Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/891938623afa6637bf827f5b81e433f044f84427.roa
File:                     891938623afa6637bf827f5b81e433f044f84427.roa (raw, json)
Hash identifier:          UHI9wuF2DBvhkm4LzILgY/RISyH1dc9tMjkaMtY7ALo=
Subject key identifier:   92:E6:CE:E7:2B:67:61:2D:73:9C:D3:32:1D:8F:55:89:87:DA:D3:92
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       1F2704
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/891938623afa6637bf827f5b81e433f044f84427.roa
Signing time:             Fri 24 Mar 2023 08:31:21 +0000
ROA not before:           Thu 23 Mar 2023 08:31:21 +0000
ROA not after:            Sat 22 Mar 2025 08:31:21 +0000
asID:                     265815
IP address blocks:        201.182.148.0/24 maxlen: 24
                          201.182.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041604 (0x1f2704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Mar 23 08:31:21 2023 GMT
            Not After : Mar 22 08:31:21 2025 GMT
        Subject: CN=891938623afa6637bf827f5b81e433f044f84427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:87:ba:03:e5:71:c9:6d:e8:3d:40:0c:1e:
                    44:90:e3:90:53:70:df:03:1e:da:ee:e1:6c:02:56:
                    01:5c:68:54:05:92:49:28:59:61:bd:9b:7d:f5:c4:
                    a3:86:b8:f4:b1:3f:19:55:ff:a2:c5:31:cc:0c:f7:
                    76:f9:4c:05:e7:ee:64:34:2a:d2:af:fd:35:36:4d:
                    dd:81:ab:e3:c7:61:a9:cd:c7:37:e2:35:0e:5d:29:
                    ed:da:78:7a:80:5d:7a:21:ac:0f:c4:7d:84:78:96:
                    b1:78:d6:8b:36:4e:26:05:a1:12:78:9c:11:84:2e:
                    4a:ad:0d:25:aa:bc:5b:ea:8a:2e:07:c5:1c:89:51:
                    32:06:53:a7:d1:b1:df:10:69:95:57:84:e9:f6:82:
                    0d:84:9d:fd:25:14:6d:d5:1a:0d:8a:13:b1:5b:59:
                    e6:2d:e6:9b:c6:81:80:ad:fa:ad:5a:56:71:40:aa:
                    b0:21:26:dd:f7:54:89:14:4c:17:1f:6b:4c:7e:33:
                    ee:6c:14:53:9a:be:47:51:1a:7f:c8:16:33:a8:56:
                    aa:f3:af:48:54:70:a6:e6:12:5a:e5:22:8e:17:32:
                    b9:64:85:27:9d:8e:8d:97:c3:be:c8:f5:73:7d:b6:
                    0a:42:ab:16:d7:cc:53:e9:f5:b8:eb:a5:70:3f:80:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:CE:E7:2B:67:61:2D:73:9C:D3:32:1D:8F:55:89:87:DA:D3:92
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/891938623afa6637bf827f5b81e433f044f84427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:50:9a:2d:9a:7d:62:cc:83:0d:ea:40:63:cb:90:c6:fa:
         4b:f3:03:52:1e:06:09:3e:6f:52:b6:3c:9f:c6:93:21:f6:5e:
         67:ae:86:42:bd:20:49:70:aa:e5:68:f7:57:4c:6c:17:6e:c4:
         83:10:a6:a3:6e:c7:ab:6a:95:1d:90:47:1c:5b:3f:7b:d2:55:
         dc:c0:d1:7c:7c:fb:3b:c9:7e:c2:02:44:80:56:4e:80:b2:e4:
         45:68:f3:7c:ec:74:46:3b:73:f8:4d:4c:11:c0:4d:1f:7e:3d:
         10:bb:75:8d:61:fe:13:32:a2:b6:83:1d:d8:c6:99:fa:98:56:
         09:8b:ff:ba:29:42:0a:76:77:83:7a:09:70:9f:b2:1a:5c:3b:
         2e:09:4a:9c:90:cf:83:79:83:be:05:4c:4d:7d:37:d7:29:51:
         88:e4:03:68:6a:c7:51:0f:18:16:e9:a7:9c:b6:6d:a9:aa:c6:
         ca:6b:38:59:7b:0a:4a:95:75:02:3b:06:54:60:23:f8:1d:47:
         7e:f9:2a:ad:27:e9:6c:31:f4:d3:58:96:ca:0e:32:a9:0a:1e:
         73:e2:a9:b8:44:23:ed:d1:2e:de:71:96:81:97:91:5e:8e:f3:
         c3:d2:7b:79:f7:0e:87:53:79:ef:a7:6b:a2:e3:4b:1a:31:66:
         0f:48:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:59:02 2023 by rpki-client on console-ams.rpki-client.org