Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/2574fbef7780f60152341a618a7d4fc670055432.roa
File:                     2574fbef7780f60152341a618a7d4fc670055432.roa (raw, json)
Hash identifier:          em2n9IXUxee6vhXBXZZxx83ja/EXTHsJCEIaJ5NpCMY=
Subject key identifier:   44:10:BF:09:61:0F:D2:87:49:26:7C:A1:2D:F7:50:62:06:56:74:54
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       204916
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/2574fbef7780f60152341a618a7d4fc670055432.roa
Signing time:             Fri 12 May 2023 13:45:17 +0000
ROA not before:           Thu 11 May 2023 13:45:16 +0000
ROA not after:            Mon 12 May 2025 13:45:16 +0000
asID:                     266757
IP address blocks:        191.97.59.0/24 maxlen: 24
                          191.97.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115862 (0x204916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: May 11 13:45:16 2023 GMT
            Not After : May 12 13:45:16 2025 GMT
        Subject: CN=2574fbef7780f60152341a618a7d4fc670055432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:c4:0a:04:3c:41:06:df:2c:68:a4:39:a1:
                    63:42:2f:39:fb:63:20:fe:9f:86:b2:24:2f:c6:1c:
                    55:97:9d:61:03:9e:b7:a7:34:0c:02:ec:4e:85:10:
                    f7:63:8b:b3:25:82:ee:0c:fb:21:00:4e:19:26:ff:
                    7a:0a:64:43:9c:f6:66:7d:ec:ba:5a:aa:10:d1:92:
                    2a:95:7d:9d:cb:f3:2b:92:d8:12:39:70:b2:24:a3:
                    67:38:46:f7:d4:fe:3c:7b:35:14:de:28:a0:26:fc:
                    73:35:61:e2:5e:80:2a:20:db:d9:c2:af:b8:bf:6b:
                    57:df:09:59:8a:92:c4:8a:a9:17:64:2f:36:88:20:
                    8e:da:3c:b8:7e:a7:ef:82:a0:e9:3e:f7:d7:57:4f:
                    70:b5:a9:e7:ab:ac:21:a1:01:7d:16:af:1d:cf:55:
                    9c:fc:47:80:ab:e8:12:fb:61:38:55:3a:83:22:c6:
                    41:5f:b3:4e:c3:74:04:57:b2:e5:be:39:3c:7f:14:
                    4d:cb:04:6f:81:f7:ee:af:ca:3e:c9:66:91:f1:4a:
                    d1:a7:18:8c:e4:dd:21:0d:bb:09:7d:2d:6a:ca:56:
                    c9:7e:99:3d:54:82:ba:19:e9:56:40:1a:ac:01:26:
                    53:4e:5f:0f:de:2a:bc:2b:f6:e0:45:49:6e:07:44:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:10:BF:09:61:0F:D2:87:49:26:7C:A1:2D:F7:50:62:06:56:74:54
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/2574fbef7780f60152341a618a7d4fc670055432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.59.0/24
                  191.97.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:80:e1:a1:14:cd:a0:f3:82:6b:ac:8c:59:6e:43:d4:20:
         81:17:7a:e3:e2:69:73:99:de:ec:21:ec:4b:06:dd:ac:2c:0e:
         67:7e:f2:14:f9:e9:35:c4:38:58:af:bd:d9:35:ce:1d:90:56:
         eb:9c:de:8b:a8:a4:b2:47:ee:61:a9:6e:d1:60:18:2e:cb:50:
         d2:49:6e:e7:85:6d:b8:d8:4c:a3:f7:4f:76:91:9d:4a:5c:dd:
         cc:31:af:e5:2c:57:7d:80:23:99:fd:05:29:34:70:cc:f6:26:
         ba:a8:42:4b:7e:11:09:bb:e1:43:5f:f1:c3:b8:a9:ff:c7:28:
         9c:d9:e4:40:b5:4f:0b:b3:a6:c0:6b:52:87:38:73:93:bd:75:
         d2:d2:a2:43:6d:0e:20:99:f4:3e:01:24:04:1a:d8:d9:8e:46:
         44:9e:53:75:91:e2:6a:59:08:86:b0:c6:c1:21:59:09:4b:24:
         f3:47:c5:d4:4a:a0:a3:52:9a:c5:8f:5e:f7:64:7c:5c:2e:e1:
         0c:81:12:64:bb:e8:b0:34:3e:03:0a:cd:b8:3b:0f:b9:0f:af:
         8b:38:9f:5e:7c:ba:1d:bd:86:f3:03:62:1f:5e:23:c8:1b:5f:
         f1:d6:ad:49:ef:10:f3:fa:f1:96:ce:97:f1:98:40:07:5b:56:
         c5:44:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org