Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/30977fe22035df31add1ec790f3c17e2c19977b6.roa
File:                     30977fe22035df31add1ec790f3c17e2c19977b6.roa (raw, json)
Hash identifier:          CqwcXTxSF3JwgbVpQd2NGKUUAj4mtdgSxM+5P52EtiE=
Subject key identifier:   C7:E2:AE:42:78:1D:32:52:95:99:80:07:93:7B:9C:89:4C:9D:C9:EA
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27BDA1
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/30977fe22035df31add1ec790f3c17e2c19977b6.roa
Signing time:             Mon 17 Apr 2023 13:02:36 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265663
IP address blocks:        190.227.160.0/24 maxlen: 24
                          181.14.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604449 (0x27bda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=30977fe22035df31add1ec790f3c17e2c19977b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:18:15:9e:7a:d4:bf:89:02:a8:b7:d2:21:
                    3c:e9:57:57:6a:c2:90:96:69:23:20:13:7e:dc:22:
                    c3:42:34:36:7b:9f:4c:1f:05:2e:9a:b1:7c:00:86:
                    d1:e0:15:48:fd:76:a2:95:b5:85:ec:c9:ba:71:8c:
                    d0:4b:43:42:6b:e0:6b:2c:4f:1c:12:2d:40:c2:bd:
                    40:75:4a:b1:2f:0d:8b:1a:1c:5f:cc:9c:9a:23:02:
                    bd:32:bb:70:1c:f9:28:75:3a:ca:05:ef:6e:d0:45:
                    6a:f3:f5:58:35:60:78:0e:58:7f:6a:35:8d:d3:10:
                    ed:d9:ac:18:aa:85:80:a3:4a:cb:d2:7a:c2:32:bc:
                    48:1b:a6:d2:e3:a2:66:35:e5:96:83:c1:bc:f4:b3:
                    7f:4a:86:8a:c2:17:d6:b3:8a:f3:09:93:6d:5b:08:
                    0a:03:9f:e0:11:75:6b:87:ca:d5:94:12:68:c6:cf:
                    b6:2e:14:ad:74:78:57:bc:fb:15:63:27:a4:4e:34:
                    cb:0f:a7:e0:72:c1:83:8f:90:90:53:1c:f6:b2:5a:
                    c6:bb:33:6f:c6:a6:87:5f:40:c9:09:5e:57:6e:b4:
                    58:7f:4e:ef:e7:2f:f0:df:9e:ea:d8:27:54:6f:bb:
                    27:31:c1:1b:26:47:ee:64:0c:a0:33:7a:0c:5c:0d:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E2:AE:42:78:1D:32:52:95:99:80:07:93:7B:9C:89:4C:9D:C9:EA
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/30977fe22035df31add1ec790f3c17e2c19977b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:47:2a:d4:a9:b3:a1:3c:3a:9d:d0:5c:eb:c6:87:be:26:
         b2:00:18:72:2d:33:67:6e:4c:1b:a8:f1:c1:24:8a:95:94:d8:
         2d:de:fc:49:2b:22:5a:d3:d5:36:fb:49:00:77:e6:f3:5c:05:
         66:05:53:75:6a:81:57:9e:5a:19:71:ab:17:bc:01:e1:2c:f2:
         9e:70:ff:eb:b9:69:b2:7b:77:f0:f5:79:3a:b5:06:97:92:81:
         cf:ad:9b:38:02:69:04:3a:da:c5:e5:a7:4e:40:29:34:6c:4c:
         44:0c:b9:05:20:3c:57:f9:d5:10:9b:d1:96:54:a3:e2:10:17:
         df:43:58:79:00:15:30:12:b7:a6:66:a9:a5:0f:71:2e:54:c7:
         e6:21:ab:8e:33:ef:9f:e9:0d:6e:ea:ee:78:fc:19:67:10:5e:
         b5:80:b8:98:32:2c:93:d2:cd:cd:a2:61:bd:3c:a1:ce:a6:c9:
         67:ff:82:34:b1:2c:69:1b:d8:44:25:95:56:ee:f0:e5:ba:56:
         02:cd:b9:06:82:5e:cf:01:af:ed:23:60:43:9e:4a:21:7d:9f:
         eb:ca:6f:56:64:2f:71:53:f1:6e:e9:b6:a0:a7:f4:45:33:0d:
         75:cd:22:c5:98:f1:3a:7f:08:1d:57:b7:b2:57:9c:2a:c9:f0:
         51:49:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org