Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1f813729172f307412085d86b26b48ac6c625d40.roa
File:                     1f813729172f307412085d86b26b48ac6c625d40.roa (raw, json)
Hash identifier:          8a8x+np4fQ6coNb+u6eIW02u5jTMkyld0bXM9jNIJWc=
Subject key identifier:   5B:B4:5B:D7:64:AA:63:00:EE:54:5C:58:27:87:92:6E:06:BF:DB:E8
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       173F76
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1f813729172f307412085d86b26b48ac6c625d40.roa
Signing time:             Fri 06 May 2022 21:43:25 +0000
ROA not before:           Fri 06 May 2022 03:00:00 +0000
ROA not after:            Mon 06 May 2024 03:00:00 +0000
asID:                     262913
IP address blocks:        201.174.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523574 (0x173f76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: May  6 03:00:00 2022 GMT
            Not After : May  6 03:00:00 2024 GMT
        Subject: CN=1f813729172f307412085d86b26b48ac6c625d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:45:9b:83:fa:a9:93:3a:79:2d:40:21:ce:
                    97:00:4b:a5:79:a1:ad:9d:d4:82:07:25:5e:c7:e9:
                    3f:98:f3:f4:80:f3:28:67:3e:d4:d8:77:df:d1:59:
                    cc:a2:62:91:96:32:e2:4a:f5:c0:05:29:a8:10:be:
                    33:7d:56:f5:5b:a6:73:fb:19:06:5c:31:9d:55:23:
                    bf:38:5d:2e:62:a5:51:34:16:bd:31:12:4f:50:af:
                    de:32:56:56:a5:ff:f8:68:4b:69:84:fc:78:f2:c9:
                    fd:f8:1f:36:cc:8c:cb:9c:f0:86:1b:7d:aa:14:4a:
                    20:a8:a8:ec:d4:65:95:1d:e1:4a:6a:aa:e5:5e:e5:
                    80:20:54:d0:32:8b:f0:7e:28:aa:a1:0d:9b:72:e6:
                    92:65:c2:e5:11:ca:f0:b0:25:a7:fe:2d:52:4d:cb:
                    84:2c:d3:c0:cf:01:a0:6e:07:74:da:a1:80:52:b3:
                    89:87:50:17:3e:f0:73:63:6f:b7:e0:f2:c1:50:03:
                    e4:03:c5:65:98:1c:87:5f:86:c8:fc:5d:37:62:88:
                    87:5d:f8:9c:3d:56:87:49:d1:57:b9:55:81:72:46:
                    d5:cf:8e:6c:34:c7:f3:32:1c:f8:c6:f1:0a:75:b8:
                    79:ea:35:19:30:f2:e5:16:44:47:c6:a6:73:c3:b4:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:5B:D7:64:AA:63:00:EE:54:5C:58:27:87:92:6E:06:BF:DB:E8
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/1f813729172f307412085d86b26b48ac6c625d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:da:7a:c4:a8:44:c6:eb:f8:53:30:be:7b:4d:5f:e3:d5:69:
         e6:73:47:9f:56:fb:9a:da:49:2d:4d:53:15:e4:74:80:cf:bd:
         81:30:a0:ee:4f:60:92:87:d9:94:e8:39:b4:22:88:bc:aa:5d:
         6d:e4:d7:f8:de:d8:28:43:2d:25:9a:52:37:45:34:a6:99:73:
         fc:e4:46:0b:32:07:16:a3:94:e0:65:ed:6c:6f:95:a7:ab:35:
         e7:df:aa:ab:b7:ef:d2:3d:60:42:ee:fb:c1:e6:dd:89:3a:99:
         36:d0:4a:6b:c8:ee:ba:a6:d6:da:f9:88:0b:6f:98:bb:90:8d:
         e5:1c:ef:8f:e5:4f:d8:57:a2:08:c4:73:93:a5:d6:ca:bc:aa:
         e7:b2:18:6d:a5:85:10:74:5b:32:7e:1c:39:85:4c:f3:30:be:
         96:08:3a:1e:62:06:61:56:87:cc:22:24:41:51:5a:d5:be:47:
         ed:3d:ea:18:31:00:6a:49:dd:23:b2:3c:1c:77:e3:b0:c1:6b:
         de:fd:96:9f:ee:ae:a9:ca:7b:67:9b:5f:35:64:4e:fe:a1:1b:
         0c:9f:5a:ba:8f:09:46:15:d9:c5:7e:be:97:e1:46:01:a2:d8:
         ed:6f:d3:4a:9d:fc:77:bd:02:d4:12:2c:4d:92:2c:db:3b:f8:
         f7:af:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org