Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/98aac40a0ae0a136003325b7e830365dcdf1c4c6.roa
File:                     98aac40a0ae0a136003325b7e830365dcdf1c4c6.roa (raw, json)
Hash identifier:          dLHPbIoVURBi7l6Iui5Bdt8klaLMHSU/Zgao7xRZTvg=
Subject key identifier:   1F:66:DD:39:FB:F7:6F:69:58:08:80:47:5E:4B:9C:54:BB:1F:8F:BA
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0A3276
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/98aac40a0ae0a136003325b7e830365dcdf1c4c6.roa
Signing time:             Wed 08 Mar 2023 04:08:17 +0000
ROA not before:           Thu 20 Jan 2022 03:00:00 +0000
ROA not after:            Sun 21 Jan 2024 03:00:00 +0000
asID:                     23031
IP address blocks:        181.233.48.0/22 maxlen: 24
                          179.0.40.0/22 maxlen: 24
                          2803:c310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668278 (0xa3276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Jan 20 03:00:00 2022 GMT
            Not After : Jan 21 03:00:00 2024 GMT
        Subject: CN=98aac40a0ae0a136003325b7e830365dcdf1c4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:e2:71:92:2c:33:5c:bc:d1:3e:c1:75:fc:
                    67:3e:b9:5c:37:f5:c2:da:76:e8:71:3a:50:6a:52:
                    d4:2b:98:97:fe:99:58:26:2b:07:68:34:ff:35:81:
                    d6:91:b3:cd:03:8e:3f:14:d2:31:c0:83:23:a1:df:
                    7b:af:22:47:27:97:5f:69:c4:cc:f3:51:ca:65:fc:
                    06:66:67:b4:a1:53:00:72:5d:1e:98:5c:e6:02:5c:
                    1c:c6:cf:99:3a:67:3c:f4:c9:00:50:ab:12:03:5c:
                    0a:ec:fa:e8:59:d3:72:fc:03:34:cb:6a:bb:51:8a:
                    a3:53:78:29:02:17:74:bc:d0:6e:4e:7a:31:69:ae:
                    79:c3:52:f2:dd:b0:b8:43:1f:01:f3:25:15:dd:70:
                    53:37:a3:00:5c:6d:e8:12:77:c3:4c:6f:eb:4d:25:
                    28:7c:18:c8:03:ae:3f:6f:cc:c0:ff:8a:cc:b7:9a:
                    d8:95:bd:d7:4a:9c:01:e8:83:4e:33:1f:14:7e:c1:
                    1e:9f:be:b3:3d:d7:01:82:47:5d:82:64:73:9d:ae:
                    b7:05:6b:71:4e:df:27:b0:fc:63:45:f4:85:7d:84:
                    4a:89:fd:2d:9d:b3:22:f3:f8:aa:75:cf:61:20:78:
                    98:48:c6:45:0b:73:96:b3:4c:46:b2:8d:b8:84:00:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:DD:39:FB:F7:6F:69:58:08:80:47:5E:4B:9C:54:BB:1F:8F:BA
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/98aac40a0ae0a136003325b7e830365dcdf1c4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                  181.233.48.0/22
                IPv6:
                  2803:c310::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:87:48:36:e5:4b:41:e8:5e:8d:51:1e:23:73:9c:e1:27:e2:
         a3:ea:53:be:86:12:a5:9f:4c:e3:88:4c:ff:eb:b4:94:dc:49:
         e5:a0:bf:26:72:23:25:99:61:46:d9:73:47:4e:fe:1c:f9:67:
         d5:c6:bd:ab:42:d8:97:7b:13:ce:a9:0b:2b:fb:37:fc:c9:51:
         97:90:7e:f7:e1:ef:92:85:38:9f:48:9d:73:d0:ac:45:54:ab:
         dd:4d:f5:30:7b:89:f2:55:24:dc:71:94:39:d0:1d:de:17:e1:
         5e:f6:56:4a:cc:af:42:cf:50:35:57:27:0d:f7:42:20:4f:e4:
         b6:65:e4:e1:07:31:bf:ba:aa:e4:aa:b9:c6:ee:02:a7:43:74:
         79:10:76:ff:08:de:6c:45:65:1c:83:3e:76:7c:5e:7e:76:33:
         81:81:6f:0f:7a:24:e5:fd:26:74:dd:b4:22:62:e7:df:ea:3a:
         31:0b:e0:6b:34:92:dd:43:1f:bb:48:5e:28:cd:fc:26:e2:2f:
         a2:e9:1b:f3:e7:bf:df:59:0a:40:23:86:42:7e:aa:fa:e0:8d:
         1f:1a:b0:f3:5f:1a:35:e6:03:cb:29:6f:58:e8:89:42:56:f1:
         89:26:cd:a3:b8:9a:77:f6:dd:43:95:20:62:4f:bd:97:04:a4:
         78:4a:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org