Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ab6e1b2c5635e4fcbcbcf3653de539fdef075af8.roa
File:                     ab6e1b2c5635e4fcbcbcf3653de539fdef075af8.roa (raw, json)
Hash identifier:          LyeYKnSua3IyA2hi9gyRHWKfPM2+4FNBL9NIMaXGmJM=
Subject key identifier:   53:7D:60:43:11:0F:40:F7:A3:1F:83:4B:7B:94:21:83:00:A9:51:83
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1EBCD9
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ab6e1b2c5635e4fcbcbcf3653de539fdef075af8.roa
Signing time:             Wed 31 May 2023 21:34:56 +0000
ROA not before:           Tue 30 May 2023 21:34:56 +0000
ROA not after:            Sat 31 May 2025 21:34:56 +0000
asID:                     273006
IP address blocks:        201.131.88.0/24 maxlen: 24
                          201.131.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014425 (0x1ebcd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: May 30 21:34:56 2023 GMT
            Not After : May 31 21:34:56 2025 GMT
        Subject: CN=ab6e1b2c5635e4fcbcbcf3653de539fdef075af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6a:a1:bb:08:3f:61:db:8f:62:fc:8a:73:64:
                    26:93:a9:0e:7e:94:13:35:de:46:82:fb:7c:bb:5b:
                    79:17:d9:de:6e:75:32:9a:62:73:3a:77:da:5e:8d:
                    b0:61:e6:4f:b6:5b:6d:59:4c:75:cc:0b:e5:5b:c0:
                    15:70:cf:0d:33:28:2f:e9:35:61:e9:74:e5:5d:57:
                    74:38:1b:30:54:c8:0d:5c:b4:ef:89:91:12:7d:6b:
                    9a:f4:07:14:ff:9e:dc:b3:ae:1d:46:05:10:a9:36:
                    e1:af:b2:76:10:41:4f:cf:ea:83:22:24:11:eb:d5:
                    17:db:0b:e9:57:2f:b5:0e:e5:a3:0c:7c:d2:41:b3:
                    a6:f3:60:f7:5f:19:94:75:9f:14:e0:cb:52:7e:50:
                    f0:4b:82:a2:2f:21:91:17:ab:7f:66:09:eb:48:bd:
                    87:25:45:24:8f:01:79:5f:13:07:65:94:32:86:85:
                    55:3f:38:24:a8:9b:c1:08:23:a1:12:03:72:ad:73:
                    b3:f0:ad:57:54:50:7e:c8:ae:0e:fe:1b:be:d7:ea:
                    b1:fb:fc:c7:9b:63:50:b4:c7:fa:41:9d:12:4a:7d:
                    4b:a2:34:78:6e:1f:ae:4e:fb:dc:08:c9:92:bb:12:
                    82:68:61:f1:8f:7e:10:89:08:3b:99:4c:3c:74:e2:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:60:43:11:0F:40:F7:A3:1F:83:4B:7B:94:21:83:00:A9:51:83
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/ab6e1b2c5635e4fcbcbcf3653de539fdef075af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:66:02:58:73:30:28:04:b5:f1:5f:e0:2f:82:3d:3c:b4:20:
         e8:0c:57:ed:62:6c:21:6d:d2:52:89:9c:74:8d:4c:b6:ec:3d:
         6d:8f:f3:8e:4d:16:43:9e:b5:c6:f6:4e:d2:e8:bb:36:aa:65:
         4b:fa:30:c2:3e:e7:0b:63:63:eb:5a:74:ee:02:5b:c4:f3:a0:
         04:8b:ac:c5:48:5c:24:d5:23:ae:21:86:53:5d:48:61:a1:21:
         ac:01:94:8a:5a:81:d5:a2:ec:3e:e4:f1:90:9d:fa:76:30:8b:
         06:ea:c4:9c:2d:a1:86:03:6a:6c:66:79:03:aa:50:c6:d1:93:
         17:85:33:60:cb:44:6d:de:06:ff:e6:b4:00:f0:67:a8:46:aa:
         25:9a:47:87:4d:ff:c3:aa:4e:2e:0e:a8:1e:fd:a5:af:73:4c:
         2c:ba:9a:24:4d:36:0c:ba:2d:7c:6a:2a:3b:be:7c:01:57:4f:
         67:b1:c9:30:83:b8:65:9a:88:e5:e4:3a:15:d3:64:ed:e2:5e:
         ef:c7:85:74:21:54:5e:a8:32:bc:7f:42:87:f3:1a:3d:0b:1d:
         76:44:40:3a:68:6f:ee:bf:0d:b3:01:53:4f:63:d4:96:5d:af:
         10:71:ba:fc:42:28:b1:1c:3b:e3:c5:bb:e5:bf:d6:2e:d3:53:
         87:d1:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org