Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a47f1d2d590c0a876df09bfc3f15320e8d69dc4f.roa
File:                     a47f1d2d590c0a876df09bfc3f15320e8d69dc4f.roa (raw, json)
Hash identifier:          /dp0fhlv2do2LiU5mgUeFnn+zo0RUG+vt5TTkQ4owSo=
Subject key identifier:   06:61:31:62:99:24:99:6A:A3:0C:C7:C1:80:11:69:DE:00:AC:47:EC
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       11111F
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a47f1d2d590c0a876df09bfc3f15320e8d69dc4f.roa
Signing time:             Wed 12 Jul 2023 13:00:53 +0000
ROA not before:           Tue 11 Jul 2023 13:00:53 +0000
ROA not after:            Sat 12 Jul 2025 13:00:53 +0000
asID:                     262182
IP address blocks:        201.217.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118495 (0x11111f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Jul 11 13:00:53 2023 GMT
            Not After : Jul 12 13:00:53 2025 GMT
        Subject: CN=a47f1d2d590c0a876df09bfc3f15320e8d69dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:78:96:da:e2:02:ba:fb:1a:98:21:e0:45:
                    0e:60:53:7f:5b:fe:49:7e:a6:30:e4:f5:3e:ad:51:
                    17:96:6d:3d:7c:ca:82:ce:e8:6b:7a:b2:bf:92:57:
                    73:f0:4e:f5:8a:9e:12:fc:e2:d8:da:46:4c:9d:b1:
                    6b:c0:ef:f6:98:65:38:83:b8:07:b7:16:36:70:1c:
                    7d:83:f7:5a:b9:8a:21:dc:08:5a:f3:1d:9a:59:fe:
                    ae:6e:16:4f:ba:33:89:91:43:d5:5b:2c:e0:3f:3f:
                    6b:22:3f:48:45:81:93:28:fc:09:3d:bf:ff:cf:5d:
                    43:93:ae:15:60:4d:ec:26:b7:17:e8:e3:69:f6:d5:
                    13:dd:88:c5:ce:32:20:5c:cb:fc:40:54:90:52:4a:
                    f0:2f:b3:c3:36:be:20:4e:1c:87:90:e0:68:df:66:
                    03:05:cb:22:84:a7:14:b1:2b:fe:ad:c5:30:4a:94:
                    00:6f:d2:0c:b2:23:4c:3a:4c:ee:a6:25:8d:82:69:
                    72:47:34:75:8c:f8:47:c7:9f:01:3c:29:35:3a:89:
                    a7:15:fb:32:83:6c:84:b2:80:97:b3:4b:57:a7:41:
                    aa:38:74:48:cd:98:b8:80:d5:ab:08:a3:13:a1:b7:
                    00:d9:19:a9:fe:d8:f3:8a:be:c1:96:75:83:7e:39:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:31:62:99:24:99:6A:A3:0C:C7:C1:80:11:69:DE:00:AC:47:EC
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/a47f1d2d590c0a876df09bfc3f15320e8d69dc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:72:b7:2f:a8:94:83:dd:66:5a:73:71:ca:e8:e6:b5:9c:f5:
         70:e7:cd:0a:33:a1:0c:e3:47:85:50:fa:9e:9e:f6:70:46:85:
         a7:cb:bf:93:6e:1c:03:10:d3:44:d3:02:04:14:b6:f6:3e:e7:
         53:cf:fc:44:f5:5b:9c:e9:1a:8f:ad:37:10:6f:b5:17:2e:36:
         ab:a2:9c:d0:26:83:03:b2:62:87:eb:75:57:5c:39:15:b5:bf:
         3d:6c:88:7d:bc:d9:cf:75:6a:18:1a:75:11:f9:4a:7e:ed:a2:
         9f:62:73:35:09:41:56:90:e9:af:3c:c7:c4:eb:2f:aa:3a:98:
         5d:a9:0f:53:f0:f6:45:93:4e:0c:eb:b6:c3:9e:7d:64:fd:56:
         33:17:b5:d2:30:5f:24:48:a3:89:4b:32:2f:43:f9:f5:16:0d:
         f1:e1:3a:6c:ad:b6:3d:96:16:89:3d:7a:0d:23:d3:0c:ed:e1:
         4b:5f:1c:e1:5a:8a:ca:38:00:41:90:07:d0:79:ce:41:e1:75:
         08:92:38:0d:fa:cc:36:86:8f:05:c2:8b:ed:73:be:e9:f3:99:
         9d:78:fa:e9:fd:63:2e:10:2d:d5:bd:62:2e:a2:ad:4a:75:aa:
         06:27:44:5a:a2:91:a8:f6:27:91:a5:b0:24:ad:82:27:98:27:
         a9:60:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org