Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/dd4848ebac65f29a31915fe88d480a864557b037.roa
File:                     dd4848ebac65f29a31915fe88d480a864557b037.roa (raw, json)
Hash identifier:          t6ZtLSJ+Pt5Kq237eS1oX0erIrIdlKZaO30fsNARIYs=
Subject key identifier:   6A:47:6C:A5:05:2E:09:30:DA:B3:3C:76:56:68:B2:B6:92:E7:9C:E7
Certificate issuer:       /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial:       06DA1F
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/dd4848ebac65f29a31915fe88d480a864557b037.roa
Signing time:             Fri 12 Jan 2024 16:14:14 +0000
ROA not before:           Fri 12 Jan 2024 16:14:14 +0000
ROA not after:            Mon 12 Jan 2026 16:14:14 +0000
asID:                     28398
IP address blocks:        201.158.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449055 (0x6da1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
        Validity
            Not Before: Jan 12 16:14:14 2024 GMT
            Not After : Jan 12 16:14:14 2026 GMT
        Subject: CN=dd4848ebac65f29a31915fe88d480a864557b037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:02:9a:a2:90:cb:39:72:a3:47:dd:65:b3:
                    93:15:eb:5a:25:5b:b5:96:36:27:58:59:60:d5:dc:
                    9b:4f:eb:ce:a5:28:b7:8d:75:e2:e2:1b:90:83:b0:
                    67:3a:0d:f1:40:53:08:71:8a:d4:e3:fe:bd:cb:1c:
                    8f:38:b5:56:8d:d0:20:09:37:89:5f:70:bd:98:70:
                    03:61:a4:b1:3d:4a:2a:76:58:e2:b4:c7:2a:06:58:
                    a5:aa:d2:d3:f8:df:5e:a4:1a:4b:87:2c:35:f3:60:
                    8a:f0:03:cb:9c:64:37:c2:05:83:ca:44:af:ea:8f:
                    29:60:55:11:4a:65:61:39:13:a8:21:cd:fd:b3:de:
                    83:24:74:d0:f9:9e:63:40:c1:6f:c2:b6:c1:cd:03:
                    73:9d:40:9d:e9:a3:6f:7d:3a:36:f6:c8:d0:2b:e5:
                    a4:72:2f:e3:3c:40:88:2f:6b:7d:98:96:81:0f:86:
                    63:86:08:44:2d:c7:36:20:b6:fa:79:3a:75:58:2a:
                    cf:38:82:e9:36:11:b7:84:b0:28:7f:ef:68:42:e9:
                    f7:53:dc:2a:ec:59:48:5b:6b:07:9c:b6:07:87:37:
                    6e:78:df:d6:81:9c:cd:c8:c1:13:53:bc:03:af:02:
                    74:63:bd:8f:b6:05:4d:fc:b0:a4:9d:4f:e3:2f:93:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:47:6C:A5:05:2E:09:30:DA:B3:3C:76:56:68:B2:B6:92:E7:9C:E7
            X509v3 Authority Key Identifier:
                keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/dd4848ebac65f29a31915fe88d480a864557b037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:b6:fc:7f:34:0e:5a:55:1d:e7:5b:31:9b:72:e6:9c:fa:
         20:b1:b0:ac:8f:58:fe:8e:0f:12:e8:6e:e9:45:c6:c1:ec:c5:
         7c:e1:b4:8b:2b:9b:f0:31:f7:dd:cc:17:88:e0:20:92:72:6e:
         46:18:76:36:09:c6:6b:b6:79:bc:f2:fb:63:b9:e8:88:42:e3:
         3e:9f:d0:b9:81:02:06:0e:c7:6d:ad:0a:79:f2:c0:59:af:cd:
         28:81:cf:7f:fe:96:30:e1:9a:13:2b:5b:4d:70:f5:ef:f0:3f:
         94:a2:6a:d1:f6:ab:5a:c7:4c:8e:34:4d:c2:5a:45:28:33:6b:
         df:06:10:19:cb:e2:e0:f1:ee:09:4c:3e:50:d5:81:41:5e:81:
         56:31:01:a0:50:af:fe:18:81:24:50:da:2c:64:3e:05:60:f9:
         95:8c:10:8d:d8:f5:ed:d6:73:89:c8:c0:e1:cb:e8:4a:f3:54:
         ce:da:8a:76:69:4b:37:dc:c6:19:30:df:9f:66:b3:f2:05:69:
         36:dc:13:c9:1a:23:83:da:9d:3b:70:49:d9:a8:78:43:d8:ad:
         51:df:fc:8d:70:95:9e:11:16:8a:6d:29:c5:bf:5d:a8:45:99:
         00:5d:6f:0c:78:98:eb:2b:aa:3d:66:ee:6c:1d:3b:90:6d:21:
         bc:88:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org