Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21af0b4cb67e4513d5259b974b9c78064d50fcb7.roa
File:                     21af0b4cb67e4513d5259b974b9c78064d50fcb7.roa (raw, json)
Hash identifier:          Cuen+g6XgwSZsggUYcGhwImKh+0aOmlSypIPIuGmGJ0=
Subject key identifier:   98:18:34:71:6C:3B:D7:65:E4:10:87:03:B2:F2:D4:AF:85:61:40:07
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2725C7
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21af0b4cb67e4513d5259b974b9c78064d50fcb7.roa
Signing time:             Mon 17 Apr 2023 13:00:33 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265737
IP address blocks:        181.13.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565575 (0x2725c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=21af0b4cb67e4513d5259b974b9c78064d50fcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:9d:75:fc:ad:83:f0:69:f9:79:97:ed:6c:
                    f7:79:aa:c7:26:8b:2a:df:bd:e5:7f:4f:3c:cc:0d:
                    d2:90:9d:3b:3c:c5:80:43:1f:53:e9:41:cf:58:bb:
                    35:81:42:42:d6:a0:a2:7f:82:e8:49:fa:89:cb:a2:
                    21:90:b3:77:69:05:b5:43:41:37:be:be:de:91:49:
                    63:9e:b6:64:3d:5b:47:02:d9:9c:8f:60:cc:92:dc:
                    09:d1:42:90:e2:6e:46:b9:29:67:d6:1c:d3:ff:c1:
                    f0:d3:23:ce:e8:ac:b9:6b:89:e6:5d:34:e0:bb:2f:
                    1c:96:56:dd:39:da:62:4d:d4:9e:72:37:1e:32:ff:
                    99:06:5a:36:eb:d5:a6:97:2a:5d:c7:cc:a5:8b:f5:
                    0d:bd:e5:34:01:40:87:a7:cd:dd:6e:38:13:c2:6d:
                    5f:8b:89:de:40:26:40:6f:d5:ad:24:fe:27:f7:4a:
                    2d:ab:29:a7:c9:44:01:2c:ac:18:56:bb:60:cf:eb:
                    6f:b2:47:22:7e:aa:6c:18:5b:2f:ea:eb:5c:dc:da:
                    5a:84:7b:54:e0:90:c5:38:7d:7b:79:30:1c:5e:ff:
                    2d:4b:36:69:d1:ba:aa:5c:07:ca:f1:07:3a:f3:3f:
                    1a:68:f0:ae:d0:67:88:7b:4e:12:2f:ba:d4:22:b0:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:34:71:6C:3B:D7:65:E4:10:87:03:B2:F2:D4:AF:85:61:40:07
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/21af0b4cb67e4513d5259b974b9c78064d50fcb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:75:53:af:51:a1:75:68:72:56:49:9b:ac:7d:fe:f8:10:88:
         23:08:6a:d2:7d:43:34:1e:7f:45:a1:98:63:02:e9:3b:6b:1e:
         07:08:3e:5c:46:73:cf:ab:8b:df:6c:8e:59:a2:00:a0:bb:cc:
         a7:54:2f:d2:d3:82:f0:5e:ce:9c:4a:d3:7b:b2:18:57:fe:88:
         90:ef:f7:0b:03:22:0e:5a:7a:1a:b7:6f:84:16:b2:2d:32:9e:
         ca:1c:91:b7:40:aa:9f:90:86:d9:a9:1d:b8:22:e4:8e:ef:55:
         2b:9b:15:b8:48:e8:31:46:b8:80:ac:e8:ea:8e:d0:45:ef:b3:
         af:f0:fc:f5:38:bc:3a:2a:6e:ed:2e:eb:4e:d6:74:41:6a:84:
         fc:9a:11:09:a0:24:80:42:a7:6c:9b:2e:47:e6:bc:c3:7d:1f:
         75:fc:41:06:83:95:8a:25:5b:02:a1:d1:c6:d8:5c:87:87:42:
         b6:1a:12:5b:65:20:23:9b:8b:33:fc:89:1b:b3:5d:3e:5a:c5:
         77:f3:3d:6e:22:7f:d4:f6:33:bd:dc:ce:98:e6:bc:ae:f1:fb:
         6a:25:c1:78:20:50:4c:7e:d7:d2:c2:a0:a8:21:f3:37:75:0d:
         6a:c3:b9:6f:47:bf:f6:23:99:ad:63:4b:e2:15:21:82:6c:f1:
         61:05:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org