Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/2d9167da8e05611b53d6cd14fb7537f4c50a6e2d.roa
File:                     2d9167da8e05611b53d6cd14fb7537f4c50a6e2d.roa (raw, json)
Hash identifier:          Fm8F9KR0vaUHCstAcDmRRFXYWe2zxpAiGkoyuGSdcDc=
Subject key identifier:   D3:A3:82:C0:D1:14:B0:4A:05:08:4C:A9:93:21:F3:15:C9:65:3D:30
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1CE9BD
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/2d9167da8e05611b53d6cd14fb7537f4c50a6e2d.roa
Signing time:             Tue 19 Sep 2023 17:53:11 +0000
ROA not before:           Mon 18 Sep 2023 17:53:10 +0000
ROA not after:            Fri 19 Sep 2025 17:53:10 +0000
asID:                     271888
IP address blocks:        177.74.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894845 (0x1ce9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Sep 18 17:53:10 2023 GMT
            Not After : Sep 19 17:53:10 2025 GMT
        Subject: CN=2d9167da8e05611b53d6cd14fb7537f4c50a6e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:83:bb:4c:73:0e:86:a9:21:28:10:e4:6b:
                    b5:d4:f4:e0:73:30:03:ce:01:c3:3d:83:6a:a5:e7:
                    84:e9:39:a6:eb:82:bf:d2:f4:67:2f:2c:82:af:79:
                    da:00:03:74:65:87:07:81:91:e2:a4:fb:fd:bc:aa:
                    77:5e:f5:84:27:0f:38:fd:f5:b8:5a:3d:c4:0a:7a:
                    81:a2:62:76:60:8b:f0:f3:18:0d:a9:da:92:f3:4d:
                    d0:e6:e2:9c:75:48:21:08:88:c4:9e:98:cc:c2:b9:
                    09:75:3e:8e:c8:94:7c:35:9c:64:14:a6:e6:6b:46:
                    4c:7c:35:62:fb:e3:c8:cc:e5:80:5f:63:f9:f2:e1:
                    b0:dd:91:9f:2a:38:31:18:2d:85:e3:8b:6f:5b:cb:
                    a1:a6:90:65:51:a6:15:ab:c3:53:eb:87:5f:2d:e6:
                    b6:7a:c9:44:bf:ce:21:ca:23:ae:5c:91:f3:db:f0:
                    f3:dd:a3:56:a9:e2:c1:39:e1:ca:ca:64:1d:35:ef:
                    ed:11:29:71:21:dd:c0:11:ba:ea:ce:44:80:72:04:
                    b5:af:3d:d6:e4:73:4d:c4:74:90:7b:ec:3d:ee:b9:
                    b6:c5:a9:a4:70:15:e0:71:79:72:5b:38:20:3d:cc:
                    5a:b9:66:ae:95:91:7b:07:8e:ae:19:53:78:51:e4:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:82:C0:D1:14:B0:4A:05:08:4C:A9:93:21:F3:15:C9:65:3D:30
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/2d9167da8e05611b53d6cd14fb7537f4c50a6e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:5e:e0:93:b1:9d:eb:ab:f0:85:a8:88:b5:e6:98:4b:42:
         f6:38:1f:53:fe:b1:7b:09:03:f9:66:82:8f:73:cd:4c:c4:ae:
         16:e0:40:c6:c1:aa:a9:97:e9:a9:11:fe:f6:a6:9f:a9:fb:96:
         a6:02:5b:5b:15:ed:9e:a2:3b:55:3b:82:eb:58:63:e5:ed:b9:
         07:70:af:d3:11:4c:d3:cf:6e:ca:60:f1:aa:77:69:87:e4:a6:
         9c:b0:51:9b:18:ec:92:0b:b8:57:48:f4:d0:e5:ea:17:67:8c:
         e0:9d:02:89:19:74:ec:7b:a3:ec:82:73:bb:9b:ee:1b:2d:b2:
         82:19:a0:1a:eb:a0:4a:54:45:c3:90:7f:db:86:1c:e6:89:f0:
         1a:32:9e:0b:43:76:2d:7c:f1:44:95:98:17:f5:e5:bf:4f:c3:
         86:c4:4a:ce:7a:0e:48:a1:cc:de:9e:7e:a0:57:ec:83:42:48:
         a8:a6:05:b3:f1:44:95:8f:83:dd:27:8a:28:a6:d5:ed:4f:9b:
         4e:14:8f:99:a8:0f:8d:6a:82:a8:00:8b:77:e3:a1:91:86:7d:
         db:64:25:9a:d7:38:cf:61:46:92:a9:8d:fd:24:94:4b:1b:53:
         aa:ae:d8:30:4c:6d:f4:be:75:c1:a8:58:1c:39:6f:da:84:d4:
         1d:14:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org