Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/67d9c6ec3ec945100f69fb772fed59876beff16f.roa
File:                     67d9c6ec3ec945100f69fb772fed59876beff16f.roa (raw, json)
Hash identifier:          achAkU/FgTkZdmNfR+jjmjJvwaBcGPav3ibaeS/+OHM=
Subject key identifier:   35:0A:D9:B3:91:47:B3:90:62:F6:C8:31:A4:73:54:9D:13:54:F6:C2
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       165441
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/67d9c6ec3ec945100f69fb772fed59876beff16f.roa
Signing time:             Fri 27 May 2022 19:59:01 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     271842
IP address blocks:        201.218.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463361 (0x165441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=67d9c6ec3ec945100f69fb772fed59876beff16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:6e:d4:62:23:5e:71:9c:42:ad:87:2a:5f:
                    95:0f:c3:e9:bb:c8:10:c7:e2:01:29:2d:2a:e1:b1:
                    e3:f7:d2:08:59:34:b6:cb:3d:bc:83:00:ee:d0:6c:
                    cb:f9:d9:f6:e4:be:d9:b2:a2:ce:94:03:c4:36:74:
                    71:70:63:d2:d4:89:81:7d:96:7e:6f:22:1c:5a:cb:
                    e2:29:e4:a9:91:36:68:ea:63:02:c1:64:39:39:d6:
                    fe:e8:33:04:e3:ff:1f:76:cc:e3:8a:80:09:7f:6f:
                    5a:08:bf:33:85:f2:90:a6:7c:79:ce:31:1f:11:1b:
                    d0:33:ac:01:c9:12:97:1b:eb:ae:b5:09:15:17:b6:
                    81:56:61:58:80:90:60:55:f9:63:e1:39:56:ea:b5:
                    14:db:cf:7f:9d:d9:7d:84:c1:d6:56:81:2e:70:81:
                    d4:52:f3:f6:93:14:b0:79:86:a7:bb:6c:0e:b1:1f:
                    88:32:ed:ee:0d:1b:70:2f:59:00:b2:1f:1e:7f:88:
                    b6:b3:1f:e3:31:b6:3c:22:41:9a:01:db:65:c5:b6:
                    1a:cd:96:d0:53:76:53:cd:83:4b:a7:1c:9e:73:e6:
                    4c:ed:7d:17:ab:cd:ae:51:71:3a:91:07:c4:08:53:
                    3f:a9:b4:56:68:8f:e7:d9:03:dd:81:83:16:d4:5b:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0A:D9:B3:91:47:B3:90:62:F6:C8:31:A4:73:54:9D:13:54:F6:C2
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/67d9c6ec3ec945100f69fb772fed59876beff16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:5e:64:d3:82:f6:b9:e5:7b:8b:8d:31:f2:33:5d:85:15:
         e0:b9:b0:d8:68:15:94:0e:8a:6f:37:b5:e8:fd:06:b7:ef:01:
         0d:e9:4a:e7:2d:e9:5d:1a:dc:aa:3e:48:c1:ad:af:e2:f5:68:
         96:04:93:3f:d4:7b:a7:30:3f:56:2a:01:75:5c:ad:37:ec:41:
         c8:17:0a:b7:e7:a4:72:fd:19:b8:d7:dc:63:73:5f:36:24:8b:
         a1:20:ed:c0:74:86:b2:1e:e2:4a:2b:ad:dc:32:a0:ba:e4:43:
         3e:8b:60:7f:72:51:38:7d:b2:ca:6c:64:b6:29:2a:3a:d4:d5:
         b0:a0:7e:b1:b4:d9:5b:da:6c:d1:e4:41:00:3a:04:41:dd:5c:
         23:a8:7f:e2:e9:72:5a:08:bf:5c:89:e2:02:26:71:98:f2:cc:
         ad:82:32:68:a6:6e:0f:e8:48:21:c2:a4:8d:3c:e2:63:c5:2f:
         a6:ec:af:54:45:5f:4d:be:d9:a5:87:bc:97:8a:9b:ba:99:a9:
         4c:dd:95:e9:51:28:76:98:82:cf:46:66:69:f8:da:00:24:7b:
         52:d1:1b:07:1c:20:1d:31:6e:e1:42:77:ba:1c:eb:e0:b2:8e:
         c9:9f:e4:f1:f7:55:9f:f4:18:c8:de:5c:2e:b2:c7:db:c9:38:
         ff:c5:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org