Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/afd0f752683e4bba62fce4f88c3f74c8e7c46991.roa
File:                     afd0f752683e4bba62fce4f88c3f74c8e7c46991.roa (raw, json)
Hash identifier:          FE6/WT4NuES5cAc7z5yAfZ2arDaciuGyM7io7NA2ckc=
Subject key identifier:   CF:DA:33:AF:A9:5C:E8:50:69:94:4D:76:7F:BD:F6:82:D0:2C:E7:37
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1A8835
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/afd0f752683e4bba62fce4f88c3f74c8e7c46991.roa
Signing time:             Fri 04 Nov 2022 12:00:53 +0000
ROA not before:           Thu 03 Nov 2022 11:58:57 +0000
ROA not after:            Mon 04 Nov 2024 11:58:57 +0000
asID:                     272848
IP address blocks:        201.218.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738805 (0x1a8835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Nov  3 11:58:57 2022 GMT
            Not After : Nov  4 11:58:57 2024 GMT
        Subject: CN=afd0f752683e4bba62fce4f88c3f74c8e7c46991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:19:cf:c3:97:22:47:16:d4:a7:bb:bf:95:
                    c5:0f:bb:74:5c:80:42:30:5f:a3:51:08:be:2b:31:
                    1a:9c:4d:ee:9b:08:c8:f4:64:4d:0d:25:de:da:f2:
                    cb:76:91:d9:fb:32:f5:e2:46:42:6d:ac:39:da:2d:
                    20:f6:43:7e:7a:ae:82:1b:08:1d:b7:6b:bd:35:85:
                    8b:4e:eb:80:f0:44:c4:e1:bd:5f:70:8a:40:15:7d:
                    4e:ae:21:22:10:d9:06:47:1a:da:58:8f:93:39:23:
                    ad:7d:7d:84:8c:67:ff:a8:4b:36:7b:cf:2c:fd:51:
                    b1:0f:e5:83:3c:00:03:b7:66:b3:e8:c4:3c:44:6d:
                    99:6c:11:19:45:e6:7a:b0:1f:96:71:45:bd:9b:20:
                    5b:47:97:91:e9:73:af:3e:83:43:8b:9a:24:20:85:
                    1a:8e:2e:27:4c:67:6c:b6:ae:b0:30:51:7e:1f:c3:
                    0b:87:0e:c4:d6:12:cb:fe:ff:7b:31:a1:6f:d6:12:
                    e9:0b:7d:b6:16:2f:03:a2:59:4e:a2:53:89:a0:cb:
                    b3:b6:74:f1:d9:2e:5c:7f:57:02:38:d1:b1:34:9c:
                    df:17:b9:cd:05:cf:fb:e3:51:fb:1e:f3:28:21:b9:
                    ea:83:2d:46:86:f5:60:25:93:bd:9d:dd:ed:48:e5:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:33:AF:A9:5C:E8:50:69:94:4D:76:7F:BD:F6:82:D0:2C:E7:37
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/afd0f752683e4bba62fce4f88c3f74c8e7c46991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:77:fa:36:7a:54:78:bd:25:dd:17:24:30:05:63:88:30:79:
         f7:ad:18:da:17:92:89:2d:88:e9:9d:79:c3:60:6c:39:6a:d5:
         12:9e:2b:49:3b:d1:b0:16:ea:33:9f:dd:f2:3c:31:8b:43:95:
         62:84:e7:79:9b:e6:8f:5b:3b:07:0b:ff:be:cc:e3:4b:80:b0:
         5e:a7:66:f1:71:3e:74:e5:d8:1c:a8:aa:a6:31:55:b4:cd:08:
         8a:69:af:ef:58:78:8b:99:21:51:f5:6b:b5:b9:4e:c1:bb:7f:
         4f:a6:11:9f:a5:2d:b1:76:f4:2b:8d:26:bc:fa:15:d6:21:d7:
         cb:e4:78:4c:50:31:13:13:fe:af:0e:72:da:4b:e4:b6:19:5a:
         2d:16:cc:72:21:e0:25:19:b8:0d:38:a8:aa:47:2d:ca:54:2d:
         b4:6b:75:7f:47:a5:71:ad:57:57:dd:ff:b5:2d:e3:f2:f0:74:
         d4:0d:3a:27:77:ad:1d:50:f6:c4:93:51:9b:12:19:30:e9:42:
         34:37:0b:15:ab:4d:4c:0e:46:cf:ec:48:af:22:27:c8:a4:20:
         0e:a2:f1:3c:97:e3:4e:d4:97:81:0b:8b:cd:40:73:65:27:47:
         09:8d:e7:13:85:10:0a:68:0a:e1:12:1c:70:d1:e3:5b:1f:51:
         24:71:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org