Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa
File:                     74fcb88270562d0a0497e86dc549befe1429ecc9.roa (raw, json)
Hash identifier:          n8H/Dui9gUnX0YaTEzGrwWd9N1gymHDvYmL3gf4Mk/8=
Subject key identifier:   13:F3:D6:0E:70:7C:AE:5E:AD:45:27:40:D6:5D:EC:BB:22:67:F5:27
Certificate issuer:       /CN=231291584c896b71599d4bb8b4d15a658a7149ad
Certificate serial:       10150E
Authority key identifier: 64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa
Signing time:             Tue 11 Jul 2023 19:05:06 +0000
ROA not before:           Mon 10 Jul 2023 19:05:06 +0000
ROA not after:            Fri 11 Jul 2025 19:05:06 +0000
asID:                     20207
IP address blocks:        181.174.172.0/22 maxlen: 24
                          181.174.176.0/21 maxlen: 24
                          138.122.128.0/22 maxlen: 24
                          2803:cc80::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053966 (0x10150e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231291584c896b71599d4bb8b4d15a658a7149ad
        Validity
            Not Before: Jul 10 19:05:06 2023 GMT
            Not After : Jul 11 19:05:06 2025 GMT
        Subject: CN=74fcb88270562d0a0497e86dc549befe1429ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cf:3d:7a:9a:af:25:1f:c8:ad:a8:7a:3e:95:
                    8d:40:a7:bd:37:7b:62:35:cf:dd:6d:19:74:c4:36:
                    01:dd:ac:de:10:c6:00:1b:b0:e3:21:0c:f3:9d:41:
                    90:b7:2f:51:5e:42:2d:db:40:88:e0:f2:5b:7e:23:
                    55:59:9d:79:1f:58:71:1d:93:a2:c7:54:a9:3e:c9:
                    3d:78:86:f0:4f:55:f2:e7:4f:c9:27:4f:4e:97:ef:
                    da:da:fb:24:53:4f:f7:9a:3d:ee:97:c3:8c:32:9d:
                    89:8b:f5:a7:f1:8d:6a:f6:76:8a:11:c8:cf:f3:76:
                    de:1a:e8:51:37:b8:ac:62:27:f7:34:36:a2:bb:19:
                    ff:df:83:15:de:4b:0d:40:62:f6:96:62:26:46:82:
                    68:09:9d:ef:64:a9:02:0e:c5:26:bc:4a:10:0f:70:
                    19:cb:d2:1d:d1:98:b7:c6:d2:b9:f7:98:f6:31:a8:
                    a4:22:2d:f1:a9:4f:cd:3d:3e:6a:46:cd:68:4e:8a:
                    2b:56:fd:a9:75:d0:cf:aa:d7:64:b6:49:9d:d1:b2:
                    af:71:60:1d:15:b1:4d:f1:1b:46:9d:82:1c:be:ad:
                    77:2b:c4:a0:9b:2c:e0:21:3c:d9:b4:f4:09:e0:01:
                    a0:dd:dd:cb:0e:f7:f9:f0:c1:2b:5c:48:17:61:ab:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:D6:0E:70:7C:AE:5E:AD:45:27:40:D6:5D:EC:BB:22:67:F5:27
            X509v3 Authority Key Identifier:
                keyid:64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/74fcb88270562d0a0497e86dc549befe1429ecc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.128.0/22
                  181.174.172.0-181.174.183.255
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:dd:73:71:bc:39:9a:61:2f:49:4c:3f:13:49:e6:c8:4c:
         75:7b:a6:09:45:ac:53:b0:be:dc:e8:77:a1:6f:c1:96:03:69:
         bc:0f:56:d9:28:72:23:a3:3e:bc:51:01:85:fb:ae:24:6b:f8:
         3f:e6:19:53:b9:04:2d:16:4f:a7:4b:58:a1:8e:92:ae:18:b8:
         66:3f:7c:b9:80:3e:3f:00:56:40:0d:99:af:5f:f9:7e:64:47:
         45:57:89:fb:b9:dd:fc:fa:e5:79:de:27:f1:ff:8a:25:da:36:
         6c:7d:dc:ff:c3:21:da:90:b3:ec:34:78:e4:8a:dd:31:05:80:
         5f:92:fd:25:36:f3:54:cd:9b:28:02:8f:0e:f5:34:3e:b4:d6:
         93:ca:2f:11:69:43:67:51:e6:e9:eb:f5:68:ba:c8:5f:43:6c:
         d7:19:3d:fd:dd:2c:fa:dd:3a:20:8a:0e:a9:7a:a9:e7:f2:a2:
         b7:8d:ef:d7:14:66:21:4d:5f:cb:d8:51:ad:79:37:a2:80:9f:
         a8:02:67:88:e6:a2:cd:6e:29:84:44:9d:1c:45:06:a6:a9:65:
         e3:64:63:d1:04:48:1c:7b:fe:eb:17:7d:15:c5:58:5c:23:a3:
         34:4d:b7:9a:7d:70:0a:e7:ca:a4:71:70:79:84:8c:05:57:bb:
         6b:0c:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org