Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7655b94977cfba5ca8f8c5a17a836e38e4e42bc8.roa
File:                     7655b94977cfba5ca8f8c5a17a836e38e4e42bc8.roa (raw, json)
Hash identifier:          6B9wcfozjVI5Na99VOKB9V0fbsKkmLh2nlhxvXHJmHs=
Subject key identifier:   C5:6E:B3:E9:DC:64:43:67:55:BE:B4:22:4E:C6:68:D0:6D:64:E6:18
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2739D2
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7655b94977cfba5ca8f8c5a17a836e38e4e42bc8.roa
Signing time:             Mon 17 Apr 2023 13:00:41 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     52371
IP address blocks:        201.252.229.0/24 maxlen: 24
                          190.226.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570706 (0x2739d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=7655b94977cfba5ca8f8c5a17a836e38e4e42bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:f5:70:8f:b0:04:00:e1:e3:86:92:24:e5:
                    e6:51:ad:e4:7f:95:1a:d5:13:28:12:9e:ab:5d:a6:
                    ea:2b:54:c4:84:85:30:01:38:99:46:c6:e0:f0:8c:
                    b0:a9:26:90:8a:63:9b:c5:f2:a2:6c:1b:83:b3:af:
                    88:87:7f:18:02:ca:d0:ef:37:f6:34:50:41:50:74:
                    80:bf:d6:6a:4f:36:ae:0f:3e:ad:14:20:08:d8:69:
                    d9:62:15:f0:35:6b:8e:05:3b:10:0d:e7:27:64:c7:
                    9f:45:53:fe:79:9b:2d:c2:78:d5:eb:33:a7:05:a5:
                    5c:75:31:43:1d:ca:d0:4f:14:5e:01:d9:fe:9f:89:
                    ab:25:85:ff:04:7b:4c:30:1a:b3:c6:aa:af:98:38:
                    a2:fe:06:d5:a6:32:24:2d:a6:a9:48:e8:16:53:78:
                    6f:18:f7:b8:ec:f3:07:96:1f:a5:16:3e:eb:db:c1:
                    b4:69:49:9b:c6:3d:91:75:95:e6:a8:1c:c4:9f:53:
                    e6:2c:a4:ca:e2:79:4e:26:c3:09:9a:9b:16:12:73:
                    b9:84:34:52:81:3f:2d:f6:e7:1c:ec:fd:87:39:e7:
                    8c:f2:b0:5f:28:9a:2c:7b:07:da:91:f6:8d:5d:ab:
                    5f:33:2f:c9:71:51:f9:96:21:7f:bf:fc:b1:c2:d1:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:B3:E9:DC:64:43:67:55:BE:B4:22:4E:C6:68:D0:6D:64:E6:18
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7655b94977cfba5ca8f8c5a17a836e38e4e42bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.32.0/24
                  201.252.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:97:57:a5:33:1f:01:b6:4a:1c:eb:4b:58:22:c9:6c:4b:
         ba:36:88:e5:97:18:cd:b9:40:79:d7:74:8b:13:18:d9:f4:7d:
         ab:01:ec:1f:ce:de:56:fd:de:56:54:5d:58:4e:89:33:e8:6e:
         5a:2d:e3:5b:67:c1:0b:15:5a:d4:be:02:41:c5:8a:02:11:97:
         02:f9:2c:71:ec:b0:e5:77:fd:96:8b:98:d7:74:37:ce:cb:2b:
         af:4b:29:58:4f:0e:79:6a:20:20:ae:67:a0:45:e4:12:34:9e:
         2b:ea:2b:06:b6:05:de:a8:3d:b2:2b:6e:8d:6e:9d:93:1b:81:
         5a:08:69:e8:22:77:d6:8d:3b:78:8a:2e:8d:17:5b:63:d2:bc:
         9f:97:c2:6e:ce:10:fc:b6:1a:20:cd:aa:18:58:62:6f:74:e8:
         9b:23:80:6d:97:27:29:d9:d9:4a:1e:31:35:4a:8e:99:cd:f9:
         e0:e1:85:42:a0:fc:cd:d0:1e:62:6d:02:fb:52:4a:a0:f9:2c:
         a9:e1:e9:30:e6:3b:27:2a:06:6e:51:99:8f:d7:aa:c2:ff:4b:
         f0:e8:af:38:bf:a1:67:f8:34:86:43:51:cb:2b:ec:b0:15:f3:
         9b:60:46:b2:7e:99:81:63:b0:f4:e8:77:fd:ef:6a:44:0d:0f:
         90:1f:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org