Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/b5739a73d78f4c242689d51b06a42670c48cd144.roa
File:                     b5739a73d78f4c242689d51b06a42670c48cd144.roa (raw, json)
Hash identifier:          hnankchgtpW2tpOraGKP2MxorSmf1SKlqjvcEDuoyhI=
Subject key identifier:   85:91:AD:E4:49:28:76:6D:E7:47:3E:B3:FA:7D:6E:04:58:38:B2:6A
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       127D55
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/b5739a73d78f4c242689d51b06a42670c48cd144.roa
Signing time:             Fri 08 Oct 2021 19:55:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270009
IP address blocks:        201.182.240.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211733 (0x127d55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b5739a73d78f4c242689d51b06a42670c48cd144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:b7:09:5f:4b:38:de:42:96:e4:2f:74:f2:
                    df:d0:83:bf:bb:01:9a:83:48:92:9a:44:10:51:62:
                    c9:22:73:3a:49:e2:48:7e:f6:26:56:70:be:f1:1a:
                    0b:f8:f6:c6:70:95:4a:d1:2a:47:4d:12:f8:a1:a3:
                    48:35:3f:f0:19:a8:d3:ca:02:bc:67:d5:59:2e:39:
                    b6:56:fc:74:d6:8d:ae:89:3b:06:66:3c:8f:bd:19:
                    91:88:e0:59:04:7b:31:ea:8f:f7:e4:1f:8e:ae:76:
                    6e:88:f4:fd:60:06:d9:65:a3:57:07:44:1d:65:1b:
                    8a:38:cb:25:7a:c0:0d:19:86:36:a1:21:86:96:e3:
                    ec:d9:a0:ac:87:2d:90:f1:08:20:bf:35:b1:29:d2:
                    87:a2:59:40:2a:d1:d9:06:d8:fc:49:e1:ce:7e:ba:
                    8f:a2:47:c9:f0:b7:f9:5b:f0:d8:0c:46:0e:ad:96:
                    86:50:e4:33:79:5e:5f:99:a0:50:a3:62:7c:73:0b:
                    8a:a5:c5:06:07:1d:92:42:d0:83:48:73:4d:62:02:
                    b6:40:e4:b2:69:f1:c0:0c:fc:a3:fc:9c:56:8a:26:
                    a2:38:15:bb:4f:e5:1c:4d:a3:41:bb:5e:4d:a9:54:
                    6b:34:f8:02:2e:b6:47:64:fe:87:27:f1:e3:a6:93:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:AD:E4:49:28:76:6D:E7:47:3E:B3:FA:7D:6E:04:58:38:B2:6A
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/b5739a73d78f4c242689d51b06a42670c48cd144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:fa:6c:41:d7:3d:88:e2:a9:8d:2b:d4:0b:9d:df:5b:0a:
         68:0b:60:12:3e:3a:6b:83:2b:ad:7c:cb:78:6a:87:34:8c:39:
         7c:80:38:d1:41:2b:79:7a:4c:99:70:38:1e:fe:aa:67:81:ae:
         09:b6:84:d2:8b:56:c8:64:20:18:ca:08:f7:20:83:ce:dc:72:
         4c:6a:20:09:dc:f5:fd:e3:2b:75:02:6a:cb:07:63:48:b8:ec:
         72:11:7f:7b:19:45:de:f4:1b:f5:81:98:f2:25:84:fd:21:1b:
         bd:11:a2:0c:9c:16:9e:d8:c1:0e:07:4b:aa:bd:93:0a:d8:2a:
         95:87:ca:03:9d:32:0d:64:76:c6:65:05:00:c0:64:a5:42:7e:
         4d:0f:e3:18:62:4f:bb:c4:a9:18:77:7e:aa:86:f0:fa:0c:dd:
         cc:87:3e:41:5d:70:1f:c3:3b:25:b5:49:e2:a0:66:91:12:ae:
         9b:13:68:24:03:63:db:88:5b:8c:80:2d:0f:5f:29:13:b7:67:
         58:9d:41:a0:12:b5:51:54:dd:44:3d:ad:db:4a:ac:86:3e:97:
         87:e5:d4:b3:0c:8b:d1:76:d4:61:39:70:c2:b9:03:7a:5d:65:
         fe:5d:a8:d4:1a:3e:08:e3:8b:22:83:42:40:64:80:4f:f4:a5:
         ad:73:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org