Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa
File:                     e76cc6b4e6aca87341add612f40650a1885709de.roa (raw, json)
Hash identifier:          r564iFR2SiK+9c5HTZwBtqOsM1Gv2GpFkik7CaJ4jcU=
Subject key identifier:   8E:B5:AB:8F:4B:5B:28:AB:33:3C:67:95:63:D8:D2:F3:54:DE:73:2E
Certificate issuer:       /CN=c97b9ab772c8af17300b7ec2506f748594cd8cef
Certificate serial:       010515
Authority key identifier: 3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c97b9ab772c8af17300b7ec2506f748594cd8cef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa
Signing time:             Tue 02 Jan 2024 15:20:19 +0000
ROA not before:           Tue 02 Jan 2024 15:20:18 +0000
ROA not after:            Fri 02 Jan 2026 15:20:18 +0000
asID:                     265800
IP address blocks:        201.182.108.0/22 maxlen: 24
                          2803:b020::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66837 (0x10515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97b9ab772c8af17300b7ec2506f748594cd8cef
        Validity
            Not Before: Jan  2 15:20:18 2024 GMT
            Not After : Jan  2 15:20:18 2026 GMT
        Subject: CN=e76cc6b4e6aca87341add612f40650a1885709de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:24:1b:de:10:24:81:68:10:c2:a5:df:c7:
                    81:4f:b7:bd:14:24:32:7d:d0:a8:ee:7b:5a:9e:3b:
                    ce:79:14:eb:07:89:7f:95:af:d1:e9:de:61:cb:e2:
                    97:57:06:b8:cf:92:eb:fa:bb:5f:67:0c:a1:49:8d:
                    03:0e:12:c8:90:dc:9c:7b:e3:dc:bf:e3:b6:72:87:
                    76:b6:8c:18:56:30:69:e5:e7:a4:c8:6f:02:2f:3d:
                    29:f4:91:53:0d:40:f1:2d:03:d0:4f:71:0d:f2:20:
                    c3:a2:84:69:dc:3a:f9:0a:32:1e:a8:e2:74:66:3e:
                    4f:9c:7c:22:ca:6e:32:87:84:17:85:e3:10:2e:dd:
                    ff:c4:53:5d:97:ab:31:71:61:0a:a1:da:e8:8b:4b:
                    19:70:ab:d0:cc:cd:ac:6f:53:ef:8f:69:7e:95:82:
                    fe:6e:2a:67:29:9d:3d:a3:b4:84:1a:f8:a8:78:9a:
                    eb:dd:7a:9a:d0:48:52:41:6e:8f:93:20:a5:dc:2b:
                    19:a9:2e:27:16:41:40:7f:91:04:38:2c:22:a0:18:
                    f1:bb:cc:83:81:0c:c3:ca:cf:1f:09:75:f3:6d:dc:
                    e7:d8:a6:d5:1e:eb:43:20:3a:76:68:8d:b7:eb:50:
                    90:73:8d:d5:8a:b8:27:a0:79:c7:e2:68:9a:8b:f9:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:AB:8F:4B:5B:28:AB:33:3C:67:95:63:D8:D2:F3:54:DE:73:2E
            X509v3 Authority Key Identifier:
                keyid:3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c97b9ab772c8af17300b7ec2506f748594cd8cef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/c97b9ab772c8af17300b7ec2506f748594cd8cef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.108.0/22
                IPv6:
                  2803:b020::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:76:ca:8f:ca:1f:7c:e4:70:0d:10:9b:a3:bb:df:33:47:
         18:a8:52:b7:5e:9a:df:fe:c6:89:f6:60:51:89:e1:42:0b:d3:
         86:ad:08:35:96:14:5d:9f:e7:c6:7e:1d:31:9b:d8:35:5d:5d:
         0b:19:6a:05:e0:ec:79:80:57:b7:22:01:e8:be:eb:4c:0f:6f:
         9a:bf:ec:5b:4d:67:e0:78:e3:5e:ea:2e:37:d3:78:ea:de:52:
         a3:29:a5:76:4b:f9:a4:3d:27:3f:eb:e3:b5:9b:63:db:c0:77:
         5d:db:58:59:00:13:ac:41:c1:e4:c1:0a:1b:94:e5:84:48:7b:
         ad:1b:a8:28:73:05:03:7c:c6:b8:c2:94:37:93:b9:e5:09:fa:
         3f:93:ff:d4:8c:62:b9:ca:9f:de:90:6f:5d:02:17:65:5b:1e:
         4b:fc:93:6d:d1:f0:92:23:ab:75:b9:5d:8d:e0:1f:78:23:4a:
         89:fe:dd:43:30:b9:19:23:ab:92:e3:63:ce:71:4e:9c:16:2d:
         1b:19:96:ea:fd:20:15:ba:3e:21:89:23:56:db:43:cd:8e:89:
         7b:f6:9d:19:31:3e:ca:d1:75:f6:91:33:3f:91:8e:07:5f:89:
         68:96:94:c7:7c:6b:aa:03:cc:36:d2:d7:22:29:a0:e8:75:c7:
         7f:6f:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org