Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/8a494be79b09ae83bac79c7332ab627675b2cf2c.roa
File:                     8a494be79b09ae83bac79c7332ab627675b2cf2c.roa (raw, json)
Hash identifier:          Lck51qCKQdBaE4KdjqI4Kk6xZAxD7LJyXYxuIVcNaAY=
Subject key identifier:   67:96:52:FB:F3:23:F5:5E:FB:1E:9E:3B:C8:65:8C:2E:94:62:33:8A
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       0D4808
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/8a494be79b09ae83bac79c7332ab627675b2cf2c.roa
Signing time:             Wed 24 Mar 2021 14:39:28 +0000
ROA not before:           Wed 24 Mar 2021 14:39:28 +0000
ROA not after:            Tue 24 Mar 2026 14:39:28 +0000
asID:                     264668
IP address blocks:        201.182.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870408 (0xd4808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Mar 24 14:39:28 2021 GMT
            Not After : Mar 24 14:39:28 2026 GMT
        Subject: CN=8a494be79b09ae83bac79c7332ab627675b2cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:5e:ce:3e:d0:1f:df:e8:43:89:fa:e7:d8:
                    be:3f:54:33:e5:c6:06:ee:70:54:6a:02:8b:84:e2:
                    70:72:f2:7c:dd:7c:ca:42:54:f0:60:77:1b:42:fc:
                    36:fd:30:5f:14:c5:46:f0:e8:b8:7c:d9:f0:31:00:
                    87:77:92:89:a0:77:08:53:35:54:f7:e9:d9:86:98:
                    b0:6d:17:58:8f:8c:5d:1b:7c:a3:ca:21:a1:3a:27:
                    30:81:2d:24:ea:8c:f2:fa:8f:f5:21:df:b7:1a:49:
                    eb:13:bd:86:a7:40:12:b3:fd:ca:44:78:15:29:92:
                    3d:24:fc:d0:7d:9e:41:3a:f5:7f:d9:1e:9b:0e:5f:
                    d4:28:96:77:7e:ca:65:b4:55:6c:6b:74:3e:38:91:
                    e0:4f:03:50:89:0d:ae:b5:bc:4a:37:74:9e:d2:05:
                    45:59:18:de:18:8f:b5:d8:61:ff:f5:f3:bc:f5:cb:
                    fa:54:34:e7:03:59:7b:c0:67:e8:a0:25:7e:1d:70:
                    ff:5e:f8:83:45:2d:85:f1:98:b1:e6:98:c1:72:ad:
                    69:85:97:d6:20:5b:68:8c:37:6b:c4:8c:ae:c8:52:
                    a7:af:22:e3:1b:ad:6f:69:ff:d7:46:cc:9e:11:09:
                    e9:8a:da:26:8f:76:84:e3:78:4a:f7:dd:c3:b0:bd:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:96:52:FB:F3:23:F5:5E:FB:1E:9E:3B:C8:65:8C:2E:94:62:33:8A
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/8a494be79b09ae83bac79c7332ab627675b2cf2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:13:86:47:67:d7:a9:bf:e0:de:75:bf:73:00:5a:3a:be:
         ac:ba:48:04:48:24:1c:47:39:55:b7:bb:b9:19:2e:80:60:cb:
         a8:ae:7f:69:8e:83:bc:aa:25:98:54:73:fe:47:73:93:de:37:
         53:b7:0c:68:f3:c1:a8:ab:ec:ab:b1:9a:be:a0:df:4b:75:45:
         98:5e:18:95:56:02:7c:3b:f8:c2:86:7c:ba:22:b8:ec:03:a4:
         db:78:97:98:1d:91:c8:6d:f6:ff:cb:43:df:60:8f:0e:b2:6a:
         20:e5:58:3b:aa:87:33:0b:f1:29:6d:0c:3e:91:a5:8f:aa:51:
         ab:10:89:fe:0e:af:5d:d7:e4:95:35:6b:59:1b:e4:cc:5d:57:
         cc:4d:ae:15:61:0b:7b:8f:0f:13:95:ac:a2:56:02:5c:4e:5a:
         60:43:26:4e:90:e8:cc:35:04:fd:96:dc:a2:3d:75:6e:7d:57:
         ef:20:84:67:e6:89:bc:82:74:95:35:13:a0:0d:6f:3b:58:b7:
         e2:33:dc:de:8e:ca:9b:3c:de:69:c0:82:54:a8:ca:eb:c4:e5:
         50:04:ef:8b:cc:8f:2e:3e:36:9b:95:1d:4d:28:6e:9f:40:78:
         3c:55:41:1a:1e:4e:2b:da:35:3a:b5:4f:71:bc:9b:d4:52:e0:
         af:4b:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:59:40 2023 by rpki-client on console-fra.rpki-client.org