Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a9093d1174d0b9d3759443aac40266d97d7b8c95.roa
File:                     a9093d1174d0b9d3759443aac40266d97d7b8c95.roa (raw, json)
Hash identifier:          MOWnWVe8pSRY+dMKf+fYvAhTOYk5QWIcwvc287bnMyo=
Subject key identifier:   B0:F5:25:9B:E7:12:BE:39:A1:52:F3:F2:A1:CC:BA:7E:24:CF:20:4F
Certificate issuer:       /CN=a7526df002a574a7e96f1fd69133114135b1b5ee
Certificate serial:       0101D8
Authority key identifier: A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a9093d1174d0b9d3759443aac40266d97d7b8c95.roa
Signing time:             Wed 13 Oct 2021 19:51:48 +0000
ROA not before:           Wed 13 Oct 2021 03:00:00 +0000
ROA not after:            Fri 13 Oct 2023 03:00:00 +0000
asID:                     271973
IP address blocks:        201.222.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66008 (0x101d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7526df002a574a7e96f1fd69133114135b1b5ee
        Validity
            Not Before: Oct 13 03:00:00 2021 GMT
            Not After : Oct 13 03:00:00 2023 GMT
        Subject: CN=a9093d1174d0b9d3759443aac40266d97d7b8c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:3d:23:c6:cb:e8:81:3d:1d:45:ce:e1:06:
                    12:d1:c4:db:28:aa:c6:c0:a5:0e:90:80:68:5b:5e:
                    54:c2:dc:d2:83:13:cb:f7:46:53:d6:e0:ca:2d:dd:
                    66:0b:90:b6:cb:2c:7a:40:29:55:d1:c1:93:0a:61:
                    bc:7b:04:a2:d2:9d:44:f2:23:b2:6a:e0:2e:36:5b:
                    37:0a:d9:5f:7d:0e:ad:67:7c:92:cb:3d:cf:d2:7f:
                    81:ef:0c:3f:c8:e1:6e:60:bc:86:12:43:9d:e9:d7:
                    95:c8:c1:c6:f0:86:31:37:ea:62:24:be:b5:23:4a:
                    e1:86:15:dc:7c:60:a7:68:96:f7:f6:88:ac:37:49:
                    89:15:cf:69:5c:66:a1:39:48:5b:a8:67:bd:48:43:
                    06:e1:63:28:10:25:bb:ed:25:f6:ac:66:ef:cb:eb:
                    b4:60:c9:52:99:be:8c:b7:59:60:2e:b8:63:4a:ba:
                    c6:4d:35:e4:3c:6c:a1:2b:07:20:55:19:4e:35:c1:
                    7c:ef:cc:86:c0:2c:49:c2:f2:39:bd:93:3a:d0:50:
                    ce:22:35:db:ae:bd:73:47:89:1e:dd:0f:f3:e3:d2:
                    55:d2:b5:00:a4:b6:a2:57:a0:df:e0:d8:89:9a:46:
                    e9:29:b0:99:f9:81:59:7b:5e:72:f7:3b:9e:b3:60:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:25:9B:E7:12:BE:39:A1:52:F3:F2:A1:CC:BA:7E:24:CF:20:4F
            X509v3 Authority Key Identifier:
                keyid:A6:56:B4:C3:93:21:23:14:A5:C4:B8:95:1B:73:4A:BC:70:A2:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7526df002a574a7e96f1fd69133114135b1b5ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a9093d1174d0b9d3759443aac40266d97d7b8c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc4996a8-7677-4c1c-b313-011f25764fa5/a7526df002a574a7e96f1fd69133114135b1b5ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:e5:cd:4d:5a:59:e6:f8:0e:ab:33:4d:e4:29:a9:75:46:
         ab:e3:09:05:64:19:a4:65:5d:bc:3b:c8:cc:04:57:fa:85:3b:
         a1:8f:a8:1e:32:de:75:45:70:6b:06:df:e2:48:af:de:96:61:
         3f:78:af:f1:88:7a:b3:4c:3a:b6:80:b8:2e:af:fa:a1:f5:81:
         71:78:ac:64:e7:2a:27:a2:27:76:fb:e9:fc:f0:c0:86:79:eb:
         4a:a7:42:4f:70:60:03:ab:d0:eb:51:df:37:e7:3a:c0:30:25:
         5c:69:9f:db:f2:0b:52:fc:f2:84:a3:d9:57:d1:a8:2d:bd:a2:
         29:7a:06:0e:40:a7:20:54:b0:20:82:f2:22:2d:27:8c:6f:69:
         69:31:f7:db:8b:e7:16:11:63:2d:cd:5b:97:66:7d:05:62:07:
         00:00:30:6c:eb:b8:4f:5e:a1:2b:8f:fc:6e:a7:bc:65:f9:fe:
         e9:0c:d7:f0:a0:18:39:81:5b:ca:df:4e:29:f2:7b:69:49:9e:
         e0:b5:d7:dc:6b:4c:51:ca:a2:a8:6e:cb:9d:53:50:b1:ff:21:
         37:c8:07:c9:70:f9:51:9e:11:ec:c4:66:b6:da:83:3a:8d:8a:
         53:89:00:78:36:97:b4:97:d3:b1:00:77:15:36:50:e3:12:eb:
         e9:1f:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org