Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d757c34e4d5d150532d886cea5b78d14ea10eb6b.roa
File:                     d757c34e4d5d150532d886cea5b78d14ea10eb6b.roa (raw, json)
Hash identifier:          izcJCuy86ZOm8kURVtcgUQIoeXnZzR7xObXsllA4WO0=
Subject key identifier:   2F:27:46:C1:BC:F3:B3:74:77:04:E5:31:30:A5:C0:FB:98:4B:20:05
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       19DFE3
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d757c34e4d5d150532d886cea5b78d14ea10eb6b.roa
Signing time:             Tue 05 Sep 2023 18:20:07 +0000
ROA not before:           Mon 04 Sep 2023 18:20:07 +0000
ROA not after:            Fri 05 Sep 2025 18:20:07 +0000
asID:                     28001
IP address blocks:        201.219.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695715 (0x19dfe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: Sep  4 18:20:07 2023 GMT
            Not After : Sep  5 18:20:07 2025 GMT
        Subject: CN=d757c34e4d5d150532d886cea5b78d14ea10eb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:5e:61:06:6d:48:9b:eb:8a:4e:78:bd:39:
                    a3:9a:53:ef:f4:e1:03:a2:5b:b2:ca:5e:e6:a1:e3:
                    04:cb:8f:11:48:7a:96:2b:d4:86:ff:ac:e0:cb:0b:
                    1f:51:dc:26:08:20:7e:cc:49:78:12:80:5d:6a:59:
                    a8:b9:24:f3:18:c5:fb:3c:f5:63:4b:29:01:cf:6c:
                    1d:a1:f8:e7:90:b1:57:0e:28:ea:47:45:2c:76:50:
                    10:85:e9:9e:05:9b:7f:c4:b9:83:cb:24:81:28:d6:
                    5f:23:11:4e:72:1f:9b:fd:36:d6:6e:0b:89:f5:e6:
                    9b:23:b6:4b:49:2e:03:b3:71:3c:a6:1f:1f:c9:11:
                    95:bb:2b:e7:5e:d0:bd:97:ff:07:ad:43:d3:4d:ab:
                    b1:e9:0e:91:de:4d:4b:c1:61:30:c7:51:dc:48:86:
                    d4:0f:a7:a5:65:36:a3:74:5d:18:83:0f:bb:f3:23:
                    eb:9b:21:0d:c2:00:29:6f:77:94:77:52:a3:24:87:
                    e0:ca:f7:25:fe:32:7b:fa:87:50:b6:a5:15:a8:f6:
                    76:f7:33:b2:a6:89:e2:d1:69:7c:00:13:fc:d4:50:
                    41:39:08:8c:3b:d5:7c:be:62:72:00:a4:a3:69:e1:
                    96:75:d7:ec:a3:56:25:06:83:70:09:eb:70:0b:dd:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:27:46:C1:BC:F3:B3:74:77:04:E5:31:30:A5:C0:FB:98:4B:20:05
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d757c34e4d5d150532d886cea5b78d14ea10eb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:5e:f8:d3:ce:eb:2b:2a:08:6b:3c:f7:42:45:30:61:cb:
         03:85:20:25:19:11:94:b9:e8:1f:b2:6e:ce:a4:ca:70:a4:ff:
         9a:7a:e7:53:be:7a:8b:b9:eb:c5:ab:5c:30:25:db:f1:a3:84:
         ad:c7:59:0b:f9:ce:0d:cf:82:20:2a:c4:1b:1e:8f:09:33:d1:
         6d:e3:5e:05:3a:fb:90:5d:33:b3:92:c1:54:cc:d3:68:f9:d0:
         9a:63:f7:d4:03:c3:f9:8b:09:34:c6:46:18:5a:c6:1f:bb:ed:
         09:f9:50:21:75:50:99:c4:08:83:85:d1:c0:f3:9a:47:af:07:
         aa:d5:6a:db:e9:96:a4:ee:80:5b:e9:09:28:45:01:b4:8c:38:
         bf:a4:b7:8b:5b:6a:f1:3e:09:99:16:8b:07:ad:22:f1:3d:e4:
         57:a6:69:e0:2f:09:6a:7d:86:6e:60:f2:37:ca:8f:77:2b:db:
         94:61:eb:09:83:57:f2:86:ad:3a:0b:02:ac:ea:d1:5e:e6:f1:
         8a:df:35:31:82:0a:ac:15:47:f9:be:27:cd:fb:94:2f:8e:18:
         7d:cd:d4:94:f4:6f:b6:a9:de:49:75:cb:78:f4:aa:a6:94:39:
         d6:1a:6b:00:bd:d7:0a:2c:23:f6:97:8b:6e:a6:fd:b5:d6:5e:
         fe:3a:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org