47:eb:1a:98:53:e0:e8:1a:d0:
         18:78:2f:b0:b5:d2:7b:50:66:7b:5a:03:5d:49:ea:8f:9b:45:
         e4:cc:50:95:62:fd:4e:ef:85:7e:d0:3f:3c:6f:5f:19:15:57:
         60:19:49:75:0f:ab:23:33:fa:ed:b1:32:b0:76:05:96:7e:d5:
         10:9a:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org