Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d9306a5685ee992afbed177f10a4006db45ec73a.roa
File:                     d9306a5685ee992afbed177f10a4006db45ec73a.roa (raw, json)
Hash identifier:          1uKS8+7UDbu860mySWNoRq4uzrSvl0abzag3SWoM1TY=
Subject key identifier:   3A:C3:E8:54:B9:35:EA:3F:83:8F:FE:6E:CE:09:9A:D7:43:7A:EF:0D
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0DA670
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d9306a5685ee992afbed177f10a4006db45ec73a.roa
Signing time:             Fri 14 Jul 2023 14:22:05 +0000
ROA not before:           Thu 13 Jul 2023 14:22:05 +0000
ROA not after:            Mon 14 Jul 2025 14:22:05 +0000
asID:                     272094
IP address blocks:        181.233.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894576 (0xda670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Jul 13 14:22:05 2023 GMT
            Not After : Jul 14 14:22:05 2025 GMT
        Subject: CN=d9306a5685ee992afbed177f10a4006db45ec73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:1d:f6:4c:f5:90:66:0d:d0:40:0d:75:05:
                    ef:29:e1:f0:31:f9:b0:a8:ff:16:a3:7c:48:ea:e0:
                    12:98:36:48:e0:21:f6:08:51:85:c1:8f:a5:15:87:
                    eb:b9:ed:30:20:9a:da:e1:47:ae:07:35:92:1f:fe:
                    89:10:d9:75:4c:ac:07:68:96:be:06:b6:c2:ed:15:
                    f9:81:0e:34:ea:17:c6:bf:47:b9:e7:f0:0a:7f:df:
                    6b:e9:72:4b:d8:f0:a1:0b:92:dd:15:60:1b:4b:62:
                    a9:20:da:f7:5d:2d:3a:f0:3c:cf:44:02:82:9a:ca:
                    01:d2:b3:4a:39:a7:da:40:39:8f:4b:64:6f:f1:0b:
                    8b:da:37:cb:df:4f:33:ce:dd:4b:50:67:c9:1b:82:
                    2a:ed:dd:5f:df:fd:9d:f4:c9:9d:4e:c5:fc:8c:11:
                    a7:1c:f0:55:42:09:56:4d:0a:fe:e4:56:d9:56:a0:
                    19:17:f6:20:20:dd:37:4f:27:21:5c:f4:53:ab:e8:
                    39:b9:18:9f:ea:a7:5c:ff:65:01:ba:42:17:7c:31:
                    4e:6e:e2:6c:98:a4:66:cc:84:2b:b8:1f:51:63:2f:
                    02:29:41:5a:a6:4b:3b:ce:2f:2d:41:21:a0:62:f0:
                    44:bd:df:b8:85:ca:25:2e:90:ef:ff:62:42:42:3c:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:E8:54:B9:35:EA:3F:83:8F:FE:6E:CE:09:9A:D7:43:7A:EF:0D
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d9306a5685ee992afbed177f10a4006db45ec73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:11:7f:10:f4:d6:9f:a7:82:2c:cf:ab:8f:03:b5:a1:bb:1c:
         62:bf:63:e5:84:89:48:f3:07:42:36:d5:79:6d:1f:44:5a:6d:
         41:32:10:71:f5:2c:04:12:e5:d2:85:58:c9:60:f1:ca:24:96:
         05:a1:7a:b9:79:b9:40:32:2a:ad:bb:76:42:e9:75:91:5a:33:
         d6:d1:a3:47:5d:57:c0:fb:e5:16:2f:61:95:63:66:1f:f2:ed:
         c1:cb:c1:6b:1a:5b:5e:1f:34:71:93:5b:a3:b3:66:21:ed:c9:
         40:fe:ba:da:f2:78:81:64:4d:ed:ef:c8:29:37:4b:a1:6a:fc:
         8c:1c:e8:5b:5c:fa:3f:2e:b6:a7:b2:b3:e4:41:cd:12:ea:e9:
         f1:cf:65:86:bd:b5:bf:ad:d6:03:22:bd:be:26:d8:af:53:c5:
         a2:6f:ca:bc:5c:75:19:c0:17:8b:f4:37:4b:39:35:94:20:d6:
         da:da:49:3f:0c:0e:e4:99:90:c4:30:89:ef:cb:c8:df:a1:c1:
         5e:61:46:c4:5a:ac:b4:e2:5f:83:26:94:f5:ea:ad:61:ee:c7:
         fd:19:aa:4e:10:8c:dc:34:d5:09:74:06:55:a1:33:8a:08:0e:
         b8:af:c9:b0:b6:8d:82:47:58:b3:c6:9b:98:d9:0a:1f:5b:c4:
         23:d1:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org