Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/116b3fba6ea5e747466a9095f83e486164f2bb4f.roa
File:                     116b3fba6ea5e747466a9095f83e486164f2bb4f.roa (raw, json)
Hash identifier:          malUrTmpPIU/k7348ww3qIT6r8kpXqff68J+s43KBr8=
Subject key identifier:   4E:9C:41:8B:63:BA:16:B6:61:DE:F8:CA:D1:18:AE:21:96:9E:DD:56
Certificate issuer:       /CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
Certificate serial:       24543B
Authority key identifier: 44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/116b3fba6ea5e747466a9095f83e486164f2bb4f.roa
Signing time:             Tue 17 Oct 2023 20:23:42 +0000
ROA not before:           Mon 16 Oct 2023 20:23:38 +0000
ROA not after:            Tue 17 Oct 2028 20:23:38 +0000
asID:                     264668
IP address blocks:        201.182.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380859 (0x24543b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
        Validity
            Not Before: Oct 16 20:23:38 2023 GMT
            Not After : Oct 17 20:23:38 2028 GMT
        Subject: CN=116b3fba6ea5e747466a9095f83e486164f2bb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:fd:9c:a7:d5:a0:f3:0f:f9:21:52:e0:de:
                    85:4b:33:19:80:bb:b8:e6:b8:2e:87:84:f3:e0:96:
                    41:7c:8b:7b:4b:a8:1e:06:16:f7:24:2c:2f:79:f0:
                    c5:10:07:5d:c5:3a:b0:d8:bc:8c:36:a3:b1:a3:0f:
                    37:a0:e0:0d:13:14:87:1f:69:d2:ab:9a:67:d1:de:
                    70:db:ce:fb:c3:11:9c:35:19:cc:d7:3e:71:6c:44:
                    b4:2c:0f:50:49:0a:2a:23:6d:e1:4b:9e:77:f0:01:
                    81:e8:73:e8:ea:2e:68:0e:2e:86:25:98:e1:61:b4:
                    6b:9f:af:a7:ad:0a:3f:1d:8a:52:7e:59:27:d8:af:
                    7b:03:89:84:32:c3:1c:b4:ff:2b:2a:c0:d6:22:68:
                    d6:b8:15:93:3f:a8:76:0a:f9:9f:57:18:74:08:cb:
                    5d:18:dc:06:51:8d:61:7c:cc:65:5e:35:c8:74:d0:
                    3a:0c:94:e0:99:b9:43:b0:76:b5:b4:e3:37:0f:eb:
                    bf:09:95:01:93:9a:34:7a:67:21:27:3a:d2:52:92:
                    42:67:55:9f:2a:d0:63:3b:3a:7b:47:df:7f:42:05:
                    c0:da:5c:38:36:1c:68:b4:50:fb:e3:0f:d3:88:89:
                    2e:95:74:34:54:74:19:53:33:c8:b2:cd:ad:b7:9b:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:41:8B:63:BA:16:B6:61:DE:F8:CA:D1:18:AE:21:96:9E:DD:56
            X509v3 Authority Key Identifier:
                keyid:44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/116b3fba6ea5e747466a9095f83e486164f2bb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:39:fe:77:d7:c9:a6:65:88:fb:5c:91:06:84:3d:d1:d5:04:
         f8:9b:5c:43:9e:bf:07:16:19:e9:91:30:24:b7:2b:b1:f3:ac:
         90:2c:e7:ec:6e:15:30:34:66:e2:d1:24:69:17:01:fa:99:45:
         2d:ad:cf:5d:d4:b5:29:d2:de:95:79:90:30:8a:41:06:a9:e1:
         ad:b0:cf:c1:bb:99:c0:a8:78:f4:15:06:d2:ee:43:70:a3:e8:
         59:27:e0:68:f6:68:a9:b5:a7:e5:c5:bd:13:3f:30:bc:27:cf:
         93:4e:d4:dc:a7:7c:16:69:fe:aa:5e:07:4f:86:ec:16:cb:a9:
         9d:50:30:d4:b7:e1:5f:e8:ef:ce:07:65:7e:d4:90:99:39:d3:
         db:b7:48:b5:5f:c7:c4:73:fc:17:5e:9a:84:a5:eb:b0:e8:60:
         c6:96:22:b1:ae:f0:c9:f8:10:01:d2:35:64:b4:49:32:bf:fc:
         b0:34:cb:65:b4:bb:b1:8c:5f:43:1b:cf:81:af:be:ff:dd:e6:
         bf:b1:b5:36:b1:aa:46:8e:e3:88:a7:ea:ad:56:a0:2b:3a:4b:
         a5:ad:98:4d:61:d2:ec:76:7a:1c:de:ef:a9:a4:59:9a:aa:71:
         f2:ad:d9:98:c9:ee:09:bf:e4:6b:4b:8c:34:ae:c3:1c:01:69:
         24:b1:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org