Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32312d3234203d3e20323635353534.roa
File:                     3230312e3135392e3234302e302f32312d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          vxQEA3zpbx0kyWxuUPjOhEEtcZ0L9JCs0v1VGCrN53M=
Subject key identifier:   EF:53:38:1C:C0:6D:59:7D:32:A1:26:08:C0:BD:BC:70:6A:97:AA:D7
Certificate issuer:       /CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
Certificate serial:       328D7EE32B606B4664333045E5DC960B29F1C5EE
Authority key identifier: DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32312d3234203d3e20323635353534.roa
Signing time:             Wed 03 Jul 2024 14:35:00 +0000
ROA not before:           Wed 03 Jul 2024 14:30:00 +0000
ROA not after:            Wed 02 Jul 2025 14:35:00 +0000
asID:                     265554
IP address blocks:        201.159.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:7e:e3:2b:60:6b:46:64:33:30:45:e5:dc:96:0b:29:f1:c5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
        Validity
            Not Before: Jul  3 14:30:00 2024 GMT
            Not After : Jul  2 14:35:00 2025 GMT
        Subject: CN=EF53381CC06D597D32A12608C0BDBC706A97AAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:bc:27:f0:d8:ac:5d:af:d0:1c:59:1f:ae:
                    57:77:eb:f5:7e:ff:0d:32:ce:b0:db:44:e6:52:38:
                    1e:66:0e:4a:26:5a:56:40:8b:23:b7:ec:0b:43:56:
                    98:fb:95:e6:b1:29:74:0a:12:b6:a3:31:40:10:88:
                    b4:bd:9b:da:5b:39:5b:71:34:cf:da:a4:f9:11:9b:
                    22:ab:6e:00:6a:63:55:9d:7d:64:64:36:4f:68:f1:
                    0e:66:02:ee:f7:fd:78:4e:93:cf:69:a5:b4:6a:57:
                    7e:57:c9:a2:a3:a5:72:21:b8:90:30:15:46:a5:aa:
                    f0:2c:01:64:67:09:6e:42:9c:57:51:ef:d5:a7:45:
                    6b:3c:af:d0:43:81:56:a4:c2:ef:f1:68:ab:ed:5c:
                    aa:d8:40:de:17:54:bb:a0:fe:88:4e:71:b4:97:e8:
                    83:ba:c2:69:1d:42:9d:65:b2:ac:4c:cc:b1:df:e7:
                    d9:b8:10:06:54:3b:b2:c2:ad:65:07:80:1f:19:5c:
                    a1:8b:08:57:49:f6:f5:17:d8:fe:6c:d4:a0:d1:04:
                    45:e8:1b:bb:ac:52:3a:3c:e5:5a:7b:9a:70:e0:0b:
                    de:4f:f7:fe:ac:f6:bc:c0:e6:b2:8c:d2:fe:6e:3a:
                    47:fd:81:45:ad:f1:b9:09:02:7e:db:07:92:d6:f6:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:38:1C:C0:6D:59:7D:32:A1:26:08:C0:BD:BC:70:6A:97:AA:D7
            X509v3 Authority Key Identifier:
                keyid:DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3234302e302f32312d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:c6:1e:79:9b:a9:9e:e0:78:92:3c:83:c2:64:85:93:d6:
         45:61:9a:fe:65:17:a5:d1:dc:0a:b2:05:a7:b2:c0:87:0b:7a:
         45:35:6e:87:f7:33:2f:5e:6f:45:35:96:9f:44:1b:0c:13:35:
         7b:ad:75:b7:e0:6f:18:b1:e9:ca:92:4a:42:b4:2a:a6:e1:71:
         cb:20:a6:72:87:ed:df:9c:5e:d8:45:5a:1f:d1:d2:49:9f:ba:
         ec:41:dc:ab:e9:12:10:67:4d:85:ea:de:20:82:e9:6b:bc:3f:
         da:94:8e:ff:cc:46:7d:79:fe:89:24:23:6b:51:23:c7:51:5c:
         e9:9a:66:f1:a9:6a:a9:5e:af:78:24:9c:a3:fd:69:03:25:83:
         fe:1a:a8:27:25:c8:db:c1:45:14:68:37:89:63:a0:08:72:78:
         b0:af:13:54:b0:26:8a:21:8d:0e:c3:99:40:d4:d9:54:e3:e0:
         8c:e9:59:b9:55:c4:86:b4:e2:d1:78:8f:25:b7:89:0a:a0:bf:
         ab:08:20:43:f4:5e:7e:f7:61:74:65:bb:a6:31:05:c6:62:2b:
         2c:32:12:61:91:fa:08:0b:6d:9e:9a:09:09:03:2f:98:13:6e:
         a5:db:ee:69:27:62:90:29:d4:4a:12:99:37:35:10:6b:09:00:
         9d:80:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:27:54 2024 by rpki-client on console-ams.rpki-client.org