Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/77e0dc28af385c7f2baf3cedc5392effee4ae81a.roa
File:                     77e0dc28af385c7f2baf3cedc5392effee4ae81a.roa (raw, json)
Hash identifier:          5DTZUh0xFM5CfBFjWh4kvJYfotCR9vKTbe95TTW2pmU=
Subject key identifier:   A5:38:D0:40:92:DE:FE:CB:09:89:FB:1F:D1:11:7B:02:5C:DF:A3:ED
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E4D31
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/77e0dc28af385c7f2baf3cedc5392effee4ae81a.roa
Signing time:             Thu 07 Dec 2023 13:01:08 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     52436
IP address blocks:        181.10.236.0/23 maxlen: 24
                          181.13.56.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034417 (0x2e4d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=77e0dc28af385c7f2baf3cedc5392effee4ae81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:ef:50:85:c9:02:f3:46:52:25:ba:6c:4d:
                    82:e3:71:b7:e9:09:39:8b:ff:e2:23:31:dd:7b:f7:
                    13:92:64:4c:15:96:4e:82:28:91:ba:52:ed:1d:d7:
                    42:16:f9:a6:0e:96:d2:0c:d4:1c:29:99:1a:93:7e:
                    15:fe:7e:76:74:2a:fd:a2:9f:01:a7:05:ab:aa:e9:
                    45:d0:a2:00:ac:e2:85:47:77:5f:9e:6a:5b:2d:20:
                    df:4b:e3:f7:58:04:ad:ff:56:30:23:71:49:31:13:
                    31:07:1f:20:77:cc:a1:89:f7:3b:db:1c:0f:42:91:
                    82:3a:c9:fc:9b:0d:aa:f1:d8:b7:6b:9a:c7:15:bd:
                    38:ae:6f:52:4f:6a:8b:ce:0b:b3:9b:9c:dd:48:c5:
                    e1:8d:fa:30:08:f1:e4:57:22:22:3c:de:06:bd:b0:
                    84:5e:cb:25:95:55:c2:ac:dd:5a:06:19:4d:d2:8d:
                    b7:21:45:1a:0a:95:d5:48:b0:4b:37:0c:b2:fe:dc:
                    3d:7f:7c:81:23:60:62:74:b9:cc:bf:00:a8:dd:80:
                    6f:d8:dd:e7:78:ff:1f:a6:e1:e0:b9:ac:66:54:e4:
                    12:e6:2c:f0:99:ef:d9:20:9f:7d:2c:4c:a5:00:dd:
                    4a:82:8d:2b:11:fb:b0:6e:8a:a3:64:49:e4:cc:e5:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:D0:40:92:DE:FE:CB:09:89:FB:1F:D1:11:7B:02:5C:DF:A3:ED
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/77e0dc28af385c7f2baf3cedc5392effee4ae81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.236.0/23
                  181.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:da:0b:e0:88:a4:f4:f6:97:99:90:75:28:16:bb:33:67:
         2f:7d:c6:bc:e1:a7:05:fb:6d:31:dc:38:0f:50:38:5f:29:44:
         4f:ff:38:59:2e:52:1b:27:a9:70:45:99:26:75:c3:ae:da:7f:
         22:c3:5e:2c:14:60:d9:36:40:9b:53:30:c1:7a:b6:96:bd:c6:
         34:46:07:e1:b4:f8:6d:3b:c5:77:d4:2f:a9:18:3e:6a:4a:f4:
         7a:58:69:0f:ad:1e:56:58:78:f7:a6:ff:35:06:54:a5:b4:01:
         e1:da:84:98:ef:a1:ae:cb:99:f0:fa:85:bb:66:f6:1e:b4:f8:
         1c:ba:60:78:96:09:b5:dd:7f:76:72:63:c9:e0:01:e6:9f:ec:
         0e:c2:eb:6d:43:1a:fa:e3:a2:f5:6f:ad:d8:b0:ae:0c:ab:ed:
         95:13:68:a6:95:ac:07:09:de:60:08:49:de:65:3d:9a:53:65:
         20:c3:ec:08:3b:01:5d:d3:be:91:34:21:f4:f3:29:c6:89:90:
         4f:05:cd:d6:ce:59:b4:eb:df:80:2f:84:9d:b8:87:e5:f7:8c:
         ea:50:46:52:c0:4e:1a:bc:3e:35:96:16:c8:01:28:79:2d:c4:
         17:96:c9:b9:8e:f0:70:e1:4d:7c:59:58:ec:cb:3c:99:e9:58:
         12:9a:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org