Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5a75e4eeb4a30a95e481270b33049d7762ac8816.roa
File:                     5a75e4eeb4a30a95e481270b33049d7762ac8816.roa (raw, json)
Hash identifier:          8S1qUaHVF52aEIDP3KcRytRmGoJGhbpvAGKsCOsrvzc=
Subject key identifier:   87:6E:F6:03:58:B6:68:A5:74:E8:E6:50:23:CF:7C:88:33:9D:A1:42
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0C2358
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5a75e4eeb4a30a95e481270b33049d7762ac8816.roa
Signing time:             Tue 16 May 2023 23:52:17 +0000
ROA not before:           Mon 15 May 2023 23:52:16 +0000
ROA not after:            Fri 16 May 2025 23:52:16 +0000
asID:                     23031
IP address blocks:        181.233.48.0/22 maxlen: 24
                          179.0.40.0/22 maxlen: 24
                          2803:c310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795480 (0xc2358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: May 15 23:52:16 2023 GMT
            Not After : May 16 23:52:16 2025 GMT
        Subject: CN=5a75e4eeb4a30a95e481270b33049d7762ac8816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:ff:45:15:82:1b:e7:33:39:66:ab:5a:06:
                    ff:81:61:a8:08:1f:fe:2f:d5:a1:24:f2:c5:96:e7:
                    0e:3c:5a:72:4b:6d:27:89:94:00:37:4d:84:2c:ae:
                    a0:d4:1f:75:9a:41:37:c2:82:44:3e:2d:e7:94:3c:
                    19:8e:e3:cc:59:58:70:d6:0f:c5:45:95:7a:ae:ea:
                    98:f8:31:5a:5e:70:c3:f1:8e:50:c0:b5:00:92:99:
                    9d:25:a7:10:51:af:02:06:1b:20:c8:c5:9c:bf:67:
                    1f:d9:bd:bf:f8:d7:cc:81:88:8e:61:0f:2d:9d:28:
                    f8:67:63:b6:5b:ec:ad:f2:c6:3a:09:56:bc:72:1c:
                    a0:fd:2f:27:a7:cb:32:6a:d8:43:71:22:35:08:28:
                    33:7a:a5:37:c7:82:26:98:f0:c7:6e:0e:37:a2:ea:
                    be:89:ff:12:5b:8d:0c:a8:fd:39:7c:5c:83:d5:15:
                    25:74:56:3d:5d:5e:3c:7c:33:27:ba:d4:09:f1:a8:
                    05:84:1c:77:fb:f0:b9:37:b6:96:da:6d:5f:21:f7:
                    3e:3c:99:d3:30:b8:7f:15:ee:42:be:f9:9b:6c:10:
                    7a:9b:b0:ac:15:08:10:b3:ea:db:40:76:27:02:bb:
                    d6:d1:2b:10:b2:ef:e8:f6:dc:3c:db:f1:2a:44:e3:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6E:F6:03:58:B6:68:A5:74:E8:E6:50:23:CF:7C:88:33:9D:A1:42
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5a75e4eeb4a30a95e481270b33049d7762ac8816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                  181.233.48.0/22
                IPv6:
                  2803:c310::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:1a:ca:b3:d0:97:90:64:18:e1:f0:e7:d6:38:7f:94:6d:
         31:48:ff:49:f6:81:a6:5b:d3:61:91:0e:d9:14:87:1a:04:ea:
         aa:40:27:0d:28:f9:d6:63:57:33:ca:3c:37:18:a4:d3:2b:b4:
         8f:26:db:a3:a2:32:e6:43:a3:3f:b3:63:2f:8c:dd:30:7f:e4:
         af:38:40:86:e7:15:66:44:2a:a2:3f:9f:57:ae:61:87:52:9f:
         58:1a:95:cd:c1:f3:bf:96:26:15:fd:2f:c5:9c:7b:ad:6e:cf:
         37:ef:ed:76:b8:d1:a2:c0:6f:13:a9:83:03:9a:28:c2:4d:5a:
         ef:bc:3f:52:91:97:ff:14:ed:41:a0:16:19:c9:a9:ad:a7:91:
         f8:11:c2:aa:dd:e7:8d:b3:0f:52:28:35:fc:9c:f9:6f:40:d5:
         e5:d8:28:b6:48:00:2e:ab:e0:65:e0:43:d0:44:98:b1:66:c4:
         eb:20:40:14:38:c2:4c:f1:51:f4:0c:3c:e2:e2:2d:78:92:84:
         04:7b:0a:a7:35:59:fe:8a:f3:dd:cb:d2:86:1a:8d:79:c1:05:
         61:cd:84:a0:18:5e:2d:45:25:e2:5d:f7:d0:6a:af:34:e9:59:
         28:2b:ce:03:22:c1:66:98:56:5d:c9:5c:79:2d:48:26:67:ee:
         6e:42:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org