Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9eee1b0cdd7a1b0ddd6ed67f558131d14de0c93f.roa
File:                     9eee1b0cdd7a1b0ddd6ed67f558131d14de0c93f.roa (raw, json)
Hash identifier:          RnejyRT/bb+DkspGdPMEEsYoanzJiNBg4e6YAVgW6WY=
Subject key identifier:   07:09:59:AF:E9:0B:30:02:4E:74:AC:17:B5:9D:C2:05:13:7E:D3:90
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E204E
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9eee1b0cdd7a1b0ddd6ed67f558131d14de0c93f.roa
Signing time:             Thu 07 Dec 2023 13:00:50 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265737
IP address blocks:        181.13.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022926 (0x2e204e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=9eee1b0cdd7a1b0ddd6ed67f558131d14de0c93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:86:33:ec:0b:31:76:c1:ec:2d:90:bf:c2:
                    00:85:a2:9f:f8:e7:2a:4e:78:c8:89:47:90:d7:aa:
                    da:13:3c:5b:97:ae:f6:5b:f3:62:27:d7:e3:e9:a9:
                    26:f2:af:dc:b4:13:ac:dd:0f:53:cd:8b:47:fe:d0:
                    ed:61:3d:4d:34:8f:3c:ec:d5:0c:a5:ab:4c:20:4c:
                    9f:fb:3a:30:93:b8:f6:57:02:1f:e1:fe:e8:14:ec:
                    2e:8e:4e:b5:30:cc:ed:20:53:26:52:00:2c:d5:5a:
                    b3:54:f5:9e:bb:df:36:49:46:2d:87:50:22:2f:36:
                    5b:70:cc:19:6c:c2:a0:8e:c6:3e:ba:41:57:f8:b2:
                    42:b8:6d:60:4d:b9:8a:b0:4f:70:6d:1d:e1:74:d8:
                    01:e4:01:39:20:ce:e2:13:80:cc:c4:a4:5a:b4:51:
                    e8:31:82:f1:36:d9:98:ce:e8:cf:73:47:30:22:ce:
                    7f:44:2b:b5:18:d7:37:7c:5d:13:bb:ed:57:df:68:
                    86:c5:dc:01:96:8e:67:18:50:c8:6c:91:83:5d:ad:
                    fb:ef:45:db:be:8c:dd:63:c6:06:86:38:0a:88:0f:
                    2a:7c:6e:75:d4:9a:15:eb:93:4e:77:22:bc:8c:f4:
                    3c:11:ef:2d:59:7f:b2:79:f1:61:8d:43:a3:53:89:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:59:AF:E9:0B:30:02:4E:74:AC:17:B5:9D:C2:05:13:7E:D3:90
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9eee1b0cdd7a1b0ddd6ed67f558131d14de0c93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:30:4d:24:04:75:73:90:2b:44:b5:df:fe:ed:33:90:6f:
         37:d5:e2:c5:2e:20:27:ac:0b:d2:07:05:4b:d8:3e:b7:0c:3b:
         42:b1:00:e2:bc:e3:0b:38:ed:76:8b:38:d2:6c:20:98:50:16:
         f4:1c:03:58:78:34:e9:e5:76:85:db:6a:88:08:dd:6f:c3:ef:
         b1:42:7b:c9:a0:61:3d:17:87:ef:e0:26:ae:2f:fa:fc:b4:ae:
         8b:ca:a3:19:8c:42:6e:2e:e8:67:b8:29:10:b5:cb:19:ac:4b:
         10:7c:6c:79:41:d0:3e:82:f8:ea:1e:7c:3b:f2:22:55:cd:29:
         f8:f0:a4:80:e0:77:07:62:4c:0f:a2:b4:8b:b2:84:30:42:f9:
         e2:3f:e2:29:09:6c:cd:c3:fd:c2:77:e9:e0:ba:7d:d6:44:cf:
         92:4a:55:f9:48:9a:be:e6:78:9f:4a:02:d9:43:48:05:52:25:
         bd:77:7a:fb:fc:38:5d:e8:43:6f:3a:60:2c:ca:cf:bb:3f:ac:
         63:aa:fa:d4:db:a9:3e:ee:81:90:e4:13:24:2c:d2:15:19:29:
         9f:b1:08:0a:5a:2b:b1:64:91:66:bc:0d:81:43:1b:2c:b2:66:
         af:e1:81:96:db:d4:c9:cf:50:03:72:7b:fc:7b:b5:e7:24:c1:
         55:9d:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org