Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/3230312e3138322e3131322e302f32322d3232203d3e20323635383038.roa
File:                     3230312e3138322e3131322e302f32322d3232203d3e20323635383038.roa (raw, json)
Hash identifier:          dYyESDbfNEKtsQiP+xa5/RBPHDzJuInT8WAuOvzTiL0=
Subject key identifier:   94:FF:4B:55:3B:12:CA:ED:40:1F:63:C3:8F:55:E6:1F:D0:6A:A5:0E
Certificate issuer:       /CN=95A81C21BF7FD11E313A71A5B41943A0DDF155E7
Certificate serial:       6D3CBE4922E651487CB8962124EF0E4792FBAABE
Authority key identifier: 95:A8:1C:21:BF:7F:D1:1E:31:3A:71:A5:B4:19:43:A0:DD:F1:55:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A81C21BF7FD11E313A71A5B41943A0DDF155E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/3230312e3138322e3131322e302f32322d3232203d3e20323635383038.roa
Signing time:             Tue 05 Mar 2024 17:56:28 +0000
ROA not before:           Tue 05 Mar 2024 17:51:28 +0000
ROA not after:            Tue 04 Mar 2025 17:56:28 +0000
asID:                     265808
IP address blocks:        201.182.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3c:be:49:22:e6:51:48:7c:b8:96:21:24:ef:0e:47:92:fb:aa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A81C21BF7FD11E313A71A5B41943A0DDF155E7
        Validity
            Not Before: Mar  5 17:51:28 2024 GMT
            Not After : Mar  4 17:56:28 2025 GMT
        Subject: CN=94FF4B553B12CAED401F63C38F55E61FD06AA50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:b2:13:8d:d6:22:e0:82:dc:72:49:a6:e2:
                    7c:eb:66:0b:aa:c6:0d:59:e0:ec:60:57:48:86:0a:
                    72:c9:cf:04:2e:7d:18:19:76:db:93:4a:bb:a0:b8:
                    0b:49:43:9b:d5:4d:ca:5a:55:3f:6e:3c:cf:05:0d:
                    a6:4e:d1:35:b4:6a:c5:24:5c:23:17:97:6b:93:12:
                    c7:b9:c2:3d:56:60:61:92:bd:9c:c4:f1:e1:75:25:
                    51:3f:7b:e6:69:79:9e:00:66:c2:0f:fe:1d:2f:3c:
                    aa:74:3c:a5:a7:ee:38:42:7e:31:37:63:a9:28:92:
                    5a:ae:de:bc:be:d3:fb:e2:48:10:11:5c:da:c2:00:
                    9d:57:ea:6c:a5:aa:5c:4a:ed:47:e2:70:27:78:49:
                    f0:0e:c7:08:0c:06:aa:53:6e:45:6c:bf:5c:c0:07:
                    ab:5e:41:cd:23:7c:02:ce:12:de:d1:c7:c1:43:c5:
                    24:a7:b7:b5:16:9a:6b:2a:6c:95:ff:69:00:b6:cf:
                    bc:fe:52:2f:2a:64:b4:14:e8:b7:bc:0b:ab:90:f1:
                    42:54:cf:40:a6:9e:fa:f5:d9:5a:43:6c:4e:4c:d6:
                    57:03:eb:eb:c7:bd:16:99:07:38:c7:5b:d1:35:29:
                    b9:a2:2d:a2:09:28:4a:fa:80:94:99:62:84:1f:70:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:4B:55:3B:12:CA:ED:40:1F:63:C3:8F:55:E6:1F:D0:6A:A5:0E
            X509v3 Authority Key Identifier:
                keyid:95:A8:1C:21:BF:7F:D1:1E:31:3A:71:A5:B4:19:43:A0:DD:F1:55:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/95A81C21BF7FD11E313A71A5B41943A0DDF155E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A81C21BF7FD11E313A71A5B41943A0DDF155E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B155D364E8A23BF74B3327FF5257F9A5EC9ABE8B4ED514116E45535E6E0C73A/0/3230312e3138322e3131322e302f32322d3232203d3e20323635383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:1d:83:28:90:81:4c:bc:a0:63:a0:f1:18:29:02:5a:3a:
         fe:cd:2e:84:f5:c5:88:9d:56:59:06:ea:9a:d5:cb:52:ac:30:
         74:22:81:2f:a1:77:c5:9d:e3:96:d9:6f:c6:24:7c:68:31:64:
         55:1d:7a:74:70:86:cf:07:e5:d5:ff:38:8b:92:bd:70:90:f5:
         73:ef:50:dc:a2:ab:09:50:37:63:b2:f9:86:b9:05:cc:b3:4f:
         d7:0b:b1:0f:01:b5:4c:aa:08:9a:d4:08:42:76:16:29:8b:32:
         df:a3:10:8a:67:1a:e7:58:83:75:ff:33:fd:48:61:a2:af:98:
         9a:51:23:48:8f:50:42:56:ba:6c:b3:f3:7a:62:28:53:b0:db:
         13:36:c5:47:2e:ef:9f:b0:fb:30:24:92:85:41:08:26:73:b4:
         eb:57:9c:ca:c1:d2:13:3c:17:ce:fe:40:78:52:e8:dc:f3:26:
         f8:de:ac:81:09:f7:ee:47:11:a8:ba:dc:79:e8:a1:08:fe:50:
         3e:c0:2b:06:4e:65:be:45:71:94:77:42:a3:ed:b0:1f:af:98:
         37:8c:b1:6a:36:d5:b4:5f:90:93:ec:2e:47:52:a2:9f:c8:30:
         33:f1:85:1f:83:8a:63:bd:50:5f:56:79:c4:32:04:9c:1f:90:
         9b:5f:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 00:33:25 2024 by rpki-client on console-ams.rpki-client.org