Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9fa0317e7bcb4ecb709f21354be4453aa902c65.roa
File:                     c9fa0317e7bcb4ecb709f21354be4453aa902c65.roa (raw, json)
Hash identifier:          5oZ65y2rsh94+DpVMFbHf2aoLNe45FUlbz3VsAEfaLw=
Subject key identifier:   54:3B:FC:61:62:5E:2B:84:1A:32:EC:22:AF:3B:44:63:95:D6:0B:04
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E47B0
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9fa0317e7bcb4ecb709f21354be4453aa902c65.roa
Signing time:             Thu 07 Dec 2023 13:01:03 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     52371
IP address blocks:        201.252.229.0/24 maxlen: 24
                          190.226.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3033008 (0x2e47b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=c9fa0317e7bcb4ecb709f21354be4453aa902c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:75:6f:d4:a4:1e:d3:3c:d7:81:e9:e4:96:
                    d3:73:b7:4f:06:5e:17:e3:70:4b:ae:cc:a5:a7:a0:
                    63:0c:9b:e4:95:60:db:6f:00:cc:b8:80:cd:ea:1f:
                    d5:c5:d1:ff:6b:a4:18:9a:a9:fa:42:3d:0f:59:88:
                    64:4d:9b:58:73:5e:dd:35:8a:29:55:c9:84:f9:fa:
                    91:37:3f:05:16:e9:a5:cf:f6:11:31:73:06:db:a4:
                    fe:1e:fc:e8:bb:55:31:03:85:9a:e3:3b:3b:03:59:
                    74:10:76:59:07:01:b0:30:90:4f:16:eb:81:a9:82:
                    2f:00:63:6f:0f:3c:b0:77:0d:60:3e:b1:fd:d1:2a:
                    07:f3:cb:3a:ac:54:be:10:3c:f6:c7:f6:2d:06:6d:
                    40:18:b0:5e:6a:db:c9:e2:57:22:dc:d4:8a:85:73:
                    bc:a8:7e:c6:aa:0c:42:6b:a3:51:21:a6:70:a9:cc:
                    00:18:77:8c:94:39:45:32:4a:19:3a:d2:e0:84:0c:
                    6d:86:2c:10:68:ee:bf:93:40:64:8c:97:1b:b4:22:
                    76:97:5d:30:52:1f:53:41:a6:2e:a3:c4:89:c9:31:
                    6f:d0:08:29:59:57:5a:b2:bd:ce:6a:26:1f:9a:54:
                    72:d6:f6:49:09:6a:fd:01:84:57:bc:65:ce:48:17:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:FC:61:62:5E:2B:84:1A:32:EC:22:AF:3B:44:63:95:D6:0B:04
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9fa0317e7bcb4ecb709f21354be4453aa902c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.32.0/24
                  201.252.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:ed:84:09:b1:4c:a7:71:fd:2c:c6:b8:32:34:3e:26:5a:
         62:6f:6f:79:0d:7d:4a:fa:23:21:67:40:f7:6e:da:9c:81:dc:
         25:32:19:63:c7:60:e7:2b:0d:2a:3f:e5:97:2f:18:7e:3c:9e:
         99:8e:fc:09:c0:78:20:38:71:29:33:38:4e:e9:b0:fa:2f:56:
         1b:c3:0a:69:22:08:c6:41:90:ec:be:56:51:9b:31:61:0e:4c:
         c2:34:53:9b:28:c5:c6:6c:f0:cb:74:6a:81:24:b9:50:1d:c3:
         96:6b:0f:1e:54:2f:68:7b:7c:08:1f:2d:b8:b2:ed:14:03:2b:
         d2:fa:b6:68:63:e5:96:e7:ea:83:7e:3b:27:17:76:de:1c:ac:
         cd:2d:de:eb:cf:b9:4b:c6:34:65:71:6e:35:1f:e5:3f:af:2e:
         7a:41:22:d4:72:a8:60:be:33:b6:88:d6:d5:33:94:a8:18:75:
         d2:e6:ce:5a:69:3c:48:d2:ae:33:a9:6b:19:81:e0:3d:b0:fe:
         4c:81:c8:19:df:c3:7c:ef:fa:b9:f5:66:5f:fa:be:76:3d:e3:
         ef:1f:4d:9e:51:24:93:1d:11:11:e3:ae:49:18:1c:f6:52:04:
         04:27:dd:a6:81:f3:a5:f5:cb:39:63:80:90:3a:34:fc:9f:05:
         88:15:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org