Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa
File:                     0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa (raw, json)
Hash identifier:          vDMZ6H97DYMzeMC/IRHl5nuTfaDsOAUm7M+78/h6yVs=
Subject key identifier:   16:54:95:EC:67:7E:15:38:E1:DC:38:68:E4:B1:13:9A:BA:1C:CE:4B
Certificate issuer:       /CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
Certificate serial:       244E61
Authority key identifier: CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa
Signing time:             Tue 17 Oct 2023 07:30:00 +0000
ROA not before:           Mon 16 Oct 2023 07:30:00 +0000
ROA not after:            Wed 15 Oct 2025 07:30:00 +0000
asID:                     263688
IP address blocks:        201.131.38.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379361 (0x244e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
        Validity
            Not Before: Oct 16 07:30:00 2023 GMT
            Not After : Oct 15 07:30:00 2025 GMT
        Subject: CN=0ecc071e7f2ea49e286eef1ad94a3977679ab622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:b1:90:36:1f:61:40:c1:c4:91:f7:82:f3:
                    29:e8:9f:eb:a3:d2:da:50:93:04:e6:76:db:25:00:
                    70:0a:17:13:cb:c0:82:a2:a3:62:c0:da:aa:d1:b7:
                    6f:59:61:df:9e:ba:54:ae:5d:3b:93:42:75:2d:12:
                    6f:8d:1d:a8:12:0a:90:4d:22:6d:42:78:a2:17:81:
                    c4:df:97:c6:84:64:95:c7:96:3a:27:d7:0f:af:00:
                    42:9f:28:57:d6:28:03:c4:81:51:fc:35:a0:ad:a8:
                    af:1f:d9:48:f4:c6:88:f7:72:05:24:00:b2:3f:41:
                    82:d1:a9:59:ed:a4:c1:a9:d8:9d:53:17:9a:37:e6:
                    dc:a3:7d:94:ff:6e:f7:d8:67:bb:54:03:64:e7:9b:
                    9c:b1:c7:44:1a:77:ba:9c:cd:b6:d8:e6:83:c3:1f:
                    de:c1:fb:8d:bd:b9:70:7d:42:09:77:7b:15:11:c0:
                    5e:fb:8c:ad:c4:09:a5:6e:d9:bd:a3:25:69:08:88:
                    6f:76:91:23:1e:e3:88:88:d0:d6:7a:6b:58:c5:e4:
                    32:18:c7:16:79:0d:30:a2:a2:17:75:a1:1f:5b:b6:
                    35:e7:50:68:57:99:38:81:5a:e3:8f:30:9c:76:9d:
                    91:cf:f5:8f:92:31:ee:fe:d1:ea:ab:f8:aa:ca:60:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:95:EC:67:7E:15:38:E1:DC:38:68:E4:B1:13:9A:BA:1C:CE:4B
            X509v3 Authority Key Identifier:
                keyid:CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/0ecc071e7f2ea49e286eef1ad94a3977679ab622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:a4:ff:9d:f5:7f:65:7d:01:72:0c:eb:dd:84:2a:c4:be:
         8e:52:0e:45:56:48:19:4f:4e:0f:99:f5:a5:e4:b0:65:95:93:
         a1:a8:6a:b5:97:c6:ce:28:78:f3:fc:d7:48:1b:c3:62:f7:c5:
         e5:39:64:e7:9a:29:f6:21:c5:15:80:b0:88:bc:c0:82:43:53:
         61:39:b3:0f:e6:43:f4:15:a3:29:87:bf:d4:c0:6a:a5:e5:5e:
         e8:92:46:9f:01:e1:3c:3c:68:50:d0:6c:8b:da:a9:73:b7:bb:
         f6:0b:7f:7b:f9:46:0f:f4:bd:48:29:8d:b7:e4:e3:95:51:ce:
         f1:ff:01:da:3a:f6:37:1b:0d:c8:55:5f:ac:54:b5:3c:22:d4:
         3b:36:49:3d:3a:8c:9d:a1:99:7b:74:13:9d:dd:e4:41:5d:83:
         7a:cb:74:41:bc:14:6c:1f:b7:90:6b:ad:b0:08:2a:b1:a7:6d:
         06:78:67:12:d1:bc:b0:a1:73:ac:c7:09:3b:cd:af:f0:5c:31:
         82:ca:17:f0:65:40:93:c5:c2:ff:4d:2e:ed:dd:a2:86:0e:cb:
         8e:e2:c4:3c:f5:57:da:04:cf:1c:64:f7:8d:98:ef:76:9f:6a:
         7e:52:2f:e3:2f:22:0a:67:01:6d:2f:bd:27:0a:38:50:46:4a:
         f2:fc:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org