Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/385d5fa673fa65af80f2f99c592329bc48e0c103.roa
File:                     385d5fa673fa65af80f2f99c592329bc48e0c103.roa (raw, json)
Hash identifier:          elk6rgbBhTazyEhhIA4hcfikGtWqBe5Mz2FaIQ88lJY=
Subject key identifier:   6E:D7:5D:66:E2:88:65:75:31:30:8E:71:CA:05:E1:72:D0:6F:93:1E
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1FADFF
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/385d5fa673fa65af80f2f99c592329bc48e0c103.roa
Signing time:             Fri 26 May 2023 08:30:04 +0000
ROA not before:           Thu 25 May 2023 08:30:04 +0000
ROA not after:            Sat 24 May 2025 08:30:04 +0000
asID:                     64130
IP address blocks:        201.218.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076159 (0x1fadff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 25 08:30:04 2023 GMT
            Not After : May 24 08:30:04 2025 GMT
        Subject: CN=385d5fa673fa65af80f2f99c592329bc48e0c103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:13:a1:89:c2:fe:a8:13:43:11:c8:83:85:
                    ac:8d:9f:a9:5f:c2:e7:12:cb:84:bf:4f:4b:0a:85:
                    8c:1f:97:53:90:38:02:e9:11:cb:08:98:d6:7a:34:
                    91:bf:f5:e4:0e:4c:0d:61:5f:00:5e:2e:66:48:03:
                    3a:24:46:05:56:8a:e9:a8:31:93:2c:dc:51:30:a7:
                    94:1c:b0:58:6d:7b:86:1e:1c:1d:22:bd:c1:d3:bd:
                    89:3c:e4:22:9d:c5:98:6d:57:93:e8:a4:1b:88:2a:
                    20:c5:d9:cd:0a:74:16:30:49:e3:ff:9b:95:13:7f:
                    fc:d5:73:8f:90:bb:5b:cf:61:93:ac:bc:8e:f0:64:
                    96:8f:01:5d:a6:5b:fc:3b:b6:c2:65:12:9b:83:ed:
                    8c:73:05:53:a8:7a:49:26:36:fd:29:01:1a:b2:a5:
                    1c:5e:91:8d:f5:5f:d0:df:f8:9c:05:59:d9:fa:dc:
                    be:43:53:ab:28:aa:ed:f0:b7:3d:a9:e3:95:f8:49:
                    ef:71:63:88:28:5d:88:45:29:6f:7b:ab:c6:86:0b:
                    c1:12:32:90:61:49:de:e4:87:88:bb:71:bd:05:12:
                    24:fa:66:d2:8f:0d:e7:67:d9:1c:c9:fa:e5:cd:e7:
                    b9:5d:27:61:78:09:3a:96:25:40:23:ba:ba:40:6b:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D7:5D:66:E2:88:65:75:31:30:8E:71:CA:05:E1:72:D0:6F:93:1E
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/385d5fa673fa65af80f2f99c592329bc48e0c103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:84:2d:d7:30:29:f0:b7:b9:f9:31:39:21:3f:d4:2d:24:7d:
         9d:cb:be:9f:4a:8b:7d:4a:11:75:16:54:fd:8d:99:c1:0b:83:
         83:34:13:f3:a2:5e:8c:c6:58:b9:53:4a:13:bd:e1:72:71:71:
         a9:83:49:10:ac:92:67:df:c0:fc:4a:a4:45:ca:09:d4:c0:0a:
         7a:38:9d:d5:fe:1a:e1:5e:13:f8:8a:a1:33:de:94:27:00:ee:
         a6:44:25:6e:d8:45:84:97:00:3f:60:9d:71:36:f7:89:41:ae:
         ee:a9:8b:9c:1d:38:44:67:a5:df:dd:b4:69:11:39:be:07:66:
         8f:ee:5f:ed:0e:a7:7d:53:89:58:44:f3:92:84:ca:2f:78:69:
         ff:7c:b8:3c:f7:de:b4:7a:d2:fa:67:6d:d8:00:e3:b9:aa:26:
         8b:09:f6:a1:da:cd:a2:9a:e1:0a:c1:08:93:3f:e1:fb:fd:8c:
         cc:e2:13:4c:5d:31:46:9d:1c:1e:06:56:c0:f1:6c:f1:6c:ab:
         c5:48:b1:3c:94:86:d5:96:29:d2:77:9c:d0:e1:49:d5:61:90:
         a1:b8:a3:9c:44:4e:3c:d9:78:a5:aa:cf:a7:04:b3:77:c1:6e:
         57:2b:ec:71:61:60:09:1c:9b:ec:53:0b:02:ae:55:58:0d:d8:
         48:49:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org