Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2fe23f697304922fbb6cdcb20e23be10af5fcf31.roa
File:                     2fe23f697304922fbb6cdcb20e23be10af5fcf31.roa (raw, json)
Hash identifier:          LK377rfuanMxqmjt1mUejMaW+SR1AmOyOI6pfgNTPVM=
Subject key identifier:   1A:57:3E:D8:7A:9A:27:09:D6:A8:E1:FD:F2:C9:6F:34:70:95:78:8D
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       2557FC
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2fe23f697304922fbb6cdcb20e23be10af5fcf31.roa
Signing time:             Fri 17 Nov 2023 21:34:31 +0000
ROA not before:           Fri 17 Nov 2023 21:34:31 +0000
ROA not after:            Mon 17 Nov 2025 21:34:31 +0000
asID:                     6306
IP address blocks:        181.184.0.0/14 maxlen: 14
                          186.24.0.0/17 maxlen: 17
                          186.24.8.0/22 maxlen: 22
                          186.24.16.0/22 maxlen: 22
                          186.24.32.0/22 maxlen: 22
                          186.24.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447356 (0x2557fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Nov 17 21:34:31 2023 GMT
            Not After : Nov 17 21:34:31 2025 GMT
        Subject: CN=2fe23f697304922fbb6cdcb20e23be10af5fcf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:00:97:2d:6a:3a:c2:51:72:55:60:ed:cf:
                    9d:f7:a1:0b:b3:59:15:47:f7:e2:e3:11:cf:39:01:
                    58:a7:69:cf:f6:3a:e5:bb:0e:6d:f3:f1:af:fd:e6:
                    22:d1:78:db:db:e0:0f:7c:ab:8c:a1:56:b9:0d:25:
                    f3:02:0b:cd:5a:96:66:59:32:02:20:a2:91:c6:7d:
                    6d:c0:3d:88:07:3f:af:d0:b3:97:48:af:5c:a7:70:
                    fd:2a:57:86:48:20:56:1f:e4:6c:01:1b:17:3d:ad:
                    5c:61:1f:a5:ee:4b:13:3e:f1:c3:e1:78:03:99:fb:
                    52:99:08:35:6d:b2:b0:24:f3:e1:86:0d:2b:d9:07:
                    8a:32:ad:33:0b:00:4b:76:51:81:16:d9:2a:79:c6:
                    53:ce:c4:59:dc:8a:8c:c6:e8:c4:f5:99:ee:17:4a:
                    c8:56:95:64:5e:5e:f9:6e:37:7a:f6:53:b9:62:39:
                    c4:65:65:1c:a8:f4:12:b3:6c:4b:6e:f9:7c:6c:ba:
                    d0:05:a7:0e:63:8a:3c:23:18:95:a8:6c:18:b4:73:
                    73:f0:d6:10:96:8a:08:ea:a0:da:39:b2:79:dd:f6:
                    5b:5c:cb:1a:08:6e:eb:49:59:35:b7:af:90:65:e5:
                    7a:3c:b7:cb:cf:f6:90:19:d5:ba:be:2a:90:8f:7e:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:3E:D8:7A:9A:27:09:D6:A8:E1:FD:F2:C9:6F:34:70:95:78:8D
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/2fe23f697304922fbb6cdcb20e23be10af5fcf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.184.0.0/14
                  186.24.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:99:62:24:a3:e6:59:f0:c4:d0:ef:89:b0:9d:df:9c:10:
         f7:f2:1b:73:94:81:74:0b:65:65:95:d6:c9:39:00:a0:29:a1:
         24:10:80:e6:52:84:06:08:fd:6a:4c:4f:df:6e:75:1e:89:7c:
         5f:f4:10:e5:02:c0:35:5b:9a:50:9a:3b:24:c8:cd:86:0a:b3:
         37:32:3e:ac:af:89:43:47:1b:84:8d:bc:a2:20:3c:8a:eb:25:
         b3:be:2b:8d:d2:13:91:4c:0c:6a:2d:e5:d1:cd:35:d7:81:5b:
         a8:6f:28:d5:62:f7:82:1c:81:1b:98:46:de:a4:24:30:41:26:
         b8:54:e5:b7:4d:0f:5f:53:b1:41:98:1a:f7:25:3c:69:7b:fb:
         fc:d6:09:54:b4:82:22:af:62:7d:26:c8:61:64:e2:76:4e:72:
         7b:73:aa:82:be:f4:b4:a3:60:f9:b1:05:43:aa:e1:ed:d6:77:
         a5:09:67:f7:24:e2:b4:40:59:66:21:d7:a2:d8:19:2e:87:38:
         fb:aa:5a:f6:ee:17:f2:f4:ce:3c:a0:af:f6:f5:ac:e1:0e:07:
         02:17:51:00:b1:e8:15:45:8a:e3:23:50:ac:04:a2:b2:57:c7:
         6b:a9:d1:ca:48:2c:a1:00:c3:c3:5b:e4:98:16:dd:2c:38:a6:
         f5:4d:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org