Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/2485e5ff65360c1fe4119a0642e2f4dba079ae51.roa
File:                     2485e5ff65360c1fe4119a0642e2f4dba079ae51.roa (raw, json)
Hash identifier:          4oHfTk/pgf+aQ3C0X/aczNEmuEF9f+0cpLHHEizBKG0=
Subject key identifier:   3B:2B:3F:B9:4E:54:50:07:D6:7A:CD:F9:90:F2:8F:62:A3:FE:E2:5D
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       20F1F0
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/2485e5ff65360c1fe4119a0642e2f4dba079ae51.roa
Signing time:             Mon 26 Jun 2023 23:13:32 +0000
ROA not before:           Sun 25 Jun 2023 23:13:32 +0000
ROA not after:            Thu 26 Jun 2025 23:13:32 +0000
asID:                     52468
IP address blocks:        181.78.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159088 (0x20f1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Jun 25 23:13:32 2023 GMT
            Not After : Jun 26 23:13:32 2025 GMT
        Subject: CN=2485e5ff65360c1fe4119a0642e2f4dba079ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:c4:a7:68:e5:42:54:33:01:cc:50:e2:52:
                    a0:c4:d2:10:34:b9:55:63:d0:ef:ff:0a:34:5a:d9:
                    5b:f8:bc:c8:36:e1:86:20:1a:7a:7c:47:aa:e5:72:
                    c1:50:11:c2:5d:ef:a9:bf:1c:4e:0f:18:3c:4b:66:
                    5d:54:32:ea:b1:90:2a:4b:21:7e:24:6d:a2:e5:e6:
                    85:2e:f9:25:ac:27:68:93:01:15:23:19:0c:ca:9e:
                    6d:ac:39:41:f7:cc:a5:b2:7e:4b:89:38:db:8f:f8:
                    0f:d0:eb:f9:df:6c:78:2b:ba:9a:47:20:51:47:1e:
                    64:4b:06:dd:0f:95:6a:b9:ea:32:2a:a3:de:eb:8e:
                    ed:41:4d:fc:bb:ff:be:f3:32:7d:b4:d1:8c:1f:49:
                    d4:90:17:9a:90:d4:73:e5:02:4c:d1:e6:48:d8:8b:
                    5d:0d:f0:50:d6:af:27:09:01:6f:d2:c2:c9:de:a7:
                    6e:bc:b3:fa:3b:97:17:85:88:37:01:86:44:38:84:
                    18:5b:cd:d2:55:3e:72:c2:1e:07:4a:1d:97:6d:90:
                    de:32:2a:9f:fa:a1:0c:f7:08:87:e4:5f:03:78:af:
                    85:23:45:ea:cd:2f:6a:43:91:f9:11:38:3c:3a:fb:
                    cc:39:67:84:0b:4e:38:42:9d:c1:c6:18:ac:e5:ad:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:3F:B9:4E:54:50:07:D6:7A:CD:F9:90:F2:8F:62:A3:FE:E2:5D
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/2485e5ff65360c1fe4119a0642e2f4dba079ae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:f4:23:42:15:2f:82:87:86:1f:4b:09:0f:a5:30:d5:82:
         b9:f8:24:d5:35:db:31:a4:dd:8d:8d:c8:8e:e0:8a:7b:ba:e5:
         1c:71:a3:da:7d:0d:2c:71:64:0a:52:02:18:b0:6f:6c:a9:3b:
         5f:ba:47:02:b8:05:98:ba:62:1a:56:c0:c5:43:39:59:ea:f1:
         16:f8:c3:65:02:d0:51:5d:86:e4:6b:e9:ef:91:e3:9b:e2:92:
         19:53:24:52:da:63:76:b5:5e:10:2c:4a:cc:c5:29:28:2d:dc:
         13:f9:00:3c:31:38:34:c7:97:8f:f4:71:df:9e:bf:8f:57:0a:
         d2:24:5e:e7:20:46:d3:2c:f9:fe:0b:39:03:4d:1b:75:dc:ce:
         8c:3f:15:9b:0a:9c:e8:f0:79:f2:0e:e4:28:5f:a8:2a:34:34:
         e5:a4:51:0e:e1:b3:9d:d2:e6:50:f9:0a:ef:9a:5b:83:24:b1:
         f6:b8:72:1b:fc:a7:a9:40:c9:68:5e:15:d3:08:d9:1d:e6:11:
         1e:ce:3c:b5:25:cf:0a:cd:b0:51:09:db:b9:21:fc:c1:ac:b6:
         3e:3c:fd:7b:5c:d7:ab:c0:57:f3:8d:f0:fe:3e:d3:94:06:21:
         55:77:d5:2a:12:a2:c0:8d:74:72:5b:19:85:53:b7:58:8d:cf:
         31:6b:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org