Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/71828ecfec244b25184d6a01cd86f8a900c2dbda.roa
File:                     71828ecfec244b25184d6a01cd86f8a900c2dbda.roa (raw, json)
Hash identifier:          5lZj9Oo9xTfiWTVtUaJylQUYnE9VxjbfTEji60ZMsXg=
Subject key identifier:   83:B4:EC:D5:58:0C:71:2E:C5:CC:F6:5D:F8:F1:37:9D:AB:70:22:AD
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1C3516
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/71828ecfec244b25184d6a01cd86f8a900c2dbda.roa
Signing time:             Thu 05 Jan 2023 21:12:17 +0000
ROA not before:           Wed 04 Jan 2023 21:11:46 +0000
ROA not after:            Sun 05 Jan 2025 21:11:46 +0000
asID:                     272848
IP address blocks:        201.218.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848598 (0x1c3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Jan  4 21:11:46 2023 GMT
            Not After : Jan  5 21:11:46 2025 GMT
        Subject: CN=71828ecfec244b25184d6a01cd86f8a900c2dbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:0c:ed:08:ee:23:f6:b7:22:d4:bb:98:eb:
                    54:33:54:1a:a1:51:5e:2d:36:9d:d3:d1:ea:fe:b0:
                    80:d6:33:ab:f6:4a:88:fd:87:d3:58:7a:e5:dd:31:
                    1e:96:19:cc:b6:06:d8:fa:98:b7:72:f5:54:66:ed:
                    88:ef:e4:0a:90:29:6f:7e:3b:a0:14:f7:e3:47:9a:
                    6c:8a:f4:e5:32:41:f8:a4:00:36:7f:b0:92:b7:98:
                    8b:e9:b9:04:8d:e2:33:7f:a6:42:fa:ed:29:9b:ff:
                    00:0b:aa:36:7d:b2:5a:f8:88:95:7b:b7:49:47:a0:
                    d5:2f:d9:1f:15:e2:a3:02:8f:fd:fd:bc:06:b5:6f:
                    38:76:76:9f:8a:9c:33:4e:4b:86:9d:58:04:27:08:
                    33:69:55:db:a6:70:60:c2:ae:46:0f:b6:27:23:e0:
                    85:28:00:a4:7c:25:af:c8:ae:ad:2d:ab:3e:32:58:
                    c0:57:d2:1b:de:cd:10:8d:ad:79:1b:a9:05:92:fd:
                    28:91:4b:b4:60:98:f6:0d:dc:f2:af:51:93:e8:f7:
                    15:67:31:33:fa:6a:b3:ef:8c:32:a3:bd:3d:eb:fb:
                    9a:76:18:c8:14:b7:1f:47:e9:1a:df:af:e9:dd:92:
                    7a:c6:66:6a:1e:94:17:e7:35:bb:4f:ae:f5:3f:5c:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B4:EC:D5:58:0C:71:2E:C5:CC:F6:5D:F8:F1:37:9D:AB:70:22:AD
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/71828ecfec244b25184d6a01cd86f8a900c2dbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:19:a4:16:b0:c9:ea:e9:17:30:74:5d:13:67:86:bd:ee:
         64:c1:df:09:cc:3a:a2:0e:da:b2:84:84:2f:d7:19:92:82:df:
         08:2f:2a:4b:55:78:97:8b:3b:bc:30:af:10:fe:7b:de:68:21:
         d5:c3:2f:3a:90:08:cb:ab:77:67:87:4e:43:34:e8:f5:96:c1:
         d1:35:8b:30:4f:dd:83:59:9f:6c:56:05:54:1f:e5:d8:63:ba:
         bc:c4:ca:41:b6:72:c5:3e:11:4f:01:b0:5b:b9:47:f1:67:b7:
         d9:f6:ba:7b:e2:48:0f:cd:53:15:5e:25:c3:18:d0:56:11:2c:
         1f:6e:9b:ce:ea:6b:bf:e9:5b:59:e0:72:03:5a:6d:4c:4c:17:
         4b:d5:30:13:d7:53:d4:6f:64:91:72:0c:4a:b8:56:15:61:f0:
         50:8d:e6:2f:06:bf:42:7a:1b:60:8d:fd:78:b8:25:0e:d3:a0:
         30:ef:34:cf:e8:28:d2:e1:69:02:11:6d:c3:de:80:09:03:d5:
         1a:e0:02:44:1d:48:d5:7c:1e:c6:76:3a:15:ab:f2:02:02:14:
         08:41:cb:55:91:79:3e:2d:f2:2f:76:d7:f2:c9:2d:ae:cb:43:
         20:c0:94:a4:79:4d:7c:7c:5d:94:c5:ad:d2:b3:49:74:b1:0d:
         8e:f8:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org