Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/82e9830c35108794ecd75596850486631efa2e51.roa
File:                     82e9830c35108794ecd75596850486631efa2e51.roa (raw, json)
Hash identifier:          1s2pjTUTUD0fEC43SoN3V1wroQXwxGFfdeJGu6nys3w=
Subject key identifier:   4E:00:77:DD:5A:4F:C2:C0:86:5E:14:7C:68:35:AF:A5:0E:4C:63:6D
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       20DD
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/82e9830c35108794ecd75596850486631efa2e51.roa
Signing time:             Tue 27 Jun 2023 19:33:39 +0000
ROA not before:           Mon 26 Jun 2023 19:33:39 +0000
ROA not after:            Fri 27 Jun 2025 19:33:39 +0000
asID:                     28067
IP address blocks:        64.28.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8413 (0x20dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:33:39 2023 GMT
            Not After : Jun 27 19:33:39 2025 GMT
        Subject: CN=82e9830c35108794ecd75596850486631efa2e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:3a:41:fc:31:ec:66:af:e0:92:21:a5:4b:
                    f4:a3:1d:9d:6e:ba:fb:cf:52:8f:6f:79:c2:5d:be:
                    f9:fa:5a:40:23:12:7a:67:db:a5:67:32:85:55:3a:
                    a9:0b:f0:5d:00:f4:5b:63:c8:8d:e5:6b:cf:54:b6:
                    9c:c4:ce:79:62:84:c1:75:b7:f6:d6:37:8b:e2:fc:
                    00:e8:a5:7a:83:74:61:a9:51:50:61:0c:10:3f:df:
                    57:3e:c9:f6:2d:f1:e6:85:90:7a:6b:24:92:c2:1f:
                    5d:b6:d5:11:08:08:79:f0:f8:ca:79:28:49:fb:58:
                    fb:08:d4:a4:57:8e:3e:f5:a1:ed:c5:a3:45:77:7c:
                    09:06:5a:50:8d:b0:04:78:03:67:91:c0:8f:a2:6d:
                    8e:32:0c:3d:16:41:85:4d:8f:d4:37:e8:b3:46:04:
                    e4:21:31:a0:48:0d:88:76:ea:4d:ee:a2:4f:db:2b:
                    12:c0:4b:64:07:c5:96:dc:7d:af:be:06:90:3e:a4:
                    ca:79:34:83:09:34:df:0a:45:3d:32:49:a5:3b:21:
                    f3:c1:bd:e4:9e:53:f7:36:c1:44:b5:a7:93:79:a5:
                    b3:51:c6:1a:27:b6:81:f6:c2:81:49:9e:b8:9d:cd:
                    1f:2f:ab:76:30:46:83:e9:a8:49:70:d1:85:68:dc:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:77:DD:5A:4F:C2:C0:86:5E:14:7C:68:35:AF:A5:0E:4C:63:6D
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/82e9830c35108794ecd75596850486631efa2e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:e6:43:03:f6:86:29:45:09:eb:88:64:7f:df:62:8d:93:
         ed:30:ff:d5:2b:69:95:e8:a9:89:44:74:0a:1c:6a:c6:ac:3b:
         93:31:8a:86:b4:af:1e:d9:06:13:e2:37:fb:2c:3f:dd:5a:ba:
         7a:5f:2d:d0:b2:a4:db:3d:0b:a3:82:6d:d1:e3:05:e5:33:6d:
         3b:4c:c7:c7:94:5e:12:c8:9b:f9:d6:7b:68:e7:b6:f5:ae:1a:
         82:37:a9:2f:25:8f:ef:ed:ff:d2:92:4f:ec:d8:96:57:49:30:
         17:15:cb:73:9e:9a:1e:ae:79:73:d7:26:59:50:bb:3d:28:9d:
         6b:c0:c4:25:72:46:10:c6:90:3a:f7:b8:4d:6f:c1:60:23:83:
         2c:d7:52:88:6b:cf:ef:6c:e0:fa:ad:1e:30:09:12:e7:0c:36:
         e4:ac:ff:4d:94:f9:a6:de:9a:39:e3:80:f6:38:a7:33:f2:0f:
         fa:8b:73:c6:76:c0:53:40:c5:5a:8b:80:de:82:78:d9:cc:87:
         43:f5:30:8d:a2:00:5e:75:ed:60:39:ef:07:e2:c8:bf:c0:98:
         77:3c:fb:88:16:f2:4e:9a:44:8f:af:4f:04:e1:f1:6d:31:0a:
         3e:04:de:ef:6b:27:65:e7:d8:bb:44:12:f1:aa:4d:14:08:6b:
         ce:7e:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org