Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/975043a4621dce85e40846c3fa806638e9ee7af6.roa
File:                     975043a4621dce85e40846c3fa806638e9ee7af6.roa (raw, json)
Hash identifier:          d3kVoD6fuyVdGEAtMlR6KQBvqTiOq3zS+ZmN53ozCG4=
Subject key identifier:   81:8D:12:D6:15:82:C5:07:73:CD:23:68:1E:9E:A5:F5:D6:F5:AD:BB
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1C0917
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/975043a4621dce85e40846c3fa806638e9ee7af6.roa
Signing time:             Sat 31 Dec 2022 07:30:02 +0000
ROA not before:           Fri 30 Dec 2022 07:30:02 +0000
ROA not after:            Sun 29 Dec 2024 07:30:02 +0000
asID:                     269862
IP address blocks:        201.218.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837335 (0x1c0917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Dec 30 07:30:02 2022 GMT
            Not After : Dec 29 07:30:02 2024 GMT
        Subject: CN=975043a4621dce85e40846c3fa806638e9ee7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:a6:db:6b:55:07:ee:19:8c:7a:38:b4:5e:
                    8f:aa:27:ef:d7:54:37:3b:48:56:dd:ef:49:26:cd:
                    8f:b5:e9:14:c5:a5:ec:71:b5:a0:3f:57:10:db:b4:
                    1c:4f:74:23:f2:d1:11:91:11:b9:54:9b:8d:b5:a6:
                    7c:e0:9f:da:63:b6:21:aa:20:01:a7:1f:79:46:c4:
                    99:5d:4c:02:3d:9e:fc:fb:ce:c9:93:41:61:0c:52:
                    0b:4a:85:c1:c0:fa:26:c7:62:59:0a:a2:37:8d:9c:
                    f3:16:3f:c1:16:86:1d:f5:85:58:ac:09:93:bc:98:
                    32:c4:6a:4c:0f:41:40:6f:3d:55:2b:bb:e3:6c:8c:
                    e7:e1:91:ee:59:7c:fb:dd:77:8d:1c:05:ce:01:89:
                    43:55:20:33:cf:b9:dd:df:36:89:49:f3:58:ca:9c:
                    06:f8:be:d7:0d:5f:aa:4f:66:6a:8a:e7:f2:cd:73:
                    4d:4f:94:45:81:98:58:53:2b:47:49:c9:35:12:18:
                    45:f6:d1:f6:3b:71:f4:08:58:76:28:dd:21:d2:1f:
                    17:e4:b1:6e:45:f9:b5:87:e9:b2:04:ad:a2:75:8d:
                    0e:bd:fe:9f:75:d5:cc:1c:4a:a4:d5:c9:00:f2:00:
                    ed:5f:a4:ea:25:65:ab:b5:44:70:51:7c:3e:d4:49:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8D:12:D6:15:82:C5:07:73:CD:23:68:1E:9E:A5:F5:D6:F5:AD:BB
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/975043a4621dce85e40846c3fa806638e9ee7af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:25:23:15:1b:29:17:f1:ad:fc:af:ff:62:a3:f0:24:ed:
         1d:50:2a:fc:58:dc:68:ad:5a:37:83:e5:15:41:b4:bd:e6:86:
         76:62:af:54:79:4a:37:3e:96:e8:68:e1:c4:7d:44:59:5b:62:
         bb:20:ec:8e:13:38:ee:e7:48:73:05:38:f2:39:3f:15:62:6b:
         5a:8f:86:46:06:9e:4a:ad:bc:7b:f0:81:3c:2b:59:c0:af:9d:
         6c:e3:f6:f4:ea:f8:4a:b2:11:9f:14:c3:53:42:35:61:ba:20:
         b7:92:76:45:eb:59:8c:ac:af:96:72:d5:09:82:ee:b6:8d:6d:
         7e:16:ee:f4:b0:83:b8:66:a1:55:70:6a:a4:77:bc:b8:59:42:
         f3:de:ef:5e:e0:a2:66:a5:fe:7b:c7:27:f5:fb:0b:0a:56:07:
         72:38:6a:51:60:07:ca:13:08:c8:ef:7f:15:d7:67:93:9a:fa:
         f5:db:22:6e:2e:aa:70:9c:25:af:ff:0b:4a:e5:72:07:b2:8b:
         bb:ee:ce:8c:c9:23:99:b5:12:86:49:bc:ec:59:d1:f2:44:94:
         fc:08:15:24:cd:6b:b2:b4:fc:59:e0:de:51:5f:f0:70:b1:10:
         5f:3d:3c:41:88:81:c6:a2:09:1b:43:31:77:c8:bb:76:f3:b8:
         6e:bd:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org