Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/9c7ffe9059b9e8749273178b0c5b8cdbf988e355.roa
File:                     9c7ffe9059b9e8749273178b0c5b8cdbf988e355.roa (raw, json)
Hash identifier:          F2lRn/UARqqLSbARJPD4W2/ZWzbsq6DzIx0LvSWkbU8=
Subject key identifier:   DF:68:62:F5:93:3B:35:35:23:CE:34:F1:1F:59:94:98:2F:BC:72:DD
Certificate issuer:       /CN=15ca8c673e3b3e909da083fd76e2e42cdae2b046
Certificate serial:       167600
Authority key identifier: 37:90:2C:F7:BB:EA:66:CC:E7:FB:B8:D4:3C:48:94:6E:8E:10:23:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ca8c673e3b3e909da083fd76e2e42cdae2b046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/9c7ffe9059b9e8749273178b0c5b8cdbf988e355.roa
Signing time:             Thu 28 Sep 2023 20:48:11 +0000
ROA not before:           Wed 27 Sep 2023 20:48:10 +0000
ROA not after:            Sun 28 Sep 2025 20:48:10 +0000
asID:                     23243
IP address blocks:        143.208.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472000 (0x167600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ca8c673e3b3e909da083fd76e2e42cdae2b046
        Validity
            Not Before: Sep 27 20:48:10 2023 GMT
            Not After : Sep 28 20:48:10 2025 GMT
        Subject: CN=9c7ffe9059b9e8749273178b0c5b8cdbf988e355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:a1:04:aa:14:54:60:96:bc:dd:8f:64:11:
                    77:a3:84:f4:28:22:40:2c:ef:66:9f:cd:54:15:b2:
                    b3:aa:e8:d9:dc:d7:7f:bd:6d:1a:a6:5d:e4:29:71:
                    ca:d9:a4:28:86:5a:77:fb:5b:2c:28:5b:32:87:7c:
                    c1:b7:b7:1b:32:c3:a0:1f:fa:4b:0f:66:99:f8:5b:
                    90:11:8f:12:35:2e:a6:4a:49:f2:0c:6d:4b:e2:7e:
                    25:76:db:12:4c:d0:b0:b8:b1:fc:d7:67:30:15:05:
                    36:24:2e:a2:f6:79:2a:e0:fc:77:35:c7:54:75:37:
                    a3:e6:e5:ff:68:d2:0f:c2:63:da:fc:fe:d4:d0:a0:
                    11:87:e8:77:4c:00:cc:53:87:26:cc:b2:15:7f:6a:
                    f2:26:1e:65:94:35:d5:1a:fb:36:78:80:60:2e:df:
                    66:d6:34:42:a7:97:b6:74:d2:90:85:6b:da:40:dd:
                    75:49:0d:2d:4a:ee:9e:86:88:56:7a:9d:aa:b0:ad:
                    34:68:70:53:35:fb:df:cd:42:4a:a9:de:06:f2:73:
                    b0:7d:b6:7e:c7:34:3b:55:6c:84:9a:28:5f:a1:6c:
                    e9:9c:d0:f7:d9:ee:4b:b9:71:51:a5:5c:7f:36:d1:
                    36:16:55:cd:7b:b5:2d:41:24:1a:58:d8:0f:c4:a4:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:68:62:F5:93:3B:35:35:23:CE:34:F1:1F:59:94:98:2F:BC:72:DD
            X509v3 Authority Key Identifier:
                keyid:37:90:2C:F7:BB:EA:66:CC:E7:FB:B8:D4:3C:48:94:6E:8E:10:23:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ca8c673e3b3e909da083fd76e2e42cdae2b046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/9c7ffe9059b9e8749273178b0c5b8cdbf988e355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/15ca8c673e3b3e909da083fd76e2e42cdae2b046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:97:2d:fa:16:ae:dc:bd:cc:9d:4e:86:c8:81:98:cc:2c:c1:
         bb:0b:8a:cf:b0:01:1f:1c:2e:87:c0:de:1f:32:85:7b:55:89:
         04:8d:fd:36:f2:67:c8:78:1c:78:bb:a6:bc:a5:f2:54:5f:0f:
         dc:0f:cc:90:0c:22:3f:14:fe:f6:d3:11:ff:22:35:47:5a:f4:
         f3:96:8a:94:e7:8d:d5:65:12:e3:47:d2:06:52:6a:55:2b:54:
         c1:ee:7d:3a:87:60:b3:72:57:90:16:5b:dc:c9:44:a4:6d:28:
         11:44:17:e5:07:99:77:f4:2f:c7:b4:ba:3e:fe:ca:b1:a7:ab:
         d9:7d:90:ca:18:63:b4:3b:5c:2c:f2:f8:15:9e:fb:eb:f8:c0:
         66:13:5e:fd:7e:c5:95:52:bf:21:7a:db:d1:a0:69:0a:e8:ee:
         80:ce:6e:c9:26:79:71:d1:92:fe:3a:55:7c:bc:f8:e7:1c:5b:
         18:d4:90:c6:ab:a7:4b:5e:f7:d1:0f:97:4e:4b:17:35:c3:9c:
         af:93:0c:3b:af:42:e4:b2:98:2a:d5:39:5b:b0:7c:05:42:b1:
         77:9e:43:fb:a8:30:f6:62:77:0b:70:df:ab:72:35:d0:64:ff:
         bc:c4:3b:8b:2b:a7:0d:0e:64:4c:e6:b7:fe:83:18:b0:07:9b:
         41:26:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org