Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/4468edb885a0e057aef9a667c75926af89c4f3fd.roa
File:                     4468edb885a0e057aef9a667c75926af89c4f3fd.roa (raw, json)
Hash identifier:          bvVdjWKGIk/+5txIp1HH+RTgGV5F+hch9z7ffRPZCxU=
Subject key identifier:   8B:A4:99:B0:A2:DF:5B:2F:2E:92:48:67:FA:8B:94:10:26:7E:71:81
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0F3D14
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/4468edb885a0e057aef9a667c75926af89c4f3fd.roa
Signing time:             Mon 18 Sep 2023 02:53:57 +0000
ROA not before:           Sun 17 Sep 2023 02:53:57 +0000
ROA not after:            Thu 18 Sep 2025 02:53:57 +0000
asID:                     272094
IP address blocks:        181.233.50.0/24 maxlen: 24
                          181.233.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998676 (0xf3d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Sep 17 02:53:57 2023 GMT
            Not After : Sep 18 02:53:57 2025 GMT
        Subject: CN=4468edb885a0e057aef9a667c75926af89c4f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:9e:59:4a:1b:37:f6:f3:ea:82:68:0b:45:
                    2b:a0:f7:d4:36:e3:39:0b:0a:d3:55:b5:59:72:0e:
                    51:af:a4:a1:37:aa:d1:01:c9:81:01:ea:87:63:1d:
                    0e:bd:8d:98:b7:59:9c:2a:d8:af:96:11:10:b8:67:
                    c9:b8:72:e6:a0:c1:5b:8b:f2:a3:6d:79:5f:3d:ca:
                    95:64:2a:d5:1f:6f:01:fd:bd:94:cc:62:c7:90:5d:
                    79:21:7a:f0:41:87:11:d7:26:04:64:c0:5b:80:67:
                    17:58:0a:27:9d:ee:32:1b:36:4d:12:d7:48:3b:65:
                    7e:12:06:6f:1c:89:f7:37:2a:b5:9b:f7:7e:ec:97:
                    aa:6f:3e:1e:bd:32:b2:80:44:14:b5:c9:1f:ac:7e:
                    b3:be:33:a5:e4:49:e2:53:51:b4:3f:ae:3d:c8:2f:
                    7f:15:6a:53:3f:c7:64:ed:0b:8f:de:bc:b4:61:e5:
                    88:f1:bf:70:d1:bf:8c:b6:58:f6:fc:3e:c3:3c:cc:
                    2a:91:36:7e:de:8f:a3:ce:71:db:c3:23:07:28:0a:
                    a3:2d:30:4c:ec:b8:f1:b0:13:5a:ad:0d:f4:f4:5d:
                    b9:f7:e1:07:79:4f:d2:bd:20:37:54:52:a0:bd:90:
                    c5:3c:c7:ac:4a:9d:57:69:40:44:38:13:68:bd:e5:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A4:99:B0:A2:DF:5B:2F:2E:92:48:67:FA:8B:94:10:26:7E:71:81
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/4468edb885a0e057aef9a667c75926af89c4f3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:7d:e3:cd:5d:c2:46:1b:8a:94:f4:22:e0:87:7e:39:e3:c8:
         4a:b5:f1:ba:00:b6:27:7d:0f:ab:6f:60:bb:84:93:1c:f9:b9:
         44:10:b6:44:0b:ab:03:1c:1a:e0:40:8c:f8:b0:7f:f6:38:8d:
         0c:dc:8e:2c:94:42:f4:f0:c6:dc:8a:a4:1d:54:30:38:05:e7:
         5e:67:0b:98:62:94:fa:8c:02:53:48:20:09:2d:2a:76:d7:6e:
         ea:1b:49:7d:26:04:f2:77:19:59:a7:56:d4:ff:9f:a4:7a:08:
         34:c7:e6:5a:08:19:ec:32:97:03:e5:9b:a7:07:04:d5:bf:60:
         8e:c9:14:02:ff:0f:a1:73:b1:3e:d9:1c:91:26:d9:c4:f9:0e:
         55:85:aa:26:9c:59:3c:e2:1f:7d:ef:d3:ee:b9:34:27:78:44:
         06:55:c9:73:ec:78:d6:0e:30:8b:bc:01:32:ff:1f:e3:92:eb:
         51:01:13:70:18:c1:ff:bc:a3:f1:99:1b:15:a4:aa:c0:b3:3a:
         5c:18:a3:c9:da:de:98:4c:c8:c2:7a:00:22:70:db:75:81:15:
         be:a4:3a:86:15:ff:72:5a:c2:c8:41:4c:bf:83:7e:d5:05:e8:
         46:58:46:a9:ac:41:e5:0f:86:db:08:39:c6:dc:21:47:df:65:
         01:fb:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org