Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/727245d66a63cd824934eceda9dc331c045331e8.roa
File:                     727245d66a63cd824934eceda9dc331c045331e8.roa (raw, json)
Hash identifier:          5vc8BdyF4SbxvSCLkPQDDF2U9ylA0k2KJF9J2uuw0uU=
Subject key identifier:   A2:13:5E:37:A5:E0:34:14:A7:F4:45:5A:3C:8E:9B:F7:0D:03:06:52
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DCE44
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/727245d66a63cd824934eceda9dc331c045331e8.roa
Signing time:             Thu 07 Dec 2023 12:42:35 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     265704
IP address blocks:        181.13.180.0/24 maxlen: 24
                          181.13.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001924 (0x2dce44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=727245d66a63cd824934eceda9dc331c045331e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:b6:03:ec:6e:3a:86:93:be:88:1c:7b:3e:
                    16:7b:52:b1:43:4d:b0:09:8f:ad:9d:75:6a:01:2a:
                    70:a8:5b:f3:0c:1d:fe:98:f5:06:0b:11:c7:bf:f4:
                    22:0b:40:d4:d0:ad:92:a3:72:a2:d1:95:25:f7:1f:
                    6e:22:69:79:32:b8:48:26:a9:f8:17:bb:0c:88:12:
                    06:27:8f:cd:67:ea:d5:41:1b:92:0c:42:2f:ed:3d:
                    29:d2:07:58:91:b4:fd:e8:aa:4c:bb:48:0a:af:6e:
                    17:47:6a:fe:d7:f9:b5:f6:4e:5a:9b:00:a2:e4:93:
                    c9:54:3b:af:1d:d2:cd:00:e9:f5:9f:a9:ff:8e:5f:
                    f9:a0:11:e1:9c:11:56:a4:07:a7:bf:3b:47:42:fc:
                    e5:8e:80:d4:bf:ce:38:9d:21:da:68:f6:9d:c7:0d:
                    b8:dc:32:8b:d9:33:85:ce:88:b9:ae:6d:0f:63:37:
                    0e:ff:29:96:3c:3c:39:60:dd:e8:be:62:e4:49:f5:
                    ad:4f:96:8f:df:96:b6:32:cf:5f:cf:c0:d3:e1:69:
                    1e:63:7c:cc:f5:62:4f:db:9c:3f:bb:0e:3d:92:6f:
                    d3:48:49:eb:d5:05:6f:48:33:72:f2:25:8b:44:de:
                    d8:7c:0c:b6:98:2c:a8:2f:9d:e5:ff:d1:03:cd:1d:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:5E:37:A5:E0:34:14:A7:F4:45:5A:3C:8E:9B:F7:0D:03:06:52
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/727245d66a63cd824934eceda9dc331c045331e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.180.0/24
                  181.13.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:57:c3:cb:f2:c7:46:89:f1:38:40:23:52:e3:26:24:17:
         4e:10:ff:7e:14:ec:ea:21:84:d5:94:9b:aa:53:35:7a:5b:62:
         2a:e6:fe:34:fd:b5:2d:63:15:a8:98:15:bb:24:f9:05:b8:50:
         e3:cc:1d:1e:26:b2:c4:12:0f:a6:7e:b7:7b:da:22:e4:d6:bb:
         fa:13:35:32:03:68:15:fc:47:33:0d:5a:0b:04:78:8a:eb:95:
         bf:e1:28:86:25:87:64:b0:c9:4b:4d:06:d9:e1:c8:5b:00:84:
         13:1d:cf:99:cc:24:fc:eb:81:57:ad:74:17:52:6c:2d:c9:e6:
         14:8e:2b:a3:24:78:30:65:0e:0b:5b:22:c5:fa:c8:d0:52:6f:
         2a:fc:72:31:dd:9f:af:a0:d4:64:e1:f1:e4:b3:d7:92:47:eb:
         60:76:a9:fb:75:2e:f5:37:1f:42:8d:c8:ca:ff:a1:29:22:a4:
         04:41:15:4f:c7:a4:f2:52:39:fb:4e:a3:e0:c1:3c:b0:79:c3:
         bb:43:2c:c8:ab:b6:d2:0d:aa:39:82:6a:7b:b1:cc:2b:db:e9:
         9b:65:b0:dd:e3:6c:66:45:0a:1b:48:8f:fc:5f:b8:f7:23:37:
         69:fe:12:c0:f2:3e:42:11:76:b9:5b:25:97:76:d5:95:b0:9d:
         97:14:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org