Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/a54e603ad8f4fdd8e810ae47e5f33f447b798b6b.roa
File:                     a54e603ad8f4fdd8e810ae47e5f33f447b798b6b.roa (raw, json)
Hash identifier:          HmLIHO5kGoJOrwHPKMlRm/IEQWPOEyTSVhtolJw8pFI=
Subject key identifier:   BD:A5:94:50:8E:8E:15:E9:81:EB:5F:5B:55:5A:02:5A:FF:B9:42:90
Certificate issuer:       /CN=78e2c111383dbf80c5a00c3579cb4888e73672bb
Certificate serial:       03E6
Authority key identifier: 86:B6:A4:7A:53:B1:DE:4B:99:5D:A9:3E:D5:B4:98:C8:47:C1:6C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78e2c111383dbf80c5a00c3579cb4888e73672bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/a54e603ad8f4fdd8e810ae47e5f33f447b798b6b.roa
Signing time:             Thu 01 Jul 2021 06:42:49 +0000
ROA not before:           Fri 01 Jan 2016 03:00:00 +0000
ROA not after:            Wed 01 Jan 2025 03:00:00 +0000
asID:                     263700
IP address blocks:        132.255.68.0/22 maxlen: 22
                          138.121.168.0/22 maxlen: 22
                          168.232.32.0/22 maxlen: 22
                          170.239.152.0/23 maxlen: 23
                          2803:db80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e2c111383dbf80c5a00c3579cb4888e73672bb
        Validity
            Not Before: Jan  1 03:00:00 2016 GMT
            Not After : Jan  1 03:00:00 2025 GMT
        Subject: CN=a54e603ad8f4fdd8e810ae47e5f33f447b798b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:7b:de:f5:75:88:bd:fa:57:55:97:73:f8:
                    18:c5:87:76:1b:98:21:c9:bc:b9:20:6d:2e:a1:2a:
                    04:8a:c6:83:22:48:13:69:e2:09:17:4c:69:0c:1a:
                    7f:9d:ac:0e:c5:a4:14:cc:cc:49:12:ab:10:5c:75:
                    96:05:8f:08:29:60:02:7f:b7:ce:7a:ec:7e:2d:2d:
                    92:66:22:a9:3b:8b:48:19:e2:d6:78:f2:05:80:4d:
                    3f:70:bc:19:c9:41:ad:9c:49:92:f2:a6:95:a6:0c:
                    08:44:3c:f0:f5:ca:08:69:8a:be:9d:5d:dc:8a:1a:
                    4e:8a:04:c9:34:b8:f1:72:40:cb:42:ca:9e:af:ad:
                    6e:52:f6:d7:5f:22:0c:92:91:9e:de:69:99:e7:c8:
                    19:a5:6c:3d:af:27:e9:ee:db:a1:e8:73:94:2c:e0:
                    10:6e:a4:70:ea:3b:bc:1e:45:2e:e9:4b:20:aa:3a:
                    2c:b6:42:aa:4f:15:ab:e5:5d:0b:46:14:af:34:51:
                    00:fc:3a:b5:ee:cd:de:31:17:2c:a8:e7:78:75:f4:
                    73:31:b6:01:d0:f7:58:08:fe:06:96:18:1d:da:13:
                    44:dd:4e:c9:de:bf:02:f1:2b:b9:d2:02:58:06:b8:
                    dd:8f:f3:d9:46:2e:9c:1b:2b:0d:e8:ce:cb:c6:91:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:94:50:8E:8E:15:E9:81:EB:5F:5B:55:5A:02:5A:FF:B9:42:90
            X509v3 Authority Key Identifier:
                keyid:86:B6:A4:7A:53:B1:DE:4B:99:5D:A9:3E:D5:B4:98:C8:47:C1:6C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78e2c111383dbf80c5a00c3579cb4888e73672bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/a54e603ad8f4fdd8e810ae47e5f33f447b798b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ceec008-f613-4035-aeee-2c2db47eb520/78e2c111383dbf80c5a00c3579cb4888e73672bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.68.0/22
                  138.121.168.0/22
                  168.232.32.0/22
                  170.239.152.0/23
                IPv6:
                  2803:db80::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:e0:7d:59:fe:3d:ec:b7:c5:19:9f:13:f8:78:f2:7a:c2:
         3f:94:d2:cc:98:85:9f:70:2d:3d:31:55:bd:71:c1:f0:e4:75:
         ce:d6:3f:8e:1a:0f:92:21:f4:fc:cc:50:04:37:5d:90:c0:c1:
         ce:55:e4:ca:68:8e:18:45:3f:65:54:7d:2f:94:1f:cf:49:d9:
         04:16:f8:bf:89:2e:79:b4:d0:5b:e4:02:67:fb:00:2f:11:6b:
         7b:c3:63:b8:df:2d:74:e6:53:c6:24:27:26:48:13:95:ca:37:
         2c:1e:bc:05:2d:08:85:d3:1e:69:45:2f:51:63:c7:74:13:a0:
         80:ca:1c:98:ab:0e:c8:9f:f3:b7:51:03:b8:65:97:ca:2b:f5:
         2c:bc:31:fb:5e:8e:be:68:94:cc:d6:c2:33:6e:08:2c:1e:34:
         20:42:bc:b8:8e:15:a7:71:26:37:46:70:ee:26:09:68:13:3f:
         85:f3:30:49:f8:80:7b:de:fb:12:cc:17:1d:50:81:3e:db:89:
         75:a7:ae:66:07:31:4c:2c:4b:64:4e:d8:3b:d9:16:a1:10:ae:
         ce:86:4a:9e:54:ff:8a:c9:15:d7:99:5f:42:3b:7b:b1:18:2c:
         c4:88:55:52:c5:15:e6:02:5f:f0:31:72:a7:d0:a6:61:17:57:
         f6:09:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 19:35:48 2023 by rpki-client on console-fra.rpki-client.org