Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/39652a2b9bf58382add7e97f8b43a30982cf31e1.roa
File:                     39652a2b9bf58382add7e97f8b43a30982cf31e1.roa (raw, json)
Hash identifier:          EiuZQTeurZnoTUl1ScQDt3icpXh8JPn4eUJWx2hqnWc=
Subject key identifier:   C9:97:48:45:D2:90:75:3E:2F:BA:9D:B4:97:6E:33:AC:DE:74:44:BA
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24CE22
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/39652a2b9bf58382add7e97f8b43a30982cf31e1.roa
Signing time:             Tue 26 Sep 2023 17:12:48 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     262212
IP address blocks:        201.218.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412066 (0x24ce22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=39652a2b9bf58382add7e97f8b43a30982cf31e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:02:c5:9f:36:bd:9f:17:4a:2c:6c:cc:b1:
                    f5:f3:79:b2:00:ae:27:ad:3d:f7:c6:4d:4c:53:04:
                    a2:75:5f:12:b0:18:c4:f8:33:8a:04:dd:06:07:8b:
                    83:ef:77:69:16:e7:ae:11:54:ac:34:e8:2f:5f:34:
                    7c:eb:a9:fc:f1:77:0d:3f:67:80:29:83:e7:98:f9:
                    e9:cd:34:ec:45:53:41:9e:72:e6:9f:b0:92:c3:f7:
                    52:d0:04:a0:07:56:83:ac:7a:97:d0:25:9c:6c:8a:
                    c5:f7:a1:0f:c7:5f:37:30:27:1e:52:ee:d2:04:a2:
                    5e:60:2d:d1:2e:a9:5b:09:c6:95:78:a6:78:ca:f3:
                    c0:c7:ed:13:20:93:df:2f:87:b6:54:41:b9:e5:0c:
                    14:50:65:6c:93:06:2f:6c:23:3f:26:0e:dd:26:ab:
                    5f:a0:19:a1:4a:e9:73:b9:94:4b:61:66:2a:c1:0a:
                    d0:4b:37:1c:bc:3f:68:3f:ad:eb:a3:bb:66:18:84:
                    3a:42:92:7c:26:74:8a:c2:69:d3:b2:25:ca:ec:1d:
                    6b:09:ff:5d:f4:62:e7:d7:e1:bb:02:96:0a:5d:76:
                    ed:d8:ea:55:91:87:96:06:e3:6e:5b:67:e0:53:20:
                    34:94:cc:23:43:fa:4e:76:e8:7f:93:ad:ab:37:f8:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:97:48:45:D2:90:75:3E:2F:BA:9D:B4:97:6E:33:AC:DE:74:44:BA
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/39652a2b9bf58382add7e97f8b43a30982cf31e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:07:7d:f0:39:ed:5a:bb:2d:0c:70:04:5c:fe:08:80:fd:
         ff:82:ad:dc:b5:79:16:23:52:eb:af:d4:6c:b4:58:b9:49:44:
         fa:8c:85:3f:39:2d:5d:a9:88:da:ca:63:20:6e:82:9d:56:81:
         db:ab:6d:fa:a8:25:b1:a1:65:16:5b:25:3f:b8:71:ae:5f:08:
         f0:86:39:c0:57:d0:d0:85:da:94:cc:c3:0b:f5:8f:e2:2b:52:
         c5:29:e2:65:5a:f4:0f:22:8e:df:cd:c1:cb:48:78:46:1f:d6:
         19:b6:47:73:9d:43:12:4b:63:eb:0a:7f:32:37:14:43:aa:ea:
         95:c7:e5:ef:bc:6c:0d:43:1f:50:d5:07:c0:b9:a1:40:10:07:
         45:64:09:d3:3c:61:bb:c2:b0:32:53:de:87:ce:9c:d3:b9:6b:
         40:04:65:cc:f7:13:a8:73:86:16:a3:8e:e7:2f:aa:38:2a:cd:
         52:ae:d6:b1:21:cb:25:1c:13:5a:85:1d:94:c6:69:57:b8:13:
         03:d6:60:3b:1b:39:5b:ee:47:7a:5f:4f:0e:95:da:be:83:d8:
         84:92:6f:91:e6:10:e7:a3:55:c6:e8:04:48:4b:15:fb:16:6b:
         fc:fe:91:76:5b:f3:ec:c5:23:e8:1d:43:63:0d:3b:54:76:d9:
         ce:e0:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org