Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/01b943ea4b35275ce42bd5ded3d8f486156be9ef.roa
File:                     01b943ea4b35275ce42bd5ded3d8f486156be9ef.roa (raw, json)
Hash identifier:          auWtQ/QNshXGpr+s00QEOZGRO3ffKvpyAYngSBaHI8s=
Subject key identifier:   C6:11:D4:DD:AD:66:5B:A5:B2:63:99:4D:9B:24:FE:35:66:FB:83:CD
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       165F80
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/01b943ea4b35275ce42bd5ded3d8f486156be9ef.roa
Signing time:             Fri 27 May 2022 20:00:15 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     52439
IP address blocks:        201.218.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466240 (0x165f80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=01b943ea4b35275ce42bd5ded3d8f486156be9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:83:47:a3:57:e7:45:93:b1:db:92:88:7e:
                    fa:6f:fa:fe:94:ae:e7:dc:a4:26:54:74:42:e4:43:
                    f8:9a:e0:4c:c0:5f:5b:c4:40:37:99:2a:b3:2c:de:
                    b4:71:31:87:9d:f3:7c:ba:29:27:87:58:49:2d:6a:
                    53:f0:94:0f:58:12:09:86:a8:07:41:2e:e4:74:c2:
                    9a:14:4b:45:05:6c:f9:46:0f:d6:d9:10:60:39:02:
                    61:9d:57:96:dd:1f:62:13:d3:2d:b7:04:fe:06:ca:
                    06:9a:bf:87:00:e3:8e:b4:c1:39:41:ec:42:d5:75:
                    89:29:35:e8:f3:15:ac:a9:4d:c9:cc:a2:da:d5:b9:
                    f7:7e:ef:54:e8:ef:4d:dd:6a:4b:6a:e6:f4:e9:f2:
                    3e:f7:ef:d7:b1:fe:19:98:af:b7:cb:f7:ac:97:de:
                    43:d0:6a:75:36:b3:24:c2:b7:fc:a2:57:6d:f0:1b:
                    ec:e7:7c:21:98:43:52:5d:d3:ce:c0:55:d5:a7:84:
                    e1:c9:4b:55:1f:d4:95:9e:6b:9d:b6:2e:1c:82:33:
                    02:c7:a6:df:a1:1e:8c:8c:0f:65:31:8c:48:6b:c6:
                    da:6f:70:f7:52:0c:ee:48:f0:77:f2:95:5c:f4:5d:
                    c3:76:4b:d7:80:76:d0:1a:b5:ac:1e:01:34:46:ea:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:11:D4:DD:AD:66:5B:A5:B2:63:99:4D:9B:24:FE:35:66:FB:83:CD
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/01b943ea4b35275ce42bd5ded3d8f486156be9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:7a:54:b6:c5:bf:91:f0:20:17:91:1a:66:7a:eb:f5:eb:
         67:97:d0:12:ce:3f:6a:4a:fe:4d:61:98:5b:3a:26:6e:24:21:
         52:ef:b5:68:4d:6a:94:c2:92:93:5a:24:da:a0:3d:0d:94:c5:
         bb:1a:c8:08:57:cf:ff:44:d9:c2:3c:5d:dc:f7:f3:6f:4e:ae:
         12:17:15:0b:f5:c9:84:d9:5d:c0:9a:2c:c1:04:3f:29:78:03:
         49:a2:b9:aa:46:bc:40:be:f1:2d:e0:83:46:3b:43:d6:51:34:
         2d:84:44:62:00:1c:6e:1e:c5:ae:e4:00:24:6b:9b:8c:db:de:
         3f:4b:65:0e:a6:30:83:5e:ab:b2:7c:f7:bb:ac:4c:d1:a8:14:
         86:3e:10:9c:b3:79:6e:4d:76:af:49:58:f5:fd:bd:93:19:10:
         3a:88:9c:65:b7:d9:06:60:f2:a7:3b:7d:02:e8:04:d7:0c:b1:
         9a:a0:26:39:07:a4:d8:1b:77:6b:32:8f:2b:13:b5:07:75:18:
         2b:78:01:45:95:b2:a2:41:6c:60:49:29:6a:fa:03:70:bd:b6:
         c9:ef:1c:4a:81:5e:e6:5f:77:83:d8:85:92:e7:47:4c:c6:2d:
         cf:5a:81:8c:2f:eb:21:8c:78:39:97:de:e6:09:1a:bc:af:d2:
         67:68:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org