Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/0d4aa4ed86ac422ca5fa7fda623477ba508ed0f1.roa
File:                     0d4aa4ed86ac422ca5fa7fda623477ba508ed0f1.roa (raw, json)
Hash identifier:          mWy22lUDKSLEZKQAILix68QDz2p8nt3Fw4L/DVRwF14=
Subject key identifier:   0E:A0:8F:47:D7:CA:2D:F0:39:24:04:D2:CF:02:5A:52:22:C3:72:76
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       19EDCF
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/0d4aa4ed86ac422ca5fa7fda623477ba508ed0f1.roa
Signing time:             Tue 11 Oct 2022 17:37:29 +0000
ROA not before:           Tue 11 Oct 2022 17:35:36 +0000
ROA not after:            Fri 11 Oct 2024 17:35:36 +0000
asID:                     272848
IP address blocks:        201.218.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699279 (0x19edcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Oct 11 17:35:36 2022 GMT
            Not After : Oct 11 17:35:36 2024 GMT
        Subject: CN=0d4aa4ed86ac422ca5fa7fda623477ba508ed0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:8b:a6:6f:e6:df:d2:0e:95:e6:d4:9b:91:
                    b4:ee:a3:33:6d:51:72:d3:60:4e:a8:45:d8:6d:9c:
                    a8:6a:ea:fe:4c:cb:f9:67:b8:0e:de:01:04:6b:96:
                    e0:b4:a1:f5:a8:ec:71:b9:a2:c1:e2:5a:1a:de:ab:
                    7e:01:19:46:6e:88:f3:7d:be:06:c6:6d:2d:f5:00:
                    e0:4a:a2:4f:a4:35:72:6f:88:63:9b:75:3a:11:56:
                    2c:3a:62:87:94:27:7d:2f:07:85:26:b9:92:cf:d3:
                    fc:87:0f:80:ea:01:fe:32:16:22:91:12:fe:1c:3f:
                    94:1a:c3:63:b4:93:ae:13:de:fe:ce:01:d0:d4:1e:
                    13:53:7d:6c:8b:b6:8d:b2:63:21:12:06:84:b2:29:
                    2c:da:c9:ec:1c:09:3e:6a:1e:1e:24:53:8a:a5:53:
                    08:b3:52:e8:11:29:b6:22:31:fa:75:a1:c4:94:89:
                    c6:0c:da:88:0c:4b:ca:52:68:4d:4b:37:03:4e:7c:
                    08:1f:e8:bf:bd:98:f3:e1:f2:20:77:f4:6e:de:06:
                    fc:ac:41:8a:33:fb:77:ff:7a:bd:b8:9a:16:cc:fc:
                    1c:90:df:bc:f7:cd:3a:df:67:32:76:e4:da:a7:18:
                    f7:32:0b:83:18:32:15:51:31:86:ab:af:87:f2:30:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:8F:47:D7:CA:2D:F0:39:24:04:D2:CF:02:5A:52:22:C3:72:76
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/0d4aa4ed86ac422ca5fa7fda623477ba508ed0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:47:ee:b7:eb:ab:f0:87:06:db:b8:4d:33:69:e7:2a:86:
         7f:22:c8:35:8d:e0:d1:56:f5:83:4f:c4:3c:e7:3d:56:46:ec:
         85:4c:7f:36:ed:9e:e7:22:8d:c8:4b:65:c9:6f:e5:8e:ff:30:
         4e:2a:25:99:3d:93:55:dc:fd:bf:b3:35:77:57:34:2b:94:33:
         d7:54:d5:2d:33:c2:eb:37:e4:33:46:a1:9f:8e:3f:23:ab:20:
         7a:7e:5c:79:5b:89:87:23:f6:16:1e:0d:e5:61:7e:c2:52:b9:
         3f:69:3a:ab:ab:ce:6a:3b:7f:68:7a:f0:83:52:04:c7:de:c2:
         0a:7b:59:c3:3f:38:79:87:d8:01:22:72:b8:73:e5:91:e2:ee:
         4a:24:74:1f:9e:51:7c:50:dc:ba:61:0a:78:29:49:d1:af:38:
         4f:4e:2f:75:cb:ff:f9:b0:52:9f:61:68:ed:2c:74:14:36:b2:
         8b:67:dc:0d:b3:cc:a5:3a:4d:92:ad:87:70:33:dc:a3:cc:08:
         60:f6:a2:3f:98:28:1f:86:e8:f3:c2:5a:13:e0:89:9d:c8:90:
         b3:3d:53:c1:ea:3a:0f:1f:8c:fc:20:ff:a5:81:9b:54:6e:9d:
         c0:41:1a:c0:ad:62:78:a9:a7:2a:b3:fe:91:61:14:96:78:55:
         9b:2a:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org