Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/808c59e0f409db4cbb1d5d431473008c27c118f6.roa
File:                     808c59e0f409db4cbb1d5d431473008c27c118f6.roa (raw, json)
Hash identifier:          RobYmOmpzEfyXyWdL2qOUX2ZwjzHxY8y5PSi9/bZmu0=
Subject key identifier:   E7:87:42:AF:BD:D0:3F:22:04:76:C4:41:C6:0F:9C:CE:0B:66:43:61
Certificate issuer:       /CN=a9822324130ff130f6e927415dc987319696bc18
Certificate serial:       1DCE8D
Authority key identifier: D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/808c59e0f409db4cbb1d5d431473008c27c118f6.roa
Signing time:             Fri 09 Jun 2023 08:30:00 +0000
ROA not before:           Thu 08 Jun 2023 08:30:00 +0000
ROA not after:            Sat 07 Jun 2025 08:30:00 +0000
asID:                     60458
IP address blocks:        181.174.184.0/21 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953421 (0x1dce8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9822324130ff130f6e927415dc987319696bc18
        Validity
            Not Before: Jun  8 08:30:00 2023 GMT
            Not After : Jun  7 08:30:00 2025 GMT
        Subject: CN=808c59e0f409db4cbb1d5d431473008c27c118f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:40:bb:68:42:8b:85:1d:fd:92:5a:de:f4:
                    79:b1:f9:18:69:2d:17:bc:56:1b:0a:1c:f3:6c:50:
                    9f:b8:34:96:52:29:df:73:b0:a2:d9:74:d6:44:67:
                    95:78:cb:89:7f:97:3d:d1:49:8b:1c:1e:77:10:19:
                    8b:ab:cc:90:35:bb:77:a4:d5:f3:32:2c:71:7b:04:
                    46:41:c1:63:8d:2c:cc:7e:b2:13:52:21:6e:87:86:
                    19:7f:2b:f0:92:57:81:0c:55:55:1f:80:ed:9c:38:
                    0f:4d:dd:88:a4:ec:63:9c:b5:a0:51:12:ca:05:3b:
                    dd:47:54:be:51:ac:7c:67:3b:eb:12:d7:22:5d:69:
                    15:8c:9a:8f:a1:99:f9:ca:07:ae:f4:79:f5:21:4f:
                    f8:4c:69:df:cd:ba:e1:74:87:ea:01:60:b6:75:74:
                    32:c1:23:a1:71:32:71:75:08:57:b6:f8:c2:c6:be:
                    e3:39:98:bc:c0:dc:6b:3c:bb:f3:c0:ef:d4:b8:37:
                    2e:b5:95:eb:0c:b9:56:a9:b2:2c:74:97:02:39:9c:
                    bb:73:62:33:b5:d9:44:bc:eb:15:52:07:91:5a:c7:
                    f5:7b:c1:ee:76:ed:f0:15:1a:a8:f6:66:1e:aa:01:
                    97:12:57:e5:e9:48:43:7e:f8:9f:58:e9:5a:6d:7b:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:87:42:AF:BD:D0:3F:22:04:76:C4:41:C6:0F:9C:CE:0B:66:43:61
            X509v3 Authority Key Identifier:
                keyid:D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/808c59e0f409db4cbb1d5d431473008c27c118f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/a9822324130ff130f6e927415dc987319696bc18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:31:b7:cd:7d:31:c9:a5:5f:64:e7:1d:f5:5e:ec:13:ec:2e:
         68:e4:43:05:e6:fa:c9:b8:0a:dd:06:ac:74:43:f0:8c:0c:80:
         6b:47:96:a8:9c:70:39:61:9b:93:ff:ba:52:7a:7a:c4:f5:44:
         f9:29:c9:a9:34:d2:55:09:5b:b3:1b:a9:9b:f0:a2:b5:97:0d:
         7d:b2:f6:a7:5f:59:54:59:ed:48:e8:b7:24:8b:2e:fc:e6:e6:
         c8:30:ad:91:8a:90:61:7a:81:ec:e5:c9:26:b9:64:4e:29:02:
         fe:a3:b7:3e:11:c4:fa:e0:7e:83:89:df:af:7c:1b:46:2d:d0:
         6d:d6:fc:bf:83:17:44:eb:38:b0:3e:78:3e:1f:ba:ab:34:60:
         80:78:15:e9:c6:7c:16:13:e8:51:07:30:d3:5f:38:ff:8c:da:
         04:ad:b4:83:08:e7:52:6d:57:7f:de:c1:cc:80:a6:57:7a:7a:
         5e:2e:74:b4:1a:4e:05:6e:e3:46:61:3f:5c:b7:24:12:e4:78:
         e8:48:3d:a0:fd:c9:31:3a:6c:61:3b:83:eb:62:5c:97:24:b6:
         60:85:66:e8:3a:fc:51:69:b6:16:35:59:9f:20:79:ee:e3:ad:
         41:6a:ae:c3:8c:36:87:b1:0d:ca:a7:7f:b3:82:60:f3:65:d8:
         cf:30:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org