Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/48fd9a6ad9150a33f848fb85c903bf307555dea1.roa
File:                     48fd9a6ad9150a33f848fb85c903bf307555dea1.roa (raw, json)
Hash identifier:          9ZmXD1qJ5EL3W8QEAQT79BPHp6yX5KmEHLWtMZZsX+Q=
Subject key identifier:   23:E4:64:0E:E0:85:A7:16:E6:C7:56:70:A8:34:7B:00:51:71:95:48
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       166839
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/48fd9a6ad9150a33f848fb85c903bf307555dea1.roa
Signing time:             Fri 27 May 2022 20:01:46 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     271842
IP address blocks:        201.218.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468473 (0x166839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=48fd9a6ad9150a33f848fb85c903bf307555dea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:0a:94:a5:0d:45:2d:32:cd:ed:27:d4:55:
                    5d:3c:33:90:31:0e:5d:97:01:81:34:92:31:11:11:
                    7a:56:02:b9:c0:9b:71:a7:24:c6:d8:6b:50:c2:1c:
                    23:97:35:52:c8:d3:cd:80:a2:9e:13:42:57:5e:34:
                    65:e4:0a:a2:09:5a:85:c7:26:ed:58:52:17:d6:c8:
                    01:88:f4:13:b1:0b:9c:0c:bd:ef:54:56:c3:0c:2b:
                    5b:50:5e:cb:02:ed:48:95:2f:54:a9:48:f6:68:15:
                    54:c2:cc:1c:87:87:a3:a3:4c:36:cb:da:15:5d:e0:
                    29:81:10:33:d4:29:d9:83:cf:ff:51:50:8c:94:50:
                    a4:fc:7e:5c:35:fc:e1:ac:4b:89:d3:13:18:a2:89:
                    d7:cb:d2:09:b3:af:a2:9b:0a:fc:db:a2:45:d5:3b:
                    75:2a:d5:24:a3:72:92:04:67:b4:d1:bd:44:86:f5:
                    59:3e:e0:f3:d5:fd:4e:9c:36:b8:d1:21:91:ba:cd:
                    70:81:0c:cb:cd:ee:f3:8c:3c:2a:ac:4c:90:6b:56:
                    14:f2:b2:03:d3:e8:61:d6:a6:26:06:44:dd:74:67:
                    3c:d1:83:35:df:b6:27:95:ce:df:67:14:a2:ef:31:
                    c7:a9:82:ca:76:c6:b4:99:34:1f:0c:eb:91:55:f5:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E4:64:0E:E0:85:A7:16:E6:C7:56:70:A8:34:7B:00:51:71:95:48
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/48fd9a6ad9150a33f848fb85c903bf307555dea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:39:2f:b5:d8:a1:a7:36:bf:4a:f7:6a:23:83:65:bd:26:
         fb:c2:c3:ad:06:b8:e2:eb:3e:b7:05:52:26:b1:43:82:4e:a2:
         91:80:f7:e7:57:12:ec:5a:c4:0d:3c:a3:50:6a:af:51:ea:33:
         4e:20:9a:d7:cb:52:99:c9:e1:42:b5:4b:cf:84:16:8c:93:21:
         cb:44:52:db:e1:d7:72:6b:33:76:4d:80:5b:df:58:f0:82:27:
         d3:15:17:2c:f3:53:9c:e9:fd:bf:3d:7d:68:a2:bb:e9:0b:23:
         92:ca:be:d5:2f:08:51:e5:28:55:d4:f1:64:b5:a6:33:20:3a:
         61:d5:c7:d7:7e:0e:29:d8:94:c8:7b:51:2f:5d:79:40:03:fd:
         83:b4:28:dd:a5:4c:34:fe:e6:ad:7c:56:8c:9d:1e:77:0d:e1:
         65:ae:72:72:b5:de:a2:8d:5e:ab:83:87:40:0c:d6:6c:d8:41:
         19:b5:31:e2:6c:e0:97:05:9c:6e:f4:b8:09:8c:77:6e:4e:71:
         5d:36:ba:6b:a3:75:7e:ab:3d:e1:0b:b9:81:a8:ca:f5:5e:95:
         95:5e:02:3b:3e:61:6e:73:e0:1a:d9:d6:d4:e3:54:74:88:31:
         5b:c4:ad:82:5e:5f:bd:2d:d7:57:8f:20:8b:dc:db:70:98:22:
         e6:08:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org