Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/7a5969d10ef8acc6e3cf4445103508a1420e1fab.roa
File:                     7a5969d10ef8acc6e3cf4445103508a1420e1fab.roa (raw, json)
Hash identifier:          qpuUgLlZ6aa0plK+X2Hps8hoTH5NtDXu8xEVntsIhPw=
Subject key identifier:   45:F8:3E:D1:D0:84:E1:47:C5:51:94:8A:DC:CB:7A:D7:5E:E1:72:8D
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       17B6C3
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/7a5969d10ef8acc6e3cf4445103508a1420e1fab.roa
Signing time:             Mon 18 Jul 2022 08:30:00 +0000
ROA not before:           Mon 18 Jul 2022 08:30:00 +0000
ROA not after:            Wed 17 Jul 2024 08:30:00 +0000
asID:                     269862
IP address blocks:        201.218.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554115 (0x17b6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Jul 18 08:30:00 2022 GMT
            Not After : Jul 17 08:30:00 2024 GMT
        Subject: CN=7a5969d10ef8acc6e3cf4445103508a1420e1fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:21:a0:cc:8b:69:ab:d6:f4:3f:05:5f:7e:
                    ff:75:da:2c:96:9b:50:11:a3:38:46:da:bc:35:89:
                    f3:11:03:98:65:a1:6c:21:bb:63:7d:cb:3f:06:ed:
                    ec:97:11:5b:a2:7f:23:40:86:64:02:cf:a8:ad:9a:
                    77:04:47:b9:3d:a4:56:0e:ee:5d:7a:0e:03:59:6d:
                    ff:51:03:a7:a3:09:81:a2:d3:d8:1c:2a:84:38:33:
                    b8:7e:2f:30:db:3d:aa:01:7e:74:d0:36:1d:84:66:
                    28:a8:b5:a9:a5:72:f2:c3:00:3b:35:ce:7a:51:14:
                    6a:44:8b:a5:ca:04:ec:94:f2:e7:82:f3:dc:89:c2:
                    8b:34:a9:02:d0:e4:8f:54:2b:ac:88:5b:17:7b:b3:
                    f5:53:6b:49:ce:ad:c2:de:96:f7:60:9b:d1:78:fa:
                    e7:0a:bb:54:8a:2e:1b:3b:63:af:a5:c7:8e:75:93:
                    39:8c:5c:ed:ac:70:91:77:b0:16:ba:13:8b:65:e1:
                    8b:df:cb:0a:7a:56:3d:ee:62:bf:ab:2c:6c:f8:3f:
                    ec:ec:d0:91:25:3f:ba:ce:8a:9e:79:c7:33:aa:fa:
                    07:98:06:37:b5:a3:1e:58:7c:58:2c:82:79:c4:01:
                    dd:f6:c9:76:ae:9a:f8:04:1e:63:29:38:03:e4:13:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:3E:D1:D0:84:E1:47:C5:51:94:8A:DC:CB:7A:D7:5E:E1:72:8D
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/7a5969d10ef8acc6e3cf4445103508a1420e1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:46:a8:5e:19:95:d5:49:7f:6d:02:4b:06:e2:6f:ab:fc:
         de:a7:b4:c4:e9:f1:16:dc:ad:6d:fb:89:fe:45:c8:57:10:94:
         c5:d8:ad:bd:87:fd:50:50:3f:b2:74:67:8b:66:0d:0e:4d:8b:
         41:36:73:7a:9b:b0:1f:38:96:75:f4:a6:66:af:32:69:0c:6f:
         56:e8:0f:44:71:8c:01:fe:54:e0:c0:9c:7f:91:98:2a:ef:5d:
         83:64:e2:a6:95:ed:ee:9a:a7:66:79:a0:87:93:21:00:0d:1f:
         5d:cb:43:c7:8e:e5:6f:0a:d1:61:4a:79:4a:e7:97:ed:7f:4b:
         58:1e:83:7b:a0:5a:c4:cf:ac:ea:9f:ef:e8:69:0a:40:6f:ca:
         38:d4:e2:d9:f2:ba:6c:82:da:3d:19:6b:19:bd:82:23:90:20:
         f2:11:a4:19:96:c1:c5:b1:1a:df:0a:ea:75:4e:85:c5:36:c7:
         49:10:1f:9e:0f:c9:1a:20:9c:05:a4:8b:90:f5:92:46:a0:f0:
         59:4a:10:22:92:03:b4:3d:e4:5b:27:57:40:44:48:9d:94:f7:
         af:0c:42:05:0d:e5:d1:88:58:28:80:ad:6f:6a:95:36:58:21:
         6a:04:a1:8e:df:20:28:61:f6:da:a9:c3:1c:5e:6f:16:ac:3a:
         75:6b:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org