Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e3f18fd2c0ef8edf945df398a19298e288a0655a.roa
File:                     e3f18fd2c0ef8edf945df398a19298e288a0655a.roa (raw, json)
Hash identifier:          Wt2zbfdsirrmPhVkiEsl6k+uuTchlZU44u+yFxcRr5Y=
Subject key identifier:   B0:F8:45:5C:72:01:85:02:D3:9A:2B:1D:00:72:5C:9A:9D:C5:D6:90
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       212C66
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e3f18fd2c0ef8edf945df398a19298e288a0655a.roa
Signing time:             Wed 05 Jul 2023 01:51:50 +0000
ROA not before:           Tue 04 Jul 2023 01:51:50 +0000
ROA not after:            Sat 05 Jul 2025 01:51:50 +0000
asID:                     52468
IP address blocks:        157.100.52.0/24 maxlen: 24
                          157.100.53.0/24 maxlen: 24
                          157.100.54.0/24 maxlen: 24
                          157.100.55.0/24 maxlen: 24
                          157.100.56.0/24 maxlen: 24
                          157.100.57.0/24 maxlen: 24
                          157.100.58.0/24 maxlen: 24
                          157.100.59.0/24 maxlen: 24
                          157.100.68.0/24 maxlen: 24
                          157.100.69.0/24 maxlen: 24
                          157.100.71.0/24 maxlen: 24
                          157.100.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174054 (0x212c66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Jul  4 01:51:50 2023 GMT
            Not After : Jul  5 01:51:50 2025 GMT
        Subject: CN=e3f18fd2c0ef8edf945df398a19298e288a0655a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:57:1b:c3:35:b9:c8:90:78:cf:f3:62:e8:
                    9d:bc:3d:ac:54:e9:65:95:80:f0:d1:37:8d:26:a2:
                    a0:59:c7:b0:2d:55:0c:20:47:f3:a1:ff:37:9f:90:
                    e0:02:56:b5:d4:0d:c2:45:13:df:bb:06:30:b3:76:
                    98:5a:35:6e:d5:9d:ab:23:d3:1f:09:0d:45:f2:79:
                    05:ab:5f:60:89:1c:b5:7e:56:86:6c:65:3f:1c:e5:
                    b7:e1:5b:60:c2:ce:05:2c:a3:e7:1d:30:35:6f:3e:
                    a6:fe:c2:33:b6:9e:a1:74:76:2b:2e:80:07:7c:67:
                    80:e8:4f:88:c0:bb:e7:fa:36:6f:3c:bb:17:9e:04:
                    4c:7b:61:fa:26:0d:a4:4e:67:ec:58:d9:7e:fc:ea:
                    db:97:20:b3:99:5d:f0:df:d6:aa:96:c0:ad:5b:96:
                    b3:1e:87:a3:15:1c:74:6a:e8:63:b6:65:43:7a:22:
                    53:af:02:7a:25:3d:4f:8b:db:e4:ba:a1:51:c7:0d:
                    9a:42:03:12:fc:06:25:c8:b6:0b:1b:31:fe:fd:4e:
                    e4:1f:42:99:37:2e:02:b1:db:5c:aa:2b:c0:f4:4e:
                    73:df:c5:4b:74:58:38:33:8c:23:77:62:f3:2c:e9:
                    7f:91:f8:2f:ab:39:18:4d:50:98:50:08:87:44:e5:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F8:45:5C:72:01:85:02:D3:9A:2B:1D:00:72:5C:9A:9D:C5:D6:90
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e3f18fd2c0ef8edf945df398a19298e288a0655a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.52.0-157.100.59.255
                  157.100.68.0/23
                  157.100.71.0-157.100.72.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:1c:ab:7c:c3:42:89:49:9c:4a:96:14:96:09:ff:c5:30:
         60:cf:88:02:fd:d4:1f:56:17:e9:57:46:76:78:21:3d:15:54:
         41:9c:5a:6b:3d:0c:19:c3:43:2b:5a:d3:09:99:ba:99:5e:2b:
         b5:91:f6:ef:26:d4:a3:4b:a7:19:99:f4:1f:7c:b6:22:e0:7b:
         58:92:ae:38:b1:ca:bf:3d:11:75:9e:d3:04:fd:87:f2:84:cd:
         32:6f:58:b3:dd:cb:a3:55:2c:47:df:87:a1:2a:69:ca:db:4d:
         e8:73:85:62:20:58:51:ef:5b:1b:40:af:de:5b:61:55:f1:d6:
         d2:c6:61:a0:a2:2a:d9:23:de:b8:0b:4d:fe:31:7b:6f:f3:ad:
         19:1e:2e:4b:a5:42:8b:19:b1:1b:da:08:f5:df:17:9c:54:d2:
         10:f3:6c:17:66:19:f4:df:9e:0c:b3:d1:91:ac:6f:90:db:fb:
         bc:67:1f:59:5c:f8:3a:37:13:40:87:8e:dd:f1:4d:13:d5:92:
         08:03:69:08:0e:9c:92:1a:68:a3:06:06:a0:41:21:49:aa:f2:
         d2:89:1c:af:18:cd:50:3f:8b:be:2e:4b:24:c3:d2:ed:8d:61:
         12:82:1b:40:d5:0a:20:26:20:6e:d9:5e:82:49:35:41:08:c8:
         91:d4:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org