Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/311565420d309d05a8fd49bb05b8bd1fb0c32e4a.roa
File:                     311565420d309d05a8fd49bb05b8bd1fb0c32e4a.roa (raw, json)
Hash identifier:          XTC9Zg9fZXURuqwSdJ4T+7LkuTAG/fMZkjCKHmsYLU8=
Subject key identifier:   88:FC:BC:43:74:06:3C:AD:81:E1:9C:B2:79:0E:93:8F:6F:33:52:92
Certificate issuer:       /CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
Certificate serial:       2450FA
Authority key identifier: 44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/311565420d309d05a8fd49bb05b8bd1fb0c32e4a.roa
Signing time:             Tue 17 Oct 2023 20:23:40 +0000
ROA not before:           Mon 16 Oct 2023 20:23:38 +0000
ROA not after:            Tue 17 Oct 2028 20:23:38 +0000
asID:                     265815
IP address blocks:        201.182.148.0/24 maxlen: 24
                          201.182.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380026 (0x2450fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
        Validity
            Not Before: Oct 16 20:23:38 2023 GMT
            Not After : Oct 17 20:23:38 2028 GMT
        Subject: CN=311565420d309d05a8fd49bb05b8bd1fb0c32e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:5d:15:7e:c5:05:3b:df:cc:0c:93:cc:d9:
                    fc:20:01:8b:2d:5c:f7:01:8f:65:ba:ae:09:35:5c:
                    75:dd:73:29:bb:a2:22:f8:5b:aa:b5:46:71:17:b0:
                    ba:c4:4a:d9:06:ea:30:1a:32:91:6f:dd:97:ba:f3:
                    d9:14:90:2d:65:4d:be:08:23:2f:cc:ac:46:a7:70:
                    20:2c:c2:a5:d9:52:e7:08:f5:cb:f7:1d:38:7b:af:
                    8a:26:c0:a7:cf:a4:50:00:73:44:fa:9d:cf:23:07:
                    2a:39:b7:93:c0:18:d1:e1:38:a5:50:bd:fd:45:4c:
                    96:43:a2:22:be:70:c7:7f:50:a7:24:3b:aa:52:e3:
                    90:35:2b:2f:b7:2e:28:94:9c:02:50:d2:d3:75:d7:
                    90:19:b7:53:80:7a:fe:d1:90:a6:cf:ba:32:67:92:
                    fc:85:5b:f4:2a:08:85:d5:1c:f6:09:b0:c2:95:a9:
                    6c:6d:c6:a7:8e:4f:be:b5:4d:53:31:91:73:58:3e:
                    2e:76:32:49:2b:52:c4:eb:0a:db:7c:e3:bd:2c:7c:
                    bc:3a:6e:0e:ac:12:07:8e:c8:28:5b:ca:11:70:4a:
                    29:45:7c:9f:a8:fd:5f:74:c6:ca:64:60:77:b2:d8:
                    32:49:38:4d:a4:01:2b:0e:10:8d:d3:a8:b3:1e:8f:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:BC:43:74:06:3C:AD:81:E1:9C:B2:79:0E:93:8F:6F:33:52:92
            X509v3 Authority Key Identifier:
                keyid:44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/311565420d309d05a8fd49bb05b8bd1fb0c32e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:4d:6a:ef:5e:f7:50:2c:e3:d4:d9:39:18:bc:ea:23:a3:
         46:6c:98:e1:d1:6d:cc:f2:d1:ba:f1:d9:60:cc:21:27:58:f7:
         10:62:56:20:86:8e:a4:bf:b9:0c:3d:f5:3c:58:b0:df:d0:26:
         06:22:2a:ca:8d:de:bc:a5:d1:34:a5:42:46:12:e4:45:35:87:
         6d:36:d6:34:c6:a0:5b:45:03:72:1e:2b:b4:09:53:04:a3:93:
         56:90:04:bf:27:ff:86:4b:44:9e:89:c7:40:55:69:5f:bc:29:
         e4:20:cc:98:c1:d5:38:48:60:e4:53:5b:68:ae:f3:2b:d1:70:
         8e:53:45:ea:fb:21:97:11:71:f0:4e:ad:ba:57:a9:18:44:3a:
         55:c7:52:1b:2e:31:04:bb:0a:fd:3e:54:3b:05:79:9d:1a:0c:
         f3:d2:7d:00:23:49:f8:57:16:94:cd:8d:a3:50:01:11:77:da:
         38:43:e0:25:b0:f6:80:aa:8a:2a:2d:a9:72:af:e0:05:0e:42:
         a9:48:20:54:57:35:ed:d0:e4:da:cc:b1:e9:23:e0:cb:2b:97:
         06:7b:85:20:54:34:1f:18:5e:6a:b2:cf:99:b3:54:33:97:bd:
         f7:6c:9c:75:7d:6c:55:0b:b8:f0:12:96:2e:b2:6c:e6:90:38:
         f0:d9:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org