Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e31c4561347543fcd3c3cbae3b74dcdb4f11d8c.roa
File:                     9e31c4561347543fcd3c3cbae3b74dcdb4f11d8c.roa (raw, json)
Hash identifier:          e2vsj/7OEJfz4omUn+fcQFtztgaqMBddDDdryy9TrOE=
Subject key identifier:   C3:C2:D7:D8:E5:0B:DF:18:BF:B0:0C:9C:21:F9:7E:AA:C7:31:7B:B0
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       03AEDF
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e31c4561347543fcd3c3cbae3b74dcdb4f11d8c.roa
Signing time:             Fri 28 Jul 2023 13:53:14 +0000
ROA not before:           Thu 27 Jul 2023 13:53:14 +0000
ROA not after:            Mon 28 Jul 2025 13:53:14 +0000
asID:                     16629
IP address blocks:        201.236.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241375 (0x3aedf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 27 13:53:14 2023 GMT
            Not After : Jul 28 13:53:14 2025 GMT
        Subject: CN=9e31c4561347543fcd3c3cbae3b74dcdb4f11d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e0:60:a8:c4:43:ae:fc:54:01:09:4a:ec:de:
                    17:bb:86:ae:d0:dc:76:db:a0:87:9b:c5:79:40:08:
                    40:89:c8:67:37:c4:44:35:93:f4:d2:4d:ac:e9:19:
                    26:a9:41:d4:43:b4:51:f8:ef:b6:27:1f:08:ce:b8:
                    37:db:04:d5:ec:e5:d2:6e:b2:de:0a:7b:a3:65:6f:
                    83:08:91:33:f4:86:7d:cf:18:f8:91:46:ce:22:58:
                    f9:5e:a3:0e:64:15:73:f0:ba:81:d3:aa:37:3b:63:
                    66:6a:70:63:2c:d8:06:c4:a8:e2:79:c7:ae:7c:60:
                    0a:d8:bc:fe:a1:75:37:70:12:a0:65:2a:24:4f:55:
                    d7:60:06:8f:8c:79:18:85:4b:70:96:c4:e6:84:a2:
                    03:ed:41:29:70:c9:47:65:63:2f:fd:4b:ce:58:87:
                    4c:89:f6:f2:79:cb:6d:31:da:6a:86:b7:72:c1:58:
                    13:bc:e1:02:ed:42:b4:b2:f4:a4:68:23:2a:98:6f:
                    9e:54:d4:34:96:9d:e9:41:72:7c:13:2d:a4:56:b1:
                    e3:b6:67:81:d5:04:a7:ff:89:73:8d:6f:b7:0b:f5:
                    e9:43:2f:25:24:47:f9:d4:e4:5a:06:d0:6b:f4:1b:
                    d4:6a:3f:1a:f6:97:ee:a5:da:46:47:b1:07:e8:3e:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C2:D7:D8:E5:0B:DF:18:BF:B0:0C:9C:21:F9:7E:AA:C7:31:7B:B0
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e31c4561347543fcd3c3cbae3b74dcdb4f11d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.236.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:56:97:77:92:58:54:88:ff:7b:7c:9a:8e:5c:d2:0b:b0:24:
         03:66:b7:49:07:0e:25:c7:01:09:49:5a:ed:8f:1b:45:23:ae:
         60:b0:e2:f8:d5:ee:07:ca:10:21:82:1f:24:ea:9d:1f:e1:99:
         17:93:d9:10:ff:a2:13:a8:56:a1:a5:fb:9b:9f:bb:7a:75:9b:
         95:9d:28:ff:54:b3:4a:89:87:6f:37:cc:47:0d:23:4b:91:a7:
         02:2d:b4:37:87:0a:23:7b:73:02:df:d0:98:86:d1:04:96:bc:
         33:ca:ff:0c:e0:39:25:d3:12:de:fa:82:b7:9c:9e:ff:ea:3d:
         52:b7:1c:8b:b5:47:25:29:8b:a6:02:cb:f6:31:9e:1f:e7:ca:
         1c:23:5e:33:8d:07:1e:a1:e2:30:41:e5:46:79:4c:01:f3:61:
         8a:a1:92:18:03:9e:53:27:f9:d6:13:ee:f9:58:a0:b4:6c:33:
         ec:6b:32:64:eb:c1:9d:d1:bf:bd:f6:45:46:37:a6:bb:3a:28:
         4c:05:e9:ea:8d:c4:e2:d9:5c:e1:67:57:24:4a:a6:aa:66:7c:
         8b:49:6c:a9:06:59:42:d5:c7:57:a1:dc:4c:59:4b:03:b6:ab:
         8d:43:7f:77:c7:98:42:03:aa:55:43:65:c3:95:28:a0:9b:37:
         c6:c0:ef:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org