Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa
File:                     0803d414127b744ff14a9c1ff30b58d04fe0994b.roa (raw, json)
Hash identifier:          t7xTwYWUhEihr+Vlh8Kl0rAj9QBSg0tIcXB3SK1uFC0=
Subject key identifier:   CE:36:52:CB:02:18:51:8E:3E:B4:9B:FB:E7:D0:CA:1F:14:D0:C7:D3
Certificate issuer:       /CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
Certificate serial:       0F79BA
Authority key identifier: AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa
Signing time:             Wed 21 Jun 2023 19:44:11 +0000
ROA not before:           Tue 20 Jun 2023 19:44:11 +0000
ROA not after:            Sat 21 Jun 2025 19:44:11 +0000
asID:                     52420
IP address blocks:        201.220.144.0/20 maxlen: 24
                          152.231.48.0/20 maxlen: 24
                          2803:a900::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014202 (0xf79ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
        Validity
            Not Before: Jun 20 19:44:11 2023 GMT
            Not After : Jun 21 19:44:11 2025 GMT
        Subject: CN=0803d414127b744ff14a9c1ff30b58d04fe0994b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:29:87:13:33:40:f8:68:3d:67:6e:14:39:
                    2d:dc:93:f6:e0:0f:96:f9:36:8b:1f:2f:fc:23:ca:
                    7a:7d:e9:8f:80:22:f8:7e:2e:74:1d:8d:b7:0e:52:
                    46:34:62:08:f1:7d:b9:6e:f9:ff:82:3c:8d:cd:11:
                    02:a7:a3:75:ae:4e:30:c6:98:fb:b8:ed:51:9a:94:
                    fd:1c:a8:d7:2c:c9:22:e7:aa:64:b9:49:7b:f6:5c:
                    3a:7b:30:fd:37:2c:26:06:f8:4f:e7:34:6d:4f:ac:
                    d1:a5:06:ec:c8:49:bf:cf:b8:04:e5:50:31:8c:27:
                    70:40:0f:bc:61:70:8b:5f:d7:27:56:b5:c7:5a:6b:
                    95:4d:38:83:df:28:de:77:f0:aa:fa:9c:76:7e:3f:
                    f6:cc:58:13:1c:55:09:d6:9a:37:95:ed:f1:91:25:
                    d5:9a:b9:03:37:6d:eb:d6:d1:37:82:f3:4e:cd:0e:
                    f7:f1:2e:ff:22:a0:31:9c:9b:7c:74:da:32:5f:fa:
                    8c:bb:ac:35:9a:13:8c:6f:ee:1f:83:43:59:21:55:
                    9d:13:e2:95:33:9a:ca:49:b6:69:44:60:e7:53:25:
                    18:68:e3:fc:4b:c8:be:93:ea:0c:fd:53:1f:46:ee:
                    a9:ff:ff:c9:4f:bb:75:9e:da:7d:a8:03:62:57:70:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:36:52:CB:02:18:51:8E:3E:B4:9B:FB:E7:D0:CA:1F:14:D0:C7:D3
            X509v3 Authority Key Identifier:
                keyid:AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/0803d414127b744ff14a9c1ff30b58d04fe0994b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.48.0/20
                  201.220.144.0/20
                IPv6:
                  2803:a900::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:43:2c:c9:59:57:b7:83:e4:a6:ce:fa:e7:06:9f:91:21:
         af:f6:c6:ce:0e:f6:2c:c6:9d:98:1e:61:5d:59:77:5a:c5:d2:
         da:96:68:d3:a9:b0:9b:c9:27:51:58:c3:42:32:54:81:03:4d:
         22:e0:25:f6:a9:ff:de:32:8a:53:fd:28:37:23:d5:dd:f6:33:
         4a:d8:ba:34:c2:2b:04:55:ed:1e:70:f8:c3:c9:84:a5:2d:b5:
         1c:21:4e:51:20:81:c8:40:a5:00:d7:50:bb:34:a6:ee:53:67:
         f3:12:ae:20:87:a1:0a:50:74:91:60:48:b8:20:17:1f:36:5e:
         0a:85:dc:64:a2:3c:ef:1c:54:12:12:7f:32:7e:12:7b:22:0a:
         61:6a:1b:95:46:e4:86:1c:ac:80:fd:36:a8:5f:e2:05:c3:8c:
         ec:dc:8b:54:82:60:e1:a4:dc:c4:e7:65:55:a2:91:4b:27:54:
         be:67:57:38:ba:e4:b5:fd:3c:f0:84:94:8b:23:6e:f4:21:ea:
         57:52:cf:d4:76:98:a0:68:bc:14:62:1b:71:86:1c:24:18:56:
         96:e0:51:f8:9d:84:5f:b3:aa:2b:2e:0d:db:64:50:e8:d6:f7:
         71:0c:73:a2:be:95:1f:34:62:b8:1c:b2:81:f1:f3:c1:56:6c:
         0c:5e:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org