Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/5937e5fbd40b9778e4b1c3c864f7f4a5bee06edb.roa
File:                     5937e5fbd40b9778e4b1c3c864f7f4a5bee06edb.roa (raw, json)
Hash identifier:          RQHqkE6wA0nt9ytt8HzcoGwXp3Gu4d/XlKoGWlqAqnU=
Subject key identifier:   D6:D8:16:1F:9E:79:04:1F:50:81:FF:DD:E6:CA:D0:9B:D7:A5:4D:EC
Certificate issuer:       /CN=75414d9f68146acc4abcd9997952be1300ec5196
Certificate serial:       11FCBD
Authority key identifier: 31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/5937e5fbd40b9778e4b1c3c864f7f4a5bee06edb.roa
Signing time:             Sat 24 Feb 2024 08:30:33 +0000
ROA not before:           Sat 24 Feb 2024 08:30:33 +0000
ROA not after:            Mon 23 Feb 2026 08:30:33 +0000
asID:                     22908
IP address blocks:        201.175.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178813 (0x11fcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75414d9f68146acc4abcd9997952be1300ec5196
        Validity
            Not Before: Feb 24 08:30:33 2024 GMT
            Not After : Feb 23 08:30:33 2026 GMT
        Subject: CN=5937e5fbd40b9778e4b1c3c864f7f4a5bee06edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:e5:de:ea:32:89:80:05:19:c6:d4:f8:66:
                    a8:c9:73:f1:d3:d6:e6:da:f8:7f:62:0a:e2:91:4a:
                    27:ee:10:a6:43:9d:62:07:99:54:56:f9:a3:33:fd:
                    11:a7:d4:46:65:86:1c:89:e1:87:fd:f9:4e:81:e4:
                    c3:ca:27:e5:31:e0:61:ca:c3:4b:f9:c2:4c:f2:b2:
                    c3:3f:74:49:ef:ab:ec:ce:e2:5c:b8:56:bc:b8:ce:
                    04:21:e2:82:28:24:ad:99:38:3b:1b:26:7c:63:08:
                    8b:0f:2c:7b:69:2c:05:dd:1e:be:f8:00:7d:09:5a:
                    a3:b5:e1:13:f9:e2:f2:29:8a:d7:39:94:eb:50:fc:
                    23:68:06:ff:3d:07:cb:9c:91:8f:f7:29:4f:03:79:
                    bc:05:e3:5a:75:d7:1c:46:de:2e:31:65:db:df:83:
                    81:80:61:98:66:a6:e3:90:22:63:70:b7:39:80:ec:
                    fb:72:7e:b0:da:0e:9a:47:4b:30:1c:ed:0b:05:ed:
                    37:77:06:d0:99:5b:15:14:9c:b4:5f:55:44:dd:b6:
                    19:d4:fb:fe:ee:77:73:f9:61:95:86:4c:20:b2:d9:
                    52:cc:fc:a0:92:06:6c:12:51:f4:47:1d:f8:b4:de:
                    c1:ab:7e:c6:c8:64:09:c1:4f:ba:3f:ac:0a:29:df:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:16:1F:9E:79:04:1F:50:81:FF:DD:E6:CA:D0:9B:D7:A5:4D:EC
            X509v3 Authority Key Identifier:
                keyid:31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/5937e5fbd40b9778e4b1c3c864f7f4a5bee06edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b8:7a:d4:dd:33:7b:d9:fa:f9:47:ef:75:c3:f4:9a:aa:67:
         40:5a:c4:45:66:77:0a:c8:8c:99:ce:c8:13:13:14:1d:ac:2b:
         dd:ff:79:e9:1f:82:12:69:e2:f8:0f:82:6c:80:46:47:b0:6c:
         5e:8c:91:e7:5d:50:34:3c:e8:1f:1d:36:61:c7:67:37:5f:d6:
         60:53:27:6a:40:da:24:59:a3:ec:ce:99:af:ae:d7:22:9a:83:
         f4:2b:9a:9f:c1:ed:f3:e5:0d:16:17:a5:ed:3f:18:11:78:0a:
         1b:a5:14:e5:0f:e1:7c:08:3b:06:e8:77:cc:91:b0:3c:d5:ed:
         f1:1b:4e:13:37:78:b9:32:7c:0f:34:00:2c:b8:9e:c3:4a:ef:
         9b:01:5f:47:77:1a:c8:45:c1:5a:c5:67:66:ae:3a:a7:ee:d0:
         67:36:d7:e9:a2:3e:32:72:23:12:87:31:cb:8b:19:51:8a:7a:
         87:26:97:31:86:df:f5:9d:4d:bd:eb:ab:8d:94:ab:da:ca:03:
         82:6d:4a:17:47:11:7c:3b:62:27:5a:32:ec:69:24:7d:61:40:
         8b:53:09:c1:53:98:a4:ca:f6:9b:4d:1e:79:c4:cb:11:de:66:
         a6:b4:7e:b5:d4:4c:5d:79:75:86:f8:90:ec:05:ef:3f:83:50:
         31:f1:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org