Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/10cb8d0dfee0424ef9cc0ae1d381beda0d817693.roa
File:                     10cb8d0dfee0424ef9cc0ae1d381beda0d817693.roa (raw, json)
Hash identifier:          sdjwiV3AhTBWPMItC5AWgKaub93gCI98Ww+cllnTDgw=
Subject key identifier:   EB:4C:CF:3B:55:24:13:8D:8B:64:B1:C3:2C:C1:12:DD:1B:F6:93:93
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1E97F4
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/10cb8d0dfee0424ef9cc0ae1d381beda0d817693.roa
Signing time:             Sat 27 May 2023 20:03:46 +0000
ROA not before:           Fri 26 May 2023 20:03:46 +0000
ROA not after:            Tue 27 May 2025 20:03:46 +0000
asID:                     273006
IP address blocks:        201.131.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004980 (0x1e97f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: May 26 20:03:46 2023 GMT
            Not After : May 27 20:03:46 2025 GMT
        Subject: CN=10cb8d0dfee0424ef9cc0ae1d381beda0d817693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:a8:47:f7:ed:ee:d7:6f:e8:c9:d7:4b:53:
                    73:71:ca:73:9a:77:1b:ee:28:20:d0:f6:78:41:64:
                    04:53:05:2a:0b:9c:4f:22:75:70:e5:9f:bc:df:eb:
                    04:a7:71:e4:8d:0c:16:10:38:02:bf:d5:17:ef:fd:
                    02:34:bf:05:25:b9:e9:dd:ff:44:71:7e:71:76:73:
                    8d:7d:b0:0f:1f:c1:52:ce:b5:f3:5a:e2:10:68:fa:
                    16:6a:02:5a:f0:c2:dc:b2:81:2f:74:d5:cb:aa:73:
                    55:14:f9:30:6f:e1:75:0d:92:82:ad:8f:7e:61:c3:
                    0a:68:76:02:b5:e5:0b:9d:c8:68:00:4a:be:d0:ae:
                    0c:8b:8a:ca:c4:89:2d:00:41:6e:1c:15:c2:f7:03:
                    06:74:38:02:ab:83:ce:dc:86:50:99:2c:b8:ec:f6:
                    29:0b:a1:6f:88:62:29:15:10:b3:f9:8e:0d:1c:8c:
                    69:7d:c3:72:1c:cf:2c:bc:31:d1:f8:bf:d3:1e:9a:
                    7b:52:3a:c8:cf:b4:26:66:68:82:ae:6c:d4:1f:d9:
                    f6:fe:a3:a0:a9:12:08:5c:0c:37:80:c8:6f:27:66:
                    eb:80:34:cd:e9:30:ba:2c:b3:ac:ff:15:da:b3:7e:
                    63:c0:e7:97:a1:ff:34:f1:01:ba:0e:2f:c6:01:a3:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:CF:3B:55:24:13:8D:8B:64:B1:C3:2C:C1:12:DD:1B:F6:93:93
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/10cb8d0dfee0424ef9cc0ae1d381beda0d817693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:39:96:5b:6c:f1:7b:1c:3a:61:4b:49:46:61:d8:f2:09:
         48:d3:14:98:2f:c4:5b:bc:ab:f7:bf:db:86:d6:08:0c:7a:ce:
         8d:00:99:7a:41:ef:a4:1c:99:23:e1:85:e1:96:1f:96:7f:d2:
         3f:5f:ed:bd:cb:3a:35:27:c3:ae:e4:a9:7e:52:0f:49:c7:0d:
         ab:d2:86:62:5d:18:ac:fe:bf:3c:89:f1:dc:c5:78:3f:a4:3f:
         9f:5b:38:7b:54:3e:bb:1e:f1:d6:92:b6:27:a3:ee:ec:3b:9e:
         17:51:39:2b:51:2d:e0:ac:4b:88:7a:56:1a:4c:01:21:6b:2d:
         2b:c0:df:a9:c2:46:9f:28:68:22:c6:db:65:67:fd:55:55:7c:
         96:21:50:0e:de:fb:69:ad:c9:74:96:1e:37:70:d9:a5:38:d2:
         57:db:52:d2:ae:4d:e6:20:15:1f:90:5e:20:1f:fc:df:5e:49:
         f1:15:29:7a:09:7e:13:00:43:c1:18:8a:94:c4:19:ed:e5:22:
         c7:55:11:b1:e1:70:61:9e:f0:41:e6:b4:5d:81:67:ad:64:2d:
         dd:4b:f1:75:72:cd:c9:92:f5:5d:bc:c5:3f:cb:0c:6d:be:ac:
         4d:77:8d:a7:fe:db:30:c4:2f:89:f0:7b:3e:b0:9b:5d:29:8b:
         1d:07:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org