Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/f520277e73fe4175b74654e5b5665e6d2cae2fd5.roa
File:                     f520277e73fe4175b74654e5b5665e6d2cae2fd5.roa (raw, json)
Hash identifier:          YwtheNHWwR3EE78OEJhLPTkLBLkYuTOLCpvf36P+z8o=
Subject key identifier:   D3:2D:A0:EE:ED:33:91:24:A2:5C:78:48:9F:F8:93:3F:B5:99:93:08
Certificate issuer:       /CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Certificate serial:       14FEC2
Authority key identifier: 94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/f520277e73fe4175b74654e5b5665e6d2cae2fd5.roa
Signing time:             Thu 06 Jan 2022 15:58:46 +0000
ROA not before:           Thu 06 Jan 2022 03:00:00 +0000
ROA not after:            Sat 06 Jan 2024 03:00:00 +0000
asID:                     266667
IP address blocks:        181.224.172.0/24 maxlen: 24
                          181.224.173.0/24 maxlen: 24
                          181.224.174.0/24 maxlen: 24
                          181.224.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375938 (0x14fec2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
        Validity
            Not Before: Jan  6 03:00:00 2022 GMT
            Not After : Jan  6 03:00:00 2024 GMT
        Subject: CN=f520277e73fe4175b74654e5b5665e6d2cae2fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:98:17:72:48:ff:84:6b:4d:43:bb:a0:a5:
                    86:ba:ff:00:5b:1d:71:93:b5:b9:33:fe:ab:24:19:
                    b5:1a:af:5b:e2:ce:07:11:ec:3a:26:81:0f:8e:50:
                    a4:36:aa:d7:9f:62:b6:7a:96:03:c5:60:e3:4a:92:
                    ee:84:12:0f:8e:39:7b:a7:64:a5:a8:63:18:fd:a1:
                    49:f5:c4:73:ff:55:a0:b7:25:8c:33:39:ef:f4:43:
                    28:95:98:2e:22:2d:23:c3:df:2e:8b:90:ce:e8:7f:
                    2e:05:ea:81:88:c7:67:d7:36:f1:bb:62:68:99:f6:
                    e2:d5:16:ac:b3:95:01:ea:af:b6:8d:f6:4a:fc:05:
                    3f:ca:16:c8:d1:03:84:52:f0:b2:3d:fe:af:4c:34:
                    0d:94:38:7b:32:b5:3f:85:60:1c:9f:68:4f:de:e3:
                    5a:2a:2f:3a:dd:7a:68:31:e8:c6:40:00:a2:60:9e:
                    ca:34:f6:84:e5:01:d0:92:cd:44:91:94:c2:65:05:
                    4d:6b:1d:42:18:a3:a9:a4:62:0f:b6:9a:87:10:5a:
                    04:5e:dc:8d:71:42:8e:75:75:b0:01:19:61:b0:4b:
                    4f:84:ad:d8:44:d8:f8:f6:bb:71:b2:f4:2a:b1:61:
                    08:b1:a8:ee:71:36:c1:0c:da:4f:78:5c:eb:e7:2d:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2D:A0:EE:ED:33:91:24:A2:5C:78:48:9F:F8:93:3F:B5:99:93:08
            X509v3 Authority Key Identifier:
                keyid:94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/f520277e73fe4175b74654e5b5665e6d2cae2fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/9b0e0f420897114db2d68a02564c7a8a56c71d86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:62:de:af:4b:51:ce:15:a9:c9:fc:87:a1:97:33:44:3c:77:
         1a:5d:0d:98:96:1c:1e:b7:75:29:25:68:f1:c0:21:43:77:2d:
         61:4b:5c:f3:48:58:03:d9:4f:3b:57:cf:03:c9:96:d7:1b:ee:
         b3:88:f7:58:03:2b:e4:fe:14:3a:72:f0:16:38:df:77:d2:67:
         71:f5:0e:07:c2:b6:7b:c8:79:c9:c5:0e:29:25:b1:a3:7a:76:
         74:c5:ec:11:6c:d6:55:7e:e2:c0:34:a9:40:38:a8:e9:4b:fb:
         90:95:b5:a6:33:af:99:59:ed:e6:4d:da:95:18:d0:79:58:0e:
         c4:30:e4:48:e8:ff:3f:07:2b:be:c1:3e:5d:9e:2b:a8:36:d4:
         50:e4:df:fb:2b:1b:fa:5d:6e:84:99:a8:1b:b3:0d:a7:f8:e0:
         49:de:2c:2d:2c:b7:99:c8:b3:30:69:18:2c:2d:f4:bb:17:03:
         f2:c2:72:36:d1:5d:18:41:eb:fb:33:b0:80:34:d8:cc:55:09:
         7c:96:5b:b7:dd:d7:f2:99:3b:ed:94:e4:8c:cf:9c:50:ec:39:
         ed:34:00:60:a3:dc:2d:ff:39:6f:43:89:40:0c:1c:2a:7d:f0:
         85:d7:30:2f:c1:69:93:ca:48:25:bf:9b:9d:b2:e0:3e:88:aa:
         ea:d1:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org