Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/0782f0ad242aad039d89fd8a9318621f65139e03.roa
File:                     0782f0ad242aad039d89fd8a9318621f65139e03.roa (raw, json)
Hash identifier:          MWz3y77obFQpa9FlosiCFqrbvnF7m4yfeA3TQw2igzc=
Subject key identifier:   08:E5:0A:04:B4:2D:FA:48:96:38:E2:D3:DE:A3:38:6F:BA:A4:2F:79
Certificate issuer:       /CN=75414d9f68146acc4abcd9997952be1300ec5196
Certificate serial:       11FBCE
Authority key identifier: 31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/0782f0ad242aad039d89fd8a9318621f65139e03.roa
Signing time:             Sat 24 Feb 2024 08:30:00 +0000
ROA not before:           Sat 24 Feb 2024 08:30:00 +0000
ROA not after:            Mon 23 Feb 2026 08:30:00 +0000
asID:                     22011
IP address blocks:        201.175.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178574 (0x11fbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75414d9f68146acc4abcd9997952be1300ec5196
        Validity
            Not Before: Feb 24 08:30:00 2024 GMT
            Not After : Feb 23 08:30:00 2026 GMT
        Subject: CN=0782f0ad242aad039d89fd8a9318621f65139e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:10:66:5d:4c:9b:de:b1:d5:3f:51:da:d7:
                    10:4b:df:c5:c4:3b:22:0a:1f:68:97:ff:a8:fa:cf:
                    5c:c7:94:10:ee:b8:ac:ae:3a:3d:1d:d7:c7:73:32:
                    98:76:2d:31:3a:72:a1:62:6c:3a:f8:2f:b9:77:88:
                    b2:a0:68:7a:92:95:3f:19:9f:f7:62:23:7c:9f:d5:
                    0f:8b:e5:df:37:e1:73:b6:29:c3:52:35:6b:f0:e7:
                    03:30:68:62:82:51:2c:65:bb:d1:97:e7:95:f7:6b:
                    f4:d9:99:f4:57:99:95:d5:2a:96:e2:29:ad:4a:70:
                    0c:10:71:14:b2:5c:e8:47:bd:2f:80:88:ff:d2:a3:
                    b3:c3:94:33:b0:1f:81:76:f5:7d:29:df:19:dc:8a:
                    7a:2a:49:f2:cb:94:ad:38:f0:ab:cc:7d:88:b9:a5:
                    e9:51:81:62:48:8e:61:e7:39:00:2b:4a:45:20:32:
                    4b:d0:69:9b:4c:33:7f:d2:c9:ac:8f:70:a9:c1:ff:
                    b5:8b:b6:87:d6:29:f6:61:45:0b:69:f7:a2:ec:7e:
                    52:20:2f:2b:76:66:fb:d5:43:a1:63:ed:a7:3a:5d:
                    9c:c3:75:45:9b:b8:77:87:70:05:39:3f:77:d2:fe:
                    26:ce:f8:d2:73:fa:b4:2b:5c:f5:6f:63:35:33:28:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:0A:04:B4:2D:FA:48:96:38:E2:D3:DE:A3:38:6F:BA:A4:2F:79
            X509v3 Authority Key Identifier:
                keyid:31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/0782f0ad242aad039d89fd8a9318621f65139e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:98:2d:f2:dd:ff:c3:be:aa:92:2d:46:2e:a9:ab:13:f6:d0:
         7e:5f:d5:5c:8f:83:85:51:a2:47:66:1f:00:fe:cf:ec:68:ba:
         6c:d4:77:61:43:82:28:49:1f:51:cd:44:d1:7f:68:52:fd:67:
         99:e6:ec:46:20:df:12:72:9c:d2:bf:3f:b3:4a:f7:df:e9:a5:
         5d:36:ae:0b:b2:f7:8c:d8:a1:fd:83:ef:21:1e:d3:28:f8:bf:
         e7:3a:81:87:a4:2a:50:92:f6:c2:45:47:10:d4:f6:39:83:a6:
         df:1d:94:2d:31:96:19:33:be:7f:70:fc:15:93:0f:84:1a:5a:
         e9:78:3a:95:2b:ca:e3:8f:f1:50:71:80:ad:ad:c3:82:cf:e1:
         4c:7e:cb:d6:ba:7c:03:b0:28:3e:88:5b:e3:aa:63:4e:fa:d9:
         cb:d6:35:b4:3e:4b:5c:5c:72:e9:92:fb:4d:58:55:bc:f5:da:
         0b:27:f0:52:52:b5:b5:69:6f:27:46:9e:59:2a:b0:26:bd:0d:
         b1:32:aa:3d:a8:66:fd:9d:39:9a:10:ec:1a:c7:a3:7c:b9:09:
         b4:b8:a0:29:7d:23:a4:c8:fb:e9:53:94:f9:95:c5:b0:59:28:
         3c:70:8a:54:8c:fa:b4:63:29:f2:1e:e1:34:00:7f:25:30:36:
         ac:18:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org