Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/b93d3d87a0dd8570b2b4f0e2aefec494c0f23604.roa
File:                     b93d3d87a0dd8570b2b4f0e2aefec494c0f23604.roa (raw, json)
Hash identifier:          RTPnUahxp8aCCaTLeLgvqw7WPF2swMAWWapREzkMOxk=
Subject key identifier:   B4:54:46:B4:11:3C:BC:F7:17:15:2D:BB:90:D9:E5:19:D7:8F:40:EF
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       164E05
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/b93d3d87a0dd8570b2b4f0e2aefec494c0f23604.roa
Signing time:             Fri 27 May 2022 19:57:29 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     64130
IP address blocks:        201.218.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461765 (0x164e05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=b93d3d87a0dd8570b2b4f0e2aefec494c0f23604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:d4:f1:15:ee:1c:e4:2d:ee:c2:22:f5:98:
                    5f:85:49:e0:5d:93:26:b6:cc:69:7c:e0:15:3b:2d:
                    40:8c:de:43:d3:dc:ed:a7:a8:d2:bd:30:8a:ed:9d:
                    dc:a3:6a:d8:1a:46:b8:9b:6b:23:de:35:c9:8e:cd:
                    15:30:12:30:e4:4c:8a:e7:33:00:df:35:d6:ad:5d:
                    46:64:fc:3e:7f:8a:11:4c:5f:d7:ac:2b:0f:a1:39:
                    c0:19:c8:60:f2:fa:01:ff:b8:af:a0:3e:df:c2:ea:
                    6e:ac:5c:58:a5:0a:32:64:7e:76:8d:91:b1:a5:ca:
                    b3:87:87:75:f0:56:80:b7:eb:fa:90:f7:5a:39:aa:
                    ce:fc:c6:ad:67:56:af:45:d1:a3:c3:35:30:e9:41:
                    1d:1f:e8:54:83:3f:fc:be:7e:0c:7b:7f:5f:8f:4d:
                    cc:8e:47:5d:d8:07:24:0f:34:4c:a4:b9:bb:81:1b:
                    c1:c8:a5:cb:7f:a0:83:a4:5d:32:77:4f:62:bb:1c:
                    5c:56:f2:70:b4:72:a9:3d:6b:ec:13:c3:35:b8:25:
                    dd:47:a6:ab:2e:8d:e5:80:0a:fd:a6:22:6e:1d:a1:
                    21:c6:fc:8a:ec:9d:d1:b5:a6:50:43:73:30:60:6a:
                    0f:66:48:39:61:13:5b:4a:0d:83:f5:e9:f9:87:69:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:54:46:B4:11:3C:BC:F7:17:15:2D:BB:90:D9:E5:19:D7:8F:40:EF
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/b93d3d87a0dd8570b2b4f0e2aefec494c0f23604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:03:43:3b:66:7a:0a:87:42:81:94:f7:4c:0b:63:f5:fb:
         5a:8c:60:ee:ed:ad:7a:27:f3:91:c1:b8:8f:4f:af:97:ac:0e:
         04:a8:e7:e2:04:f7:dc:75:35:f0:af:dd:4a:41:4f:8a:a8:b6:
         e7:f4:e1:a2:cc:d0:07:85:04:c8:a7:61:c6:a5:a5:d1:7a:48:
         f9:aa:6b:c7:71:5a:03:bd:da:70:5f:77:df:86:df:da:5e:53:
         4b:05:fc:58:ac:e1:1b:65:99:f6:01:49:03:e7:56:b5:53:fd:
         3d:52:5e:d7:e2:ae:00:18:b7:72:e3:34:db:fc:8c:ad:7b:6e:
         6e:c7:99:ba:56:6b:6f:46:32:92:86:25:9c:87:d7:c4:1a:0c:
         e7:a1:d1:bf:0b:4b:9c:24:dd:c6:65:d6:60:66:8c:1e:6f:79:
         97:3c:71:d8:35:fa:5a:21:98:70:98:7e:aa:f8:6a:57:6b:4b:
         f3:90:bd:b2:aa:59:27:80:f8:0d:34:76:60:af:4d:90:b2:65:
         5c:0b:5c:18:27:d1:07:e5:1c:f1:cf:1c:9f:40:13:b9:7b:fe:
         8f:4d:d4:e8:56:6c:27:11:bb:ce:d0:32:c8:ba:3a:a2:07:a5:
         fa:60:d1:fb:95:7b:36:96:0c:34:0e:78:c5:05:fc:b8:26:3d:
         09:77:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org