Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa
File:                     8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa (raw, json)
Hash identifier:          nZpiuqeHBcD/fzrzjQ6xg7D6AwqYEFOvKHxN1pSUAdA=
Subject key identifier:   76:53:55:58:81:37:DD:C5:FC:87:5F:75:20:59:E0:94:D9:6F:F9:30
Certificate issuer:       /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial:       05888D
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa
Signing time:             Fri 23 Feb 2024 06:11:46 +0000
ROA not before:           Fri 23 Feb 2024 06:11:46 +0000
ROA not after:            Mon 23 Feb 2026 06:11:46 +0000
asID:                     13999
IP address blocks:        201.159.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362637 (0x5888d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
        Validity
            Not Before: Feb 23 06:11:46 2024 GMT
            Not After : Feb 23 06:11:46 2026 GMT
        Subject: CN=8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:6c:7c:9b:55:4e:13:cb:19:63:fb:fd:8b:
                    5b:10:40:9c:3c:d5:da:88:36:80:57:53:e3:e5:44:
                    06:ca:fd:77:c7:b3:ba:b1:4b:bf:b3:d3:86:42:ff:
                    a3:38:c3:d9:7e:a3:c7:66:ca:86:f8:93:30:09:7d:
                    7d:d5:45:a9:50:5f:25:09:fd:87:74:28:46:28:14:
                    69:0c:84:c3:69:46:23:53:8a:8c:4b:6f:2a:c4:87:
                    fa:88:bf:3e:ba:45:db:93:fc:fe:32:28:34:1d:b9:
                    97:6b:ee:7f:9f:fa:2b:ab:7f:2f:85:83:78:dc:aa:
                    5f:36:bb:17:9a:d0:f5:4e:b0:6f:80:7d:83:ae:22:
                    9c:64:66:bd:55:a7:a3:c9:43:cf:f2:11:6a:0f:e6:
                    30:c6:26:82:a3:0a:a6:81:f2:1d:06:c3:2d:37:15:
                    b1:38:de:9d:af:14:85:a0:bf:a9:dd:51:de:e5:cb:
                    70:95:40:55:40:37:06:21:17:73:01:2b:e1:ea:44:
                    c0:78:f6:b3:fa:2c:47:56:cf:62:87:fa:03:1f:47:
                    87:78:ae:5c:9c:54:77:97:57:6f:20:01:9e:6c:1b:
                    f8:c8:70:03:63:26:bc:ac:fc:f3:58:88:b8:03:ee:
                    d0:98:28:be:ef:8a:40:32:8e:52:03:f5:0e:10:a1:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:55:58:81:37:DD:C5:FC:87:5F:75:20:59:E0:94:D9:6F:F9:30
            X509v3 Authority Key Identifier:
                keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/8574c948a8f9d0cc7e66e6c82297fd5cfa33dcc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:a8:d6:09:6f:ca:41:90:11:70:af:b0:4e:1a:89:b7:46:
         33:0a:bf:da:3f:dd:17:18:3a:72:76:4e:ee:00:ed:3e:70:ed:
         0e:86:f9:28:29:fb:9f:01:46:39:9f:43:85:04:4a:73:b6:1b:
         1a:13:c7:8f:2f:1d:d4:84:9a:24:dd:ff:28:65:e0:41:8c:63:
         83:51:3c:0b:cd:0a:96:42:b3:71:6a:10:8f:a2:5c:74:33:a3:
         2f:6e:ad:5b:46:21:a9:18:29:8e:49:bb:44:eb:3c:4e:3a:32:
         66:7b:5c:3b:ca:a6:a5:2d:5d:b8:fa:bd:6c:3e:a9:8e:79:82:
         62:5b:0e:6f:c7:97:24:b4:fa:33:65:63:e9:ca:62:9a:1b:42:
         bb:7c:c3:3c:b3:6d:c6:b1:45:d4:b0:06:f1:01:99:46:e9:fa:
         3d:6c:04:f2:ac:52:e8:2d:4a:6b:b7:2d:1c:96:fe:0c:7a:cb:
         e0:72:42:1a:51:c1:e9:ef:02:24:b7:74:34:30:0c:a4:0e:95:
         5c:b8:e6:43:ba:e0:53:07:d6:7c:6b:e5:20:26:a5:61:08:9f:
         17:d1:84:45:07:2d:da:0b:fe:5f:d1:25:2e:f1:63:f3:ca:8b:
         94:d6:0a:7e:94:fa:22:3a:40:a9:4e:d3:9e:a1:98:a8:ff:f2:
         05:1b:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org