Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5c8b4ee8afd3f24183825405d7560b4de4f67f5e.roa
File:                     5c8b4ee8afd3f24183825405d7560b4de4f67f5e.roa (raw, json)
Hash identifier:          ttm9s/sIrzu86y9z/Mn98cWjHY4NuGzkkrKXtgJnBqw=
Subject key identifier:   AD:A6:84:FD:D0:8D:E8:1F:5E:C6:FC:A8:64:7C:48:2E:AE:4D:5D:2A
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2221BD
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5c8b4ee8afd3f24183825405d7560b4de4f67f5e.roa
Signing time:             Tue 25 Apr 2023 15:04:57 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     27812
IP address blocks:        201.218.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236861 (0x2221bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=5c8b4ee8afd3f24183825405d7560b4de4f67f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:64:ae:7e:ce:e2:2b:a5:bb:69:bc:6d:34:
                    cb:cc:84:c1:71:3f:67:b6:c7:9c:f7:ed:a1:7a:b7:
                    68:08:7b:51:d7:41:e0:e3:4f:2b:b4:16:7f:9e:f9:
                    17:f9:51:91:f6:4a:6f:d4:4f:e9:31:6a:70:bb:8d:
                    ce:56:ea:40:1c:1d:4e:df:cd:2f:d1:7a:c7:c2:d9:
                    be:0b:8d:82:e7:a0:08:99:3e:b4:b5:05:63:59:23:
                    af:0f:40:56:87:8d:4f:ca:47:b8:5f:b1:50:f5:f8:
                    30:1e:a6:6d:6d:a2:9e:1a:4c:9c:b6:c9:2e:3f:a6:
                    cd:45:ce:6a:8a:78:03:a4:23:e1:12:7a:6a:a4:92:
                    da:a0:21:51:ff:b2:17:42:d9:69:b1:46:0a:a9:df:
                    b3:fb:43:4f:71:87:ee:87:48:6b:cf:55:fb:34:4c:
                    4e:e4:e6:f3:56:c7:e8:68:96:dd:c5:1e:6b:0c:7d:
                    42:ed:10:04:1f:92:3f:3d:cc:4c:a4:f9:da:37:61:
                    26:3f:c1:7c:96:3d:60:1e:19:eb:5b:5c:04:0a:74:
                    e2:d4:ae:25:3c:04:d4:7e:59:9b:3e:5b:19:8e:0f:
                    91:76:c9:bf:d5:cf:8c:2b:69:ef:a5:c2:bf:e2:74:
                    2e:6e:c3:b8:41:38:81:b4:af:11:e4:6a:fc:e1:2b:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:84:FD:D0:8D:E8:1F:5E:C6:FC:A8:64:7C:48:2E:AE:4D:5D:2A
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/5c8b4ee8afd3f24183825405d7560b4de4f67f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:d5:16:af:8e:4b:d8:f7:30:b6:6b:d5:21:e8:50:bb:7d:
         47:7c:37:33:65:be:05:ec:3d:fb:04:2a:72:ef:37:41:26:53:
         cc:99:0c:df:fe:14:8c:df:ee:77:df:f5:60:bc:ef:48:7c:9e:
         03:0a:97:bb:8f:10:d7:af:71:ff:32:00:2c:a7:a3:ca:74:0a:
         8c:7e:9a:07:cb:21:f2:a2:67:50:17:62:e7:66:90:c7:95:f4:
         d9:d2:2b:2d:19:52:05:6c:f5:04:36:9c:67:16:33:20:82:42:
         75:a7:b2:4f:a7:ae:9e:c5:d9:98:49:52:ca:7d:0f:ec:5a:85:
         15:a5:30:f5:90:0a:26:ad:d6:d2:ee:ed:41:be:59:36:ba:57:
         df:74:01:a3:c8:50:e7:33:34:83:42:c4:01:72:23:26:00:91:
         b0:19:a8:5a:ec:6b:a9:11:ef:be:2b:c4:d4:c8:ef:00:5b:29:
         02:5d:49:3d:ad:18:33:f1:c3:3a:65:d7:eb:ae:4e:9a:ad:90:
         d1:a0:2c:a4:7d:95:a5:80:45:58:de:84:fd:3b:33:1d:f1:86:
         18:18:eb:ff:2d:1c:5e:8a:a5:75:c8:d9:b9:42:1f:8b:92:e6:
         fd:68:54:01:73:a6:4b:b5:ab:c3:35:95:23:fd:95:f5:cf:b3:
         ba:c1:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org