Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/602b4ead5c19bbae6dd577336a7401ad37aa150e.roa
File:                     602b4ead5c19bbae6dd577336a7401ad37aa150e.roa (raw, json)
Hash identifier:          tswIOpzENzxIrseatCTaOnvUkbVGgiV7R07oDUHYaFw=
Subject key identifier:   BE:D6:F9:ED:16:3A:7F:8B:04:D0:6D:15:C9:65:D7:39:F9:E0:79:B6
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2EA6A7
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/602b4ead5c19bbae6dd577336a7401ad37aa150e.roa
Signing time:             Thu 07 Dec 2023 13:02:08 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     271984
IP address blocks:        181.13.217.0/24 maxlen: 24
                          186.108.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057319 (0x2ea6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=602b4ead5c19bbae6dd577336a7401ad37aa150e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:3e:82:a1:ab:fb:b4:de:05:37:9d:9d:d6:
                    0d:c8:a9:b6:f1:ba:c2:3b:c6:3c:dc:ae:7b:38:10:
                    f7:3f:c9:dd:89:01:2d:da:81:19:ae:02:cd:5f:dc:
                    d5:1a:e3:10:42:5b:ad:e9:ba:ff:73:6d:25:93:8a:
                    55:15:6c:1a:04:9f:73:cc:44:8e:2e:f1:02:5a:e8:
                    6b:2d:65:92:79:ea:5c:94:b5:26:df:28:70:ab:07:
                    bf:0e:97:2e:32:0a:3d:0e:5e:f1:b9:fa:33:e8:11:
                    1b:5d:87:d6:78:7a:0b:83:e8:ab:8b:07:8a:2f:1c:
                    6d:d5:9a:cf:d1:1a:79:3d:1e:1c:06:d8:3d:ad:2c:
                    1b:31:2d:c9:a6:5d:51:75:5f:d3:ef:5f:73:36:6b:
                    a3:cd:a2:e5:66:54:da:13:b8:fa:71:f7:f8:27:92:
                    48:d9:3d:6d:12:8d:65:12:85:13:56:49:89:bf:2e:
                    d8:26:9d:72:3b:47:95:e8:29:e2:cd:e7:c4:bb:c9:
                    8b:f3:d3:09:ae:74:91:98:e6:b4:bb:44:37:53:c8:
                    bf:e7:cf:74:34:1d:a4:a0:4c:0c:6c:08:47:94:9f:
                    ae:60:21:dd:20:52:cf:08:d9:00:de:28:7a:86:03:
                    e8:f9:5d:4c:ee:5b:19:40:f1:ce:90:6b:51:38:32:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:F9:ED:16:3A:7F:8B:04:D0:6D:15:C9:65:D7:39:F9:E0:79:B6
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/602b4ead5c19bbae6dd577336a7401ad37aa150e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.217.0/24
                  186.108.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:f5:c3:3f:b8:51:de:a7:12:f8:06:29:2c:06:f6:7a:33:
         59:43:2f:a8:26:8d:97:d5:4e:e1:ec:33:f8:30:f1:09:af:1a:
         b5:11:c5:43:e6:5b:fa:d1:ca:bb:45:4d:b3:0f:b2:98:e1:13:
         62:22:fd:68:ee:b5:fd:94:5a:8b:6f:fb:b5:8b:91:c2:65:e5:
         3b:e0:9b:d9:00:d8:c4:cd:6d:88:9b:9a:7c:da:84:a8:e9:19:
         2d:ba:f0:a7:2a:37:9a:d2:98:5a:1e:0f:2d:19:c6:7a:be:e2:
         14:d5:59:4e:4c:7a:72:9d:ec:f5:18:76:41:88:59:18:67:f0:
         3e:f6:e2:a9:4e:95:61:a1:62:d4:04:36:e3:94:d9:44:98:b9:
         86:b1:53:36:c0:ec:f2:c8:88:4e:67:25:ea:20:0e:eb:ae:3f:
         ce:91:b2:5b:1d:c4:04:18:c4:28:d8:b7:aa:a0:a6:5f:1c:cd:
         6f:f7:b3:c2:3f:59:bf:b2:fc:7a:e2:45:e7:e2:b5:ec:34:5e:
         3b:73:eb:31:02:81:4a:df:4a:01:04:37:7c:c0:b9:a4:be:31:
         8e:53:47:d1:c5:d0:c4:9a:e0:19:c4:56:fd:10:0f:34:d3:6d:
         bf:f9:6e:b6:8c:6b:f3:7b:d6:ab:e6:2d:e9:fa:b1:7d:95:de:
         1e:c7:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org