Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c3a701fc94ce5da676f622937d9494d50779fbde.roa
File:                     c3a701fc94ce5da676f622937d9494d50779fbde.roa (raw, json)
Hash identifier:          ATdr1ZpjZcTmq4NTVFztS4io28ZEddelW7yFwTg1cyo=
Subject key identifier:   B4:75:1E:7A:D8:45:53:E1:24:36:C3:77:CD:9F:EB:EC:95:E8:34:4F
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1663B1
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c3a701fc94ce5da676f622937d9494d50779fbde.roa
Signing time:             Fri 27 May 2022 20:01:05 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     52439
IP address blocks:        201.218.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467313 (0x1663b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=c3a701fc94ce5da676f622937d9494d50779fbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:90:72:b5:db:00:bd:6d:4a:95:ad:4d:b7:
                    d0:3a:21:ec:e0:c4:cc:7a:e8:6c:74:e1:5f:f7:94:
                    ff:92:b4:71:2c:fd:e9:c1:70:53:47:b9:70:68:50:
                    a5:50:11:6f:20:02:b4:ae:69:41:f8:12:56:a2:18:
                    ea:28:70:5f:5b:b8:fc:37:4d:69:9a:39:44:a2:0b:
                    a0:3e:fd:15:59:cc:49:c7:05:82:a3:68:b7:89:53:
                    71:ed:0f:67:41:d2:1f:8e:63:74:cf:e3:96:8a:69:
                    97:60:6e:99:42:3c:f2:31:c0:ed:47:86:c0:92:49:
                    b9:1d:bc:49:17:51:78:fa:b3:98:df:0d:33:c4:59:
                    ef:83:1f:5b:f3:c1:8b:fa:73:02:07:34:23:5d:e3:
                    79:8b:d6:c1:88:7a:b4:8d:af:66:81:9b:b7:35:20:
                    57:e3:1e:a8:9b:0d:ec:c1:6e:a6:7d:b9:d1:16:dd:
                    58:1b:3d:ca:b9:79:d6:e1:fc:22:0c:fc:75:61:8f:
                    ea:d1:5b:d7:98:b5:f9:5d:a2:cf:76:ff:aa:44:ce:
                    e5:90:86:34:5b:c7:a2:fd:e7:2b:ad:12:90:b7:3b:
                    54:ca:30:9d:e7:0d:79:6b:ec:cc:4f:c8:88:43:62:
                    8c:b1:c1:ff:c9:a0:83:68:54:44:a3:cc:3c:d1:11:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:1E:7A:D8:45:53:E1:24:36:C3:77:CD:9F:EB:EC:95:E8:34:4F
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c3a701fc94ce5da676f622937d9494d50779fbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:dc:46:1a:af:96:22:b6:70:51:e2:b0:d3:04:06:e8:a7:
         9a:1d:23:c4:ce:80:bc:8f:d3:7d:95:bf:7b:c3:dd:42:1f:45:
         ab:26:63:f7:07:ec:4d:17:1e:2b:87:44:6c:b3:17:92:69:0d:
         e3:37:58:ad:74:50:d0:0f:1e:09:16:23:4b:b9:a0:77:b4:54:
         94:fa:f3:24:e1:e5:3a:2c:5e:c6:d0:e5:9b:6a:b5:ba:be:e7:
         98:44:29:c0:b8:70:e1:9b:35:b6:3e:04:a5:69:10:e1:81:ef:
         d7:9a:9e:a2:36:e9:de:ff:5c:f3:ae:f8:3b:8a:57:17:41:c3:
         ec:13:66:99:22:dc:fa:74:58:a3:77:7a:98:0f:c8:8c:30:56:
         b2:62:93:ce:b3:2a:ca:b3:16:48:07:ab:0a:b7:e0:75:f3:bd:
         ba:7d:45:46:97:6f:61:79:a8:dd:2a:0f:e7:f0:86:c4:66:22:
         00:73:5a:8c:41:aa:03:76:49:c8:d3:2d:64:a6:37:24:2a:18:
         db:4a:21:8d:e8:86:c0:fd:d9:06:8f:ac:4c:fc:a1:2b:2f:0f:
         de:5c:23:81:8a:fa:09:82:18:5f:bc:c9:a4:42:49:85:66:68:
         2d:96:71:cd:2b:1d:4d:95:55:e9:8c:59:90:73:0c:28:73:e6:
         5e:48:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org