Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27514244e7767ce1f9ed52411b05bc959986f0ba.roa
File:                     27514244e7767ce1f9ed52411b05bc959986f0ba.roa (raw, json)
Hash identifier:          dwXZmmN3qxwPy3W4dwPqrMsZZLgdr1urUCmHQs9Noh4=
Subject key identifier:   D2:72:9E:F0:56:A1:25:45:EA:87:CD:C3:27:31:3B:80:55:FF:78:9E
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2D80C4
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27514244e7767ce1f9ed52411b05bc959986f0ba.roa
Signing time:             Thu 07 Dec 2023 12:42:04 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     265737
IP address blocks:        181.13.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982084 (0x2d80c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=27514244e7767ce1f9ed52411b05bc959986f0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:81:05:b2:da:69:e6:a3:34:94:7f:f7:21:
                    34:ba:41:19:a7:91:05:44:24:e0:e3:45:75:36:9b:
                    76:40:d9:b8:af:d0:1c:7c:7c:fb:b6:e6:91:c4:28:
                    6a:f6:95:9c:57:e4:93:6c:ae:5b:3a:4e:ab:3f:f3:
                    d7:6d:f5:a1:1c:a4:9f:8f:9e:68:90:8c:77:76:f6:
                    22:13:70:62:1e:50:cc:76:d2:94:7d:ca:c5:65:0c:
                    8a:4c:7e:21:f1:3d:08:d1:35:fb:dd:69:f9:d5:03:
                    32:45:df:1d:91:11:15:4c:27:be:20:ba:00:f4:39:
                    f3:ba:38:8a:75:4c:2e:a7:57:36:f7:ac:b3:5b:42:
                    7e:fd:d7:7a:62:7b:5d:b5:84:15:4a:81:f4:6f:58:
                    3a:05:17:f2:ab:c3:33:57:50:34:7c:70:0f:e8:6d:
                    57:97:c2:21:f2:93:b3:b3:0a:f1:b9:f8:b8:5f:18:
                    82:40:bc:8a:dd:0c:81:9e:ec:94:cf:bb:60:cd:fe:
                    47:eb:0c:f5:ee:9a:a2:08:89:be:90:c2:59:f3:0b:
                    d6:13:ba:36:a0:e9:61:b1:2c:48:56:2a:73:7f:ea:
                    31:64:27:9b:eb:10:dc:e2:cc:4d:ca:44:9e:0b:97:
                    bd:18:da:3b:27:13:12:56:d9:88:1f:ee:da:51:39:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:72:9E:F0:56:A1:25:45:EA:87:CD:C3:27:31:3B:80:55:FF:78:9E
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/27514244e7767ce1f9ed52411b05bc959986f0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:4d:b9:7f:5d:fd:98:f0:33:d2:2d:a2:f9:9a:29:78:3d:b0:
         37:4c:8b:12:0c:fd:a8:da:f8:03:19:5b:9a:ac:22:38:9a:4b:
         a9:82:40:62:ae:ea:06:23:a5:68:14:6a:87:6a:17:71:59:0a:
         c3:0f:0d:81:a6:2d:05:34:78:89:71:f4:6b:e6:79:c2:53:83:
         72:30:7a:85:14:c8:92:e7:2e:f5:e3:bf:f4:54:45:26:e6:75:
         3d:20:f6:1f:7b:c5:9f:29:bb:30:12:15:7f:b8:37:6f:94:4e:
         42:f4:12:ec:e5:22:c9:ff:2b:da:a9:25:0d:58:5f:8e:c4:9a:
         b8:bc:cb:0a:c7:20:a5:87:ca:b0:56:ba:74:90:a7:ef:99:dd:
         c4:ce:17:53:3e:cb:59:c7:19:f2:97:4d:52:2d:40:a6:5f:e9:
         db:e5:f7:79:6d:db:86:b8:67:1f:b8:90:6f:b6:66:24:ff:77:
         59:bb:4e:24:50:63:7a:f1:d3:f2:c6:73:0c:40:5a:d4:dd:21:
         e7:46:d5:1c:c0:7d:92:37:33:4e:99:a1:d1:87:a7:74:91:c0:
         48:e3:a1:f8:b9:d3:69:c2:01:c3:5b:19:25:f4:48:dc:3e:69:
         ad:c5:c2:88:f6:aa:7f:74:b1:ef:47:e2:cb:5a:10:81:59:20:
         39:1b:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org