Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a405a3fa77d7f536de7ac8c149463e804acdeda1.roa
File:                     a405a3fa77d7f536de7ac8c149463e804acdeda1.roa (raw, json)
Hash identifier:          CpILv8+MRW5kOBqJjSyMTNfjHHWWL84QqK1t+ai5NTk=
Subject key identifier:   9B:8D:28:03:07:04:31:DD:BD:6E:EF:11:44:BA:10:70:48:3A:F6:82
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       278616
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a405a3fa77d7f536de7ac8c149463e804acdeda1.roa
Signing time:             Mon 17 Apr 2023 13:01:36 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     264808
IP address blocks:        181.13.50.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590230 (0x278616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=a405a3fa77d7f536de7ac8c149463e804acdeda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:7d:f6:7c:45:57:1b:89:f0:5c:9c:98:aa:
                    37:53:89:36:5c:2d:fb:09:ad:f7:c3:c9:da:46:e4:
                    09:c1:9a:03:dd:30:f5:3d:8b:af:f0:b3:70:b2:b9:
                    73:12:7a:a8:a3:7e:46:28:d8:8e:b6:f3:9d:5f:60:
                    ab:ff:ba:48:ce:54:af:cb:01:9a:e6:ea:a9:9e:c3:
                    9e:5c:10:a7:54:8a:90:77:6b:ba:d4:c6:37:e8:34:
                    7a:f8:11:3f:7e:38:cc:ad:0f:20:bf:17:40:ff:fc:
                    ee:3a:cc:dc:1e:b2:ea:57:7c:73:8e:1d:29:0c:34:
                    7e:6e:af:b5:9b:21:2f:bb:1a:9e:17:ca:d7:10:4e:
                    60:da:7b:ed:ae:c0:4e:f5:5a:ff:01:8e:2b:b3:1d:
                    ab:ef:40:1f:dc:59:4c:e4:f1:61:07:22:eb:87:f3:
                    cf:57:31:80:4e:43:dd:cd:80:a8:2c:b8:ad:71:65:
                    3a:06:a7:ab:ab:b7:ff:3f:be:f9:a4:05:c6:76:83:
                    6d:0b:3f:46:5b:20:66:61:1f:41:c2:3d:b0:ed:ce:
                    e1:70:9e:dc:49:51:58:1d:18:75:d8:f6:a0:22:fd:
                    ab:81:38:d9:19:98:43:4a:d4:d1:59:0c:fc:af:02:
                    18:7c:53:af:0b:8d:5e:59:4f:43:29:4c:08:18:97:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:28:03:07:04:31:DD:BD:6E:EF:11:44:BA:10:70:48:3A:F6:82
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a405a3fa77d7f536de7ac8c149463e804acdeda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:f0:95:07:5b:d2:d1:6e:7a:e9:56:59:45:b5:f3:fa:10:51:
         dd:56:aa:2e:0a:50:a4:dc:9b:89:3f:99:55:14:d3:13:a7:03:
         f9:19:ed:3f:a1:91:82:bd:54:7c:fc:5e:3b:79:83:3e:2b:62:
         d5:03:d4:47:42:6e:5c:e5:dd:c6:75:a2:24:b5:ca:02:0b:78:
         e2:96:52:f0:9f:41:4a:13:73:c1:db:3e:df:af:a2:f2:b1:b3:
         12:95:6a:45:6b:0f:20:6b:44:3a:98:fe:56:32:90:90:4f:6d:
         a8:24:c0:3b:27:50:ad:b5:98:7e:4d:da:33:57:0a:9e:b2:89:
         4c:ec:14:2a:56:28:7b:20:17:ea:ab:e7:e9:e3:4f:f9:4d:42:
         6b:ee:c8:7e:c5:2f:15:aa:1d:a6:e7:9f:10:1f:fe:f7:ef:73:
         d8:cc:3e:d1:97:9f:a7:aa:b3:f5:2b:15:ba:5a:2c:7c:3b:e1:
         1c:4f:de:94:31:d0:78:e4:ac:7e:7e:3c:6f:b4:76:6b:be:0a:
         0b:90:ce:83:5f:3f:ec:4c:26:5d:11:96:f2:45:e6:28:8e:e9:
         45:b3:b7:fd:48:c2:a3:c2:43:77:8a:69:d7:62:5f:49:39:b3:
         46:67:41:dc:bf:2a:fe:e0:06:ed:fa:fd:9f:39:67:13:6a:52:
         97:9b:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org