Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a514666d8bb761cef80b0e7dc2d5ee16dc16118a.roa
File:                     a514666d8bb761cef80b0e7dc2d5ee16dc16118a.roa (raw, json)
Hash identifier:          2Owrhi85xq6tmQfmCmr9w4GfJPb6/tHnwum8AS8HVuc=
Subject key identifier:   E8:D5:03:D4:D6:DB:3A:AA:CE:92:C3:85:77:40:70:E8:3E:A5:F9:E2
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27912F
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a514666d8bb761cef80b0e7dc2d5ee16dc16118a.roa
Signing time:             Mon 17 Apr 2023 13:01:41 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     27823
IP address blocks:        200.45.208.0/24 maxlen: 24
                          181.13.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593071 (0x27912f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=a514666d8bb761cef80b0e7dc2d5ee16dc16118a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:9f:1e:90:ab:ad:fd:67:53:48:13:a0:a1:
                    da:9f:c0:93:57:b5:27:ba:1f:d4:60:44:47:49:44:
                    4e:5b:2d:1d:90:6d:c9:af:96:9c:f3:a1:88:83:c9:
                    3d:59:93:9f:1f:d1:a7:5e:e3:ad:66:87:ce:ed:91:
                    94:08:89:b3:9c:a8:99:bb:60:e8:3f:ce:b8:aa:dc:
                    6c:90:9b:04:9a:8c:45:f9:60:0a:31:8e:58:b5:91:
                    a4:7e:2c:5f:e0:cd:3e:34:1a:a5:14:8d:a4:9a:09:
                    a4:d9:5c:38:d9:6e:0a:8a:05:b1:39:34:ca:40:a5:
                    73:fe:20:d8:be:b3:85:8c:59:de:cc:3f:a0:15:b0:
                    83:3a:ff:1d:da:6a:5f:a8:1b:29:ac:51:7a:9b:7f:
                    bd:99:6b:28:e5:4f:47:25:7a:ba:a1:2a:60:e2:22:
                    e4:a6:e6:3a:65:c1:4b:03:6f:10:09:f7:e0:00:76:
                    af:f8:d7:ba:51:06:37:73:fd:73:87:9b:d9:d9:6c:
                    5a:72:c7:d4:1b:8a:db:97:9f:08:6e:bf:d1:f4:06:
                    b9:82:e6:f0:25:fc:91:11:9b:34:fd:15:cd:4a:47:
                    50:4d:19:43:f4:19:e8:77:39:57:23:67:aa:5b:37:
                    0a:8d:42:f9:d7:a0:bf:ee:f1:77:59:71:25:66:1a:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D5:03:D4:D6:DB:3A:AA:CE:92:C3:85:77:40:70:E8:3E:A5:F9:E2
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a514666d8bb761cef80b0e7dc2d5ee16dc16118a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.244.0/24
                  200.45.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:f0:3f:6b:69:d4:77:99:96:6d:20:d0:c8:14:7f:50:e2:
         f9:62:1d:b3:57:65:c1:ce:8f:ab:c6:de:89:c0:ec:58:be:96:
         c0:bd:aa:77:7e:0e:9c:0b:04:31:cd:b1:cb:48:39:94:16:05:
         0b:70:36:03:68:cd:66:b7:07:95:af:25:dc:d1:65:9a:f5:3b:
         80:b0:ba:dd:35:66:ea:58:53:63:95:75:55:15:f0:e5:e3:a9:
         87:bf:51:a3:84:8f:fe:bd:a3:2a:52:30:15:61:ae:32:55:a5:
         3a:b8:3f:9a:ab:82:d1:c9:00:d5:77:e6:b2:72:30:c0:03:21:
         88:1c:20:82:1c:86:27:64:00:67:b9:f9:fa:48:4d:e3:f2:cc:
         f5:28:6d:69:4f:35:11:ac:68:e9:a6:73:ef:d2:da:3f:e4:54:
         11:5b:d8:d2:f3:4e:b8:d8:b9:5c:e7:39:fc:87:c8:19:3c:d1:
         b7:da:e5:70:7a:9e:bb:a2:d9:7a:96:ca:f6:97:53:57:4e:c8:
         37:b4:ac:bd:46:ed:00:07:34:91:3e:de:0c:6d:67:ad:e9:27:
         45:96:d1:87:23:8a:bc:a6:e6:84:72:da:bb:d9:33:0b:12:85:
         7a:93:a2:b5:f9:30:0d:46:49:19:03:50:f5:f2:b2:07:2c:84:
         f9:e9:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org