Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa
File:                     f01c78aff682d80d2cb5ff315dbc1743af59372d.roa (raw, json)
Hash identifier:          qmTVxFRnJJTFe6RqrhD8ojC7dMz70ZK6UfpDriaF7Mw=
Subject key identifier:   51:23:5B:48:61:6F:F7:0A:FC:B9:6D:10:9B:53:7F:7F:26:6C:E2:44
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       09ADD7
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa
Signing time:             Tue 25 Apr 2023 21:48:52 +0000
ROA not before:           Mon 24 Apr 2023 21:48:52 +0000
ROA not after:            Fri 25 Apr 2025 21:48:52 +0000
asID:                     272043
IP address blocks:        131.72.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634327 (0x9add7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Apr 24 21:48:52 2023 GMT
            Not After : Apr 25 21:48:52 2025 GMT
        Subject: CN=f01c78aff682d80d2cb5ff315dbc1743af59372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:b2:87:31:a5:c9:10:7a:6c:64:2b:f8:ab:
                    24:a1:0c:3b:84:f2:09:49:d1:00:c7:57:a1:76:d7:
                    c3:ac:a6:43:55:ac:15:61:6d:f6:5c:d1:d4:3b:42:
                    c7:76:ad:86:75:7d:cc:73:55:b2:06:75:c9:50:ec:
                    42:f6:23:c8:dd:7d:2e:68:7e:c3:67:67:7c:cf:bc:
                    78:d3:68:0a:c7:a3:78:f1:42:30:5d:7f:c4:31:62:
                    21:21:49:84:1b:9d:27:1b:9b:2f:78:9c:c2:8c:34:
                    43:e3:b1:b4:15:14:4f:d9:71:22:58:95:29:87:13:
                    52:74:e6:72:20:41:34:31:51:72:2e:59:98:2d:9f:
                    5b:48:82:b5:4f:76:fd:47:9c:3e:4b:7d:1a:4a:9f:
                    a0:99:a0:fc:de:bd:f7:58:c8:9b:7d:01:a5:28:a5:
                    d8:54:f1:2c:aa:8c:03:3d:70:73:90:94:17:2c:72:
                    fb:97:62:7e:10:65:60:7d:01:e5:bb:82:ae:ef:d0:
                    f7:04:86:83:69:a3:76:29:ef:ad:46:0a:bf:c7:5f:
                    a7:1d:2b:1b:ed:e5:ce:5c:3d:b3:3d:bf:9d:0e:d4:
                    a4:e1:2f:9f:1e:13:41:a0:2c:13:f3:f4:8c:f2:2e:
                    ce:53:fd:3b:d5:d9:f7:5a:18:1d:ec:55:ae:ea:82:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:5B:48:61:6F:F7:0A:FC:B9:6D:10:9B:53:7F:7F:26:6C:E2:44
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:9c:0e:0e:86:7f:52:72:b0:c8:68:35:61:24:4e:19:fa:
         e8:fe:f1:48:cc:b4:39:fa:95:49:1d:7b:cc:3a:58:cf:85:ff:
         de:22:3d:7c:61:7e:82:66:2d:ab:f8:b0:00:eb:04:b5:57:17:
         bd:d8:62:31:2e:d6:da:d6:04:0a:f0:40:6f:91:6d:49:75:85:
         59:25:86:13:a9:4f:cd:c5:41:37:d2:7a:31:7b:f7:01:3c:60:
         7a:53:1a:4f:fb:dd:a6:cb:0e:59:03:f4:57:30:04:85:c2:64:
         73:b5:44:05:c0:43:35:8a:e9:67:45:9a:6a:25:87:f7:00:e9:
         7a:29:84:3d:34:65:26:73:c6:60:e0:34:ba:28:fd:48:14:db:
         70:ad:12:57:af:0e:28:fa:12:36:86:56:79:2c:eb:c2:71:2a:
         68:b9:f7:73:fd:3a:8d:a7:f0:db:b5:68:60:37:14:02:bc:36:
         69:4f:21:2c:6e:2f:00:19:aa:28:19:3f:56:a5:1e:02:9f:df:
         fd:bc:8b:d8:32:aa:c5:ff:77:7f:e3:1d:4c:35:43:d4:04:13:
         60:7a:7e:f7:46:4d:fd:8a:91:9e:1d:0c:83:85:80:b4:6d:30:
         c1:43:99:54:fc:4a:33:da:a6:64:35:bc:87:0b:65:8e:07:80:
         cf:c5:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org