Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa
File:                     59867b9b9045fb9665db34d6fcc171201577de2c.roa (raw, json)
Hash identifier:          GTFOSFNWagB4QXJDTaMGHLtOsmWtsUyi4FEXc7hDec0=
Subject key identifier:   C4:D7:2A:B0:9B:9D:79:93:97:90:29:2C:4D:98:77:41:04:02:85:E3
Certificate issuer:       /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial:       04F5D8
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa
Signing time:             Fri 27 Oct 2023 00:53:08 +0000
ROA not before:           Fri 27 Oct 2023 00:53:08 +0000
ROA not after:            Mon 27 Oct 2025 00:53:08 +0000
asID:                     272970
IP address blocks:        201.158.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325080 (0x4f5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
        Validity
            Not Before: Oct 27 00:53:08 2023 GMT
            Not After : Oct 27 00:53:08 2025 GMT
        Subject: CN=59867b9b9045fb9665db34d6fcc171201577de2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:be:76:a0:58:ad:00:60:49:7c:5e:67:74:
                    95:ed:b2:ca:0e:8f:77:e5:be:00:75:5e:67:37:0a:
                    cd:98:f6:77:db:91:4e:f5:f2:a2:54:69:c8:05:9c:
                    24:ae:48:40:9f:d4:c8:21:de:0c:21:93:1f:78:c4:
                    a8:03:0d:0a:99:9e:4c:1a:f6:b3:66:c0:b7:5c:54:
                    d6:7f:37:ae:44:a1:54:f8:d8:2d:8f:0f:3a:58:2a:
                    80:37:91:0f:0b:db:eb:a0:eb:0f:15:e8:2d:76:40:
                    fe:8c:6f:07:10:52:cf:be:fc:80:3f:6c:1e:11:0a:
                    73:1f:83:da:84:6b:66:80:2f:da:a5:59:2d:16:46:
                    21:3d:14:3a:e6:c5:74:0d:05:da:09:d9:49:0f:56:
                    3e:9a:13:5c:41:6a:30:d2:8e:5b:20:2a:39:ea:0d:
                    09:f2:ab:0a:96:67:b8:27:b8:6e:90:25:ca:79:07:
                    11:80:a7:a2:18:10:6d:82:35:cc:08:44:2a:f7:63:
                    8e:a0:fd:f7:f6:48:a0:1c:be:1a:e4:71:e0:da:56:
                    1e:bf:be:c9:a7:5d:8b:bb:ac:a7:f8:9a:2e:86:5f:
                    99:f4:52:16:ba:07:dd:cf:15:1c:a6:c7:bd:2f:cd:
                    db:05:7f:85:f7:39:47:46:73:48:8b:67:18:61:2d:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D7:2A:B0:9B:9D:79:93:97:90:29:2C:4D:98:77:41:04:02:85:E3
            X509v3 Authority Key Identifier:
                keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:22:08:5d:11:1a:3f:7a:ea:88:2f:ab:a2:e5:5a:c3:a2:
         2b:12:7c:67:7b:5d:dd:d0:ae:7b:d1:01:19:a4:2c:10:49:57:
         dd:8c:73:6d:a8:50:82:ef:2f:f0:e2:b4:4f:14:6b:0d:06:6c:
         65:7d:99:82:19:12:b1:08:cb:8c:e3:66:de:6f:b3:e3:71:7d:
         7f:32:fd:d4:00:b9:84:e9:a6:bf:2b:c7:65:06:ef:f8:98:14:
         f4:f0:41:d1:af:24:b7:6e:8e:f4:3c:f7:1e:27:7d:9d:e6:78:
         af:7d:d4:67:24:2a:33:7f:13:55:7e:e5:80:9a:14:8b:57:6d:
         dc:56:fa:04:35:a5:cd:63:cf:38:00:19:94:9c:ee:41:93:8e:
         9f:18:fb:54:8a:c8:51:2a:ca:df:ed:06:27:87:89:60:3c:b5:
         73:27:fa:4e:ea:39:a5:24:ae:2c:8e:a8:e0:bd:4e:6a:11:98:
         b7:aa:0d:b6:ee:c3:6e:31:db:02:ad:71:04:10:99:b7:d2:76:
         19:f6:05:3d:fd:be:dc:0b:3e:0b:14:31:02:1d:83:34:f9:66:
         af:59:25:36:38:1d:42:b5:4a:0b:0d:2e:25:dd:34:75:da:59:
         87:9b:44:54:94:51:9d:09:69:f9:6e:51:9f:49:90:f1:02:11:
         56:f3:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org