Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed8e056b83973a0330e1f5ebb1c7e8982fc4b639.roa
File:                     ed8e056b83973a0330e1f5ebb1c7e8982fc4b639.roa (raw, json)
Hash identifier:          P95mJqTl4IVIwSuGscorV8/7WiPCY4YTj5zmrS92TD0=
Subject key identifier:   24:98:7A:7E:51:9C:F8:24:AF:F1:C2:8E:53:FD:C2:BD:88:61:F7:99
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05F4F8
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed8e056b83973a0330e1f5ebb1c7e8982fc4b639.roa
Signing time:             Tue 11 Jul 2023 17:14:20 +0000
ROA not before:           Mon 10 Jul 2023 17:14:20 +0000
ROA not after:            Fri 11 Jul 2025 17:14:20 +0000
asID:                     16629
IP address blocks:        181.202.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390392 (0x5f4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 17:14:20 2023 GMT
            Not After : Jul 11 17:14:20 2025 GMT
        Subject: CN=ed8e056b83973a0330e1f5ebb1c7e8982fc4b639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:34:92:2e:39:91:c1:bb:d9:70:d2:c5:53:
                    de:6d:5b:d1:71:60:ba:87:27:84:43:7c:63:77:09:
                    ed:0c:1e:47:50:d2:61:a9:83:fc:e6:89:a6:e6:24:
                    51:51:a0:7a:ee:e8:f6:74:c0:2f:11:2f:5e:19:92:
                    6d:02:53:6c:55:52:37:b5:72:45:2a:5e:65:e7:b8:
                    cb:25:4f:f7:4b:11:78:e1:f3:8b:46:72:4d:a1:96:
                    72:00:bb:ff:88:e7:0e:b2:53:03:e8:e3:2c:f6:19:
                    b5:2a:88:7e:64:79:8e:24:f6:9a:c3:e7:f3:d1:1d:
                    eb:6a:ea:06:b2:93:1d:21:e1:3d:44:13:eb:61:fd:
                    fb:2a:2e:88:de:14:f6:cb:a8:30:57:78:39:ad:19:
                    a6:57:16:46:2d:3f:e2:0f:6a:61:c4:b6:aa:97:53:
                    d0:8c:8f:7d:38:d9:96:79:c1:a3:30:99:c3:dc:cf:
                    87:6a:e2:96:02:f3:22:c0:45:ee:45:53:ae:b6:73:
                    3d:29:67:43:5c:22:43:e7:07:57:ab:41:2b:15:45:
                    30:a0:55:74:45:00:f1:74:46:2c:18:96:1b:c0:21:
                    80:ed:17:db:77:2b:73:c5:55:28:a9:53:88:f5:08:
                    ce:e7:03:a7:0e:ff:9e:5d:d9:22:e3:aa:36:28:90:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:7A:7E:51:9C:F8:24:AF:F1:C2:8E:53:FD:C2:BD:88:61:F7:99
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/ed8e056b83973a0330e1f5ebb1c7e8982fc4b639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:91:97:ac:36:bb:fc:eb:87:b1:19:8d:fe:a1:4c:21:54:
         12:a0:e6:0e:30:6e:0e:2f:79:d5:d6:87:0f:9a:91:f9:a6:4d:
         7a:65:52:2b:1c:98:c2:f4:f1:54:00:14:3e:7e:3b:0c:8f:07:
         65:1b:ba:ca:2d:33:d3:3d:53:8c:8f:81:a2:01:ce:e1:ad:e4:
         2a:24:cf:73:92:42:55:22:4d:79:b4:02:05:88:7c:f4:fa:9f:
         4a:c3:47:f7:a7:38:06:d8:03:d7:96:97:36:7a:58:f1:06:38:
         0f:c0:3d:3e:1e:04:0a:9b:a7:5f:11:6a:96:3f:77:98:8b:c9:
         a1:d8:77:12:63:3f:4b:d9:55:c3:79:d8:20:28:39:5d:c0:28:
         46:3f:49:f4:03:9b:1d:fa:77:e8:46:7f:ce:ac:42:cc:26:ed:
         92:98:f4:75:95:b8:02:d1:f4:37:8b:63:19:d7:e8:fe:44:07:
         e3:8d:1a:16:fd:18:39:68:0a:63:3a:ae:01:98:a3:0b:ad:d5:
         65:20:d5:31:90:f2:44:11:3b:1e:5e:4a:a8:c3:9d:b0:0f:9a:
         55:f8:fb:fe:84:e2:54:cf:31:3a:c7:68:18:d7:ec:22:08:e3:
         3d:67:6b:78:25:42:19:0d:75:ac:dc:8e:b4:88:3b:f0:e0:e5:
         0a:b2:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org