Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e287c9b8e06aae2191592ecd2ca0dda4f1e05346.roa
File:                     e287c9b8e06aae2191592ecd2ca0dda4f1e05346.roa (raw, json)
Hash identifier:          26Fox7N8ldClwpKbY0rbPLe8sF3gKDwWJPNIHcwcRB8=
Subject key identifier:   B9:D8:98:AE:20:D0:1E:AC:D9:8E:11:76:86:EE:9D:18:3D:60:AD:3E
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1F1BD9
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e287c9b8e06aae2191592ecd2ca0dda4f1e05346.roa
Signing time:             Tue 02 May 2023 19:48:15 +0000
ROA not before:           Mon 01 May 2023 19:48:15 +0000
ROA not after:            Fri 02 May 2025 19:48:15 +0000
asID:                     272848
IP address blocks:        201.218.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038745 (0x1f1bd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May  1 19:48:15 2023 GMT
            Not After : May  2 19:48:15 2025 GMT
        Subject: CN=e287c9b8e06aae2191592ecd2ca0dda4f1e05346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:df:f9:21:0f:9e:53:b4:c0:1a:12:19:a3:
                    97:8a:b4:2a:16:6c:c4:99:d4:e7:eb:fa:c0:b9:72:
                    79:e9:d9:e2:bc:15:0c:6f:8e:4d:16:bb:5e:f5:2c:
                    39:48:8f:80:a7:49:dc:96:47:08:f5:cb:b8:99:c7:
                    23:1e:6e:d2:f5:d3:a6:f6:08:30:fb:af:ab:3f:e9:
                    59:71:a4:81:04:6a:31:78:71:a0:e3:b5:01:f5:bf:
                    23:ef:5a:5d:e1:4e:c6:72:31:e6:72:4b:a4:4f:9b:
                    c4:3e:ef:b6:f3:28:cb:05:dc:10:37:d7:04:42:46:
                    bc:64:32:70:c9:30:65:bd:53:2e:f5:89:8f:1f:05:
                    48:a4:a9:17:43:5a:53:ed:8d:22:20:09:c2:45:fa:
                    d3:8f:49:4d:92:27:60:98:26:1a:4c:ac:52:b3:ff:
                    17:8a:d7:bb:ca:7a:e0:32:39:b9:99:2d:8c:a9:03:
                    d8:6e:59:7d:14:dc:b3:30:ab:d9:25:f7:54:34:ae:
                    a3:5a:ec:c5:eb:30:ec:de:c0:3d:50:61:51:c3:ae:
                    65:b2:27:f2:e6:73:c4:ce:32:e3:f1:c8:a0:f8:2a:
                    e8:68:c0:f0:11:5f:f4:59:6d:08:1e:34:35:07:66:
                    dc:dd:a5:a3:0d:ff:3c:7d:91:d6:ca:92:6d:e6:69:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:98:AE:20:D0:1E:AC:D9:8E:11:76:86:EE:9D:18:3D:60:AD:3E
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e287c9b8e06aae2191592ecd2ca0dda4f1e05346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:00:cc:0a:db:97:1f:50:d1:31:eb:4d:70:08:ba:cf:75:7d:
         bd:68:69:18:14:80:68:60:02:77:8b:7e:06:f7:b4:ad:da:69:
         fa:05:8c:06:87:39:3e:95:40:af:93:eb:c4:22:1d:45:43:a5:
         58:db:47:ee:2e:1a:86:16:3a:2b:d8:db:9b:f3:fa:b6:7f:b7:
         94:f4:68:87:44:fc:89:ef:bb:05:ab:11:6a:59:2a:4a:82:62:
         99:da:c0:73:00:57:16:07:e3:a8:2b:99:91:2c:05:74:a2:ed:
         67:84:ae:48:62:91:96:78:4e:db:fa:0b:2c:c1:74:e9:74:64:
         c6:f5:25:fe:1a:05:30:37:d6:7e:97:55:7b:02:c5:e1:b5:83:
         d4:b8:0b:45:6e:a4:de:26:80:e9:44:ae:4a:98:0d:05:3e:89:
         3a:19:ae:fc:77:4d:88:1d:29:1c:f2:21:78:01:cd:74:59:95:
         6d:f1:78:63:17:1a:cf:5b:54:55:1f:8d:1e:51:07:fa:03:aa:
         2d:e4:89:8b:60:b1:b9:a1:fe:ae:22:e2:8b:6f:21:14:f0:30:
         bf:f3:25:67:29:56:d3:7b:cc:ee:95:0b:23:30:2b:f1:0b:97:
         0d:d7:6b:ef:6b:67:25:e0:1a:22:ec:9d:c3:26:b7:61:b2:34:
         89:4e:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org