Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa
File:                     2d27c3e941b1d56aef04776dd952d65006473939.roa (raw, json)
Hash identifier:          v18YhuY8ZRtmiTkKbOsRRTy0Zc22SAkOvGSvQjVxqMQ=
Subject key identifier:   94:73:5F:E7:9F:4F:AA:7A:1B:EB:56:48:41:E3:33:39:A2:3B:33:3D
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       1AA1CC
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa
Signing time:             Wed 12 Oct 2022 21:29:55 +0000
ROA not before:           Tue 11 Oct 2022 21:26:32 +0000
ROA not after:            Sat 12 Oct 2024 21:26:32 +0000
asID:                     272883
IP address blocks:        157.100.37.0/24 maxlen: 24
                          157.100.42.0/24 maxlen: 24
                          157.100.46.0/24 maxlen: 24
                          157.100.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745356 (0x1aa1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Oct 11 21:26:32 2022 GMT
            Not After : Oct 12 21:26:32 2024 GMT
        Subject: CN=2d27c3e941b1d56aef04776dd952d65006473939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:67:35:d1:32:d5:e0:8f:0b:32:9d:7b:25:
                    d3:76:d4:26:53:2a:09:7e:c4:30:c9:7c:e8:c8:25:
                    fa:b2:e6:76:98:6c:d8:55:f0:5d:92:22:a2:da:91:
                    29:e6:0c:7a:1a:f1:f8:7b:b3:29:65:ce:9a:de:f6:
                    00:7e:f7:15:27:96:7c:ec:b9:dc:23:d4:4f:90:37:
                    f6:7a:9e:a1:45:a1:ee:b0:80:6c:c2:44:d9:cc:c2:
                    a7:0b:e3:c8:e5:9d:e9:e3:3d:7a:4a:86:4f:2a:e0:
                    6f:8c:43:aa:19:07:e0:4d:1a:d0:91:18:43:fa:a9:
                    c9:c5:b8:36:ad:3d:67:82:4b:37:07:18:83:ae:ce:
                    9c:2f:c1:ea:20:9d:bd:5e:d7:93:2d:00:db:6c:08:
                    78:89:78:97:53:61:67:2c:e3:e1:a7:30:28:fb:a9:
                    bd:be:96:4e:46:db:b5:30:b5:27:d0:34:f6:13:20:
                    69:89:cb:b5:c9:38:05:51:2f:3f:b7:7a:3a:de:9c:
                    1e:38:af:41:64:ef:46:29:ef:e0:59:b6:ac:1d:02:
                    42:24:fa:23:1d:12:b4:ec:12:ab:a4:b1:5d:37:a9:
                    df:9b:cf:86:3b:5a:53:eb:62:97:75:c8:67:10:bf:
                    bb:9f:90:57:03:5d:ef:98:8f:7d:27:e6:bb:fd:36:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:5F:E7:9F:4F:AA:7A:1B:EB:56:48:41:E3:33:39:A2:3B:33:3D
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.37.0/24
                  157.100.42.0/24
                  157.100.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:a9:3c:8d:c4:c9:2f:7a:a5:30:24:03:6c:ff:fe:36:8f:
         82:55:e8:8f:5d:d7:a6:78:c6:17:58:e1:c8:ed:a2:1b:de:41:
         97:39:08:71:0e:51:ef:9a:c5:ef:3e:b1:0d:d4:03:2b:b8:a6:
         b0:ac:57:e7:1a:93:3b:81:ed:2f:66:4d:ba:9c:34:ce:9e:3e:
         d3:c9:6b:42:ab:cb:05:3e:f9:78:5f:25:24:c1:91:d8:d2:48:
         2e:8c:c7:5c:50:1b:99:d7:b3:e8:d3:80:9e:57:38:8d:ae:22:
         7b:2b:b4:09:e1:07:3b:97:1d:a4:83:7d:2d:95:ac:34:00:23:
         1f:9b:e0:1d:18:bc:d2:8a:b8:bd:55:5a:27:38:d8:7f:4f:bb:
         f3:65:41:81:e9:d0:bf:71:dd:61:b4:b9:31:49:b9:31:8f:9f:
         8b:75:be:e0:48:54:89:c7:b2:c0:fb:09:52:38:f4:ad:b9:43:
         c2:d5:94:e3:b6:14:3a:0f:67:0a:6c:c1:e6:b3:bf:c8:05:51:
         22:a5:5e:c6:3a:1c:85:3c:53:21:05:fd:0c:35:f2:dd:60:66:
         21:7e:4d:5a:ec:82:1d:b3:17:c3:15:4c:f7:d7:f0:3d:69:5f:
         22:0c:55:3d:28:5b:b9:b9:e0:b5:32:9d:01:95:0f:87:17:c3:
         87:9b:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org