Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa
File:                     acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa (raw, json)
Hash identifier:          PXszrvz+T3ea95D/8+CsWSxq3mgLBzVl9BDz+518LhM=
Subject key identifier:   8E:A7:D8:5C:2C:52:BB:5F:7F:1E:2B:DB:EB:4D:D0:27:10:DF:A6:57
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1DE18F
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa
Signing time:             Sun 30 Apr 2023 01:18:38 +0000
ROA not before:           Sat 29 Apr 2023 01:18:36 +0000
ROA not after:            Wed 30 Apr 2025 01:18:36 +0000
asID:                     27951
IP address blocks:        201.131.88.0/23 maxlen: 24
                          45.189.235.0/24 maxlen: 24
                          2803:84e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958287 (0x1de18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: Apr 29 01:18:36 2023 GMT
            Not After : Apr 30 01:18:36 2025 GMT
        Subject: CN=acdc9f464b2b0babeb87c0913c4502e57d874ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:85:e7:5a:fc:52:a8:c5:04:16:e6:2b:1c:
                    e6:23:e5:b2:db:8b:7f:7a:27:b6:31:d5:fc:97:e6:
                    06:64:a4:ad:6a:e4:e4:77:66:01:8e:fe:8e:c3:66:
                    0d:28:11:2e:bd:28:8a:31:97:bd:85:91:05:1b:77:
                    02:1c:93:b3:14:8b:30:40:79:ba:f4:6f:76:fe:80:
                    94:46:d6:80:ce:e0:39:5f:25:f0:d1:64:7a:cd:46:
                    44:96:23:f0:04:d8:3d:d3:99:e9:88:d7:07:d0:b2:
                    ba:14:90:3b:f6:95:3c:44:fe:85:6e:6d:69:e6:a8:
                    eb:63:aa:ea:a2:1f:5f:dd:9a:62:37:df:d9:c2:b6:
                    8d:40:ae:8a:24:ce:8f:1d:e3:ea:e8:0b:1b:9c:0b:
                    34:36:b1:91:f6:fa:53:21:c6:dc:51:80:82:a5:3d:
                    67:8e:99:7b:92:4b:9a:8f:2d:75:e0:1f:34:1e:9b:
                    41:82:aa:50:1d:48:09:41:04:56:69:6a:25:ea:02:
                    df:7f:e5:b0:47:d8:fb:1a:65:fd:0e:f5:ff:92:82:
                    1c:0d:e7:3a:3d:12:20:22:53:43:5e:58:95:a9:2c:
                    a5:fa:e8:0e:bb:b6:69:59:7d:d0:6e:31:de:be:27:
                    0d:9a:89:e5:73:13:3c:17:07:3f:ff:bd:36:e8:dd:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A7:D8:5C:2C:52:BB:5F:7F:1E:2B:DB:EB:4D:D0:27:10:DF:A6:57
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/acdc9f464b2b0babeb87c0913c4502e57d874ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.235.0/24
                  201.131.88.0/23
                IPv6:
                  2803:84e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:a6:78:32:e0:0e:2e:f2:90:a3:76:77:c6:b6:ed:07:f8:
         16:ff:f0:1f:08:93:d6:0a:6f:0f:e1:be:b1:03:c4:cc:b5:84:
         60:0b:1d:2d:4f:da:51:ef:23:88:a1:20:0c:78:19:aa:00:6f:
         2a:32:97:ad:c1:f6:96:98:00:dd:7d:8e:15:84:1d:67:88:41:
         18:1c:fe:9c:b5:56:cf:11:42:2c:70:06:b9:b4:2d:93:7e:96:
         9a:06:c1:3c:06:25:fe:33:ce:ea:da:70:70:53:ab:ce:99:b7:
         69:ae:b1:d3:07:b9:47:cb:4e:55:e2:6c:24:7c:9e:d9:0a:12:
         7f:47:e7:0e:13:e2:4b:70:53:3b:ec:85:c8:a4:02:08:ba:dd:
         27:d7:4b:89:36:3d:0f:e4:ba:13:e9:f1:8c:e9:2b:c9:7b:61:
         89:89:b4:e9:77:dc:11:c3:a8:d5:fe:18:1b:76:4c:d6:6b:97:
         98:d1:fb:5c:9e:d7:c7:6a:07:46:95:8c:ae:6b:26:1e:5e:bb:
         6b:fa:c9:5b:2b:da:a3:ce:ad:05:fe:85:2a:67:45:7f:f3:08:
         bf:7b:ff:0a:ed:74:67:6a:1e:9f:93:f1:e9:a9:4b:fb:98:18:
         b1:64:45:19:9a:c6:ba:fa:df:da:fd:d5:5e:0e:a6:d2:c4:31:
         07:7d:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org