Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3eae82ea44f8d8e96d00f751b0ce55d51355e1f0.roa
File:                     3eae82ea44f8d8e96d00f751b0ce55d51355e1f0.roa (raw, json)
Hash identifier:          GJzoAX8DR7tXcUNGdfyj7hWpiMEBRUD1hVKCzaVSl/4=
Subject key identifier:   4C:64:21:D8:BF:41:F2:70:B6:7B:C4:7E:68:AB:D1:23:89:0B:E6:D1
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27A1D7
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3eae82ea44f8d8e96d00f751b0ce55d51355e1f0.roa
Signing time:             Mon 17 Apr 2023 13:01:53 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     271984
IP address blocks:        181.13.217.0/24 maxlen: 24
                          186.108.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597335 (0x27a1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=3eae82ea44f8d8e96d00f751b0ce55d51355e1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dd:91:dd:9e:2f:28:7d:b1:64:d8:04:96:02:
                    c3:26:72:0f:03:4d:4c:af:09:9e:3b:88:8e:9c:6e:
                    a4:93:dd:87:23:e9:78:e0:81:4b:ed:1e:22:36:ac:
                    73:cf:ad:2a:d5:36:92:30:58:ec:5d:6f:d0:c3:6d:
                    a4:25:74:85:0b:d8:0a:3b:5f:b4:b3:c8:36:e0:a8:
                    55:b1:07:27:3d:27:e4:d9:40:85:77:58:ca:7d:cb:
                    1e:e1:21:0c:44:62:cd:f6:e2:14:58:36:68:15:c9:
                    48:07:14:0a:25:01:e1:0a:37:e2:5a:92:a8:7d:df:
                    aa:ab:c9:2c:b7:96:50:de:63:39:9e:46:ec:45:30:
                    5f:79:9e:04:ed:77:5a:e9:01:d6:ac:d4:48:10:1c:
                    72:d8:c0:9b:e4:01:3b:6e:f6:3b:91:31:01:04:f4:
                    bc:17:44:8c:cc:c8:2e:eb:d8:a1:8c:e2:f7:c7:e5:
                    51:97:5d:de:ad:30:a8:67:8d:7b:2e:cd:0e:e4:3a:
                    d8:22:ae:87:a7:68:6b:b8:cf:8d:a0:ec:8b:ce:7c:
                    74:7c:d9:64:83:2b:c4:8c:0a:ef:e9:8b:d0:92:cf:
                    ff:57:bb:ce:ec:b4:4f:50:3f:d7:73:05:7d:2a:19:
                    36:1e:0a:e7:d7:82:bc:58:74:53:97:cc:54:a2:02:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:21:D8:BF:41:F2:70:B6:7B:C4:7E:68:AB:D1:23:89:0B:E6:D1
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3eae82ea44f8d8e96d00f751b0ce55d51355e1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.217.0/24
                  186.108.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:30:3d:55:15:89:11:0d:8b:50:74:0e:0d:d0:af:53:96:
         1a:b4:47:d7:21:82:7e:5b:4a:71:22:12:d1:dc:f6:7b:3f:d3:
         44:21:00:cf:f9:bf:c9:aa:e6:06:69:44:c6:a9:2c:51:1b:43:
         f6:f7:4e:3c:8e:2a:54:fc:91:f6:d5:45:c1:5e:df:6e:e1:85:
         3f:16:50:bf:e8:d2:df:43:fa:c1:54:0e:21:57:0d:c4:bd:5e:
         cf:c5:54:0e:81:b2:f2:43:59:b5:52:c5:79:10:46:e8:c7:87:
         c5:32:2a:3e:52:29:b5:2c:de:7e:54:98:a4:57:94:ed:0c:a9:
         ed:41:51:90:c3:c2:c3:14:b0:f0:8e:0c:f2:b6:1a:07:06:98:
         cd:f4:44:75:49:55:3c:92:a3:8c:78:b9:4e:7d:91:92:80:6a:
         da:63:70:7c:99:0b:18:f3:de:5f:ab:ec:e4:9e:48:7b:08:9f:
         f7:c3:98:79:24:c4:16:89:be:07:65:4b:7a:12:00:e2:14:3e:
         9d:28:24:72:0d:c8:d8:e3:c3:77:d3:94:c1:ae:ef:06:31:f6:
         47:01:e3:b9:96:c7:b0:2e:0f:28:1d:38:6a:06:06:e5:f0:3a:
         a3:ff:7f:88:dc:3c:d7:f8:9f:fd:83:57:24:11:00:df:85:c0:
         d3:55:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org