Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa
File:                     e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa (raw, json)
Hash identifier:          GU6WEHW8bip6EaewRVvy77We2b2EC0DVKTDdoCV4c+U=
Subject key identifier:   94:3B:33:3A:36:48:64:1D:66:AD:05:6B:86:2E:C9:EE:85:A5:B6:B7
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1866E7
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa
Signing time:             Wed 10 Aug 2022 23:05:32 +0000
ROA not before:           Wed 10 Aug 2022 23:04:53 +0000
ROA not after:            Sat 10 Aug 2024 23:04:53 +0000
asID:                     271842
IP address blocks:        201.218.133.0/24 maxlen: 24
                          201.218.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599207 (0x1866e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Aug 10 23:04:53 2022 GMT
            Not After : Aug 10 23:04:53 2024 GMT
        Subject: CN=e98de5cd4ec9dca3ac1ab640710f91cf810c4032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:b0:52:90:2b:33:4c:fa:75:bd:3f:4c:53:
                    4e:25:f3:4d:46:23:78:23:9c:9d:04:3e:15:6f:63:
                    ce:3e:36:9f:fd:12:08:8e:32:15:b3:20:e9:bc:25:
                    c2:f7:d4:07:3c:f5:55:46:6d:37:20:a2:74:e9:f7:
                    9e:31:7e:79:e9:63:2c:67:ef:12:14:80:98:8a:84:
                    ac:05:cb:9b:09:15:07:bc:ca:1f:cd:12:e0:1e:b1:
                    76:36:ae:2a:13:ca:2c:13:c3:c3:b8:28:2f:ce:98:
                    63:f3:d1:47:8a:8c:70:44:31:ba:64:6c:9f:af:85:
                    0c:f5:58:da:05:05:39:27:c9:7a:8b:4a:f5:f7:bf:
                    26:6d:0f:0d:7a:73:0f:a9:a1:ee:9c:54:4c:41:1d:
                    c4:ff:4b:97:7a:3e:ef:d2:86:47:f3:6f:3d:80:b2:
                    c7:3d:1e:65:9e:53:5f:7c:b6:56:a0:61:83:21:bb:
                    25:62:41:38:47:97:f8:84:d3:52:3c:90:12:67:71:
                    45:f3:bb:0a:e0:06:1a:30:14:53:bf:7a:e3:c0:6b:
                    69:3d:78:a4:6d:0f:51:44:05:aa:0f:f4:f7:af:be:
                    d9:a4:49:dc:2b:be:fe:7f:01:c6:b8:32:05:93:6e:
                    5e:11:f0:93:08:4e:b4:d7:bc:d2:ed:15:61:7e:a2:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3B:33:3A:36:48:64:1D:66:AD:05:6B:86:2E:C9:EE:85:A5:B6:B7
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.133.0/24
                  201.218.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:b5:27:05:03:96:5c:b5:81:47:1b:94:cd:55:6b:d1:c1:
         23:5f:aa:95:c5:c6:a8:39:8c:3e:d4:14:f6:15:10:97:4b:49:
         bf:0a:c3:4d:67:61:c6:94:ff:97:cb:05:65:ce:b7:94:ad:38:
         1f:d5:4b:cd:ac:46:a5:27:80:0c:b2:2c:dc:6f:1a:6c:00:f6:
         22:68:e0:6d:df:21:23:ab:bd:c6:41:cf:fe:ee:d2:0f:ad:38:
         ce:91:11:58:17:f6:5c:04:dd:f3:b6:14:52:c0:2b:49:13:f0:
         7b:8c:32:12:91:5d:d8:d2:8b:99:6c:13:68:b2:bd:66:51:55:
         99:5c:9c:8f:00:c8:0d:32:f8:51:83:7b:13:4c:05:17:48:a5:
         4d:82:81:2f:a0:a9:7b:62:6d:ee:5f:24:29:56:f2:5b:d9:79:
         8d:f7:2d:ac:7c:a9:c3:b6:1b:40:63:ae:31:df:8c:e2:69:c6:
         cd:d5:82:8b:91:91:93:09:17:de:4c:ea:0a:8f:c7:37:39:dc:
         f6:a3:66:4b:93:0a:a3:f7:7a:65:f0:b9:21:12:26:d6:60:39:
         f1:5f:44:c5:aa:da:c6:2e:c0:f0:e4:31:2e:7e:1a:90:8b:28:
         2e:6f:75:23:c2:d9:d5:4e:c2:53:ed:43:4e:ba:41:68:da:98:
         d2:9a:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org