Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3c4c9b3894b84d6af3a37734fbdd0ebd9d342538.roa
File:                     3c4c9b3894b84d6af3a37734fbdd0ebd9d342538.roa (raw, json)
Hash identifier:          v/bozhMXAaWXAm1ZSnwAp/9c+L5giHydAZ+ziAy31fg=
Subject key identifier:   19:5C:C0:68:B0:E2:D3:07:37:95:4C:CF:DA:7A:EF:E6:88:7A:2B:FC
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       21D51A
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3c4c9b3894b84d6af3a37734fbdd0ebd9d342538.roa
Signing time:             Wed 16 Aug 2023 08:30:00 +0000
ROA not before:           Tue 15 Aug 2023 08:30:00 +0000
ROA not after:            Thu 14 Aug 2025 08:30:00 +0000
asID:                     269862
IP address blocks:        201.218.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217242 (0x21d51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Aug 15 08:30:00 2023 GMT
            Not After : Aug 14 08:30:00 2025 GMT
        Subject: CN=3c4c9b3894b84d6af3a37734fbdd0ebd9d342538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5f:41:61:04:09:96:e9:2b:b5:be:32:ac:f2:
                    11:12:06:a6:42:a1:48:3e:07:0e:47:81:7c:9e:8d:
                    39:3c:bb:be:75:4a:dc:f3:41:7f:e3:42:d5:c8:6d:
                    cf:56:01:40:a1:8b:e0:54:5d:eb:63:6a:65:b0:68:
                    86:24:be:b3:3b:c2:5e:f4:78:ea:3c:1b:84:76:17:
                    50:58:c0:97:99:40:33:df:a9:ac:c7:c7:32:01:1b:
                    9b:2e:21:e6:6a:1b:40:11:22:48:dd:1b:dc:7d:ab:
                    1a:ee:86:41:1f:9e:cf:4d:bb:bc:0f:2c:b1:b6:d9:
                    02:3d:7a:cd:30:26:3b:cc:fc:f6:63:35:a2:a5:d6:
                    ff:62:86:65:6a:b4:c3:7f:20:db:b0:36:b0:17:68:
                    96:ac:48:3a:6e:1b:1b:08:fa:53:fb:77:e0:eb:4d:
                    58:61:8f:a7:1d:22:14:7e:74:ee:66:f3:91:ab:9e:
                    0e:cf:a6:e1:94:d6:41:6a:9e:94:f9:c9:93:7e:bd:
                    3f:35:ce:f6:8a:79:4a:77:ee:be:bf:a0:63:84:4b:
                    d7:26:c3:a8:86:ab:08:52:1c:43:51:0b:6c:43:73:
                    7a:b3:4e:44:93:ae:5c:e4:ab:40:09:37:62:31:dd:
                    3a:b8:e5:98:6f:7b:e9:c6:51:2e:c8:dd:e4:bc:85:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:C0:68:B0:E2:D3:07:37:95:4C:CF:DA:7A:EF:E6:88:7A:2B:FC
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3c4c9b3894b84d6af3a37734fbdd0ebd9d342538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:5b:8b:0b:75:e8:c6:32:c2:9e:d9:26:fa:bf:32:6b:65:
         b6:00:93:5a:3a:0e:87:91:de:9a:50:0f:21:68:24:da:2f:6c:
         b7:fa:05:ef:09:b1:46:a1:bc:c1:8d:88:da:65:06:04:37:59:
         eb:74:4b:28:d7:91:20:f0:f5:5c:f7:d3:0f:50:23:7b:04:7d:
         ad:0a:fc:52:07:2a:83:31:18:f4:8a:11:0c:a9:b0:74:65:10:
         b1:75:2f:55:1e:a2:8f:bd:4f:47:5b:ef:bb:6f:0f:5d:71:14:
         d6:71:01:db:99:25:47:db:62:61:b8:80:d0:80:23:d6:3d:88:
         ec:15:e7:70:13:ea:92:b8:37:7c:27:21:b5:45:df:cc:75:ca:
         07:34:df:15:38:c7:5c:90:d3:da:01:0e:d1:99:9b:c1:ca:1c:
         a1:9f:8c:3f:c4:7c:e8:e6:ad:2b:85:c9:3b:76:38:a7:47:d7:
         b8:7f:56:1f:7a:42:f1:47:d3:53:60:b7:62:fc:fb:5f:c1:d7:
         9a:02:ff:04:db:05:f3:3c:3a:ae:76:79:5b:31:83:0c:d7:bb:
         15:23:fa:85:d9:8c:32:14:53:12:5b:a2:a7:a9:a1:78:bb:c8:
         74:b9:39:aa:72:22:15:bc:ac:e7:39:e9:ac:35:ff:1a:c8:c3:
         3d:a8:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org