Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/430acb98b52e39fe8b734b18df5a6683e4b36f8f.roa
File:                     430acb98b52e39fe8b734b18df5a6683e4b36f8f.roa (raw, json)
Hash identifier:          9FUHEJyH1mjYGWMnxAP2KWNOEImkLsv7E9vllaHIMEs=
Subject key identifier:   43:B4:49:41:12:F1:C3:C0:90:A7:3D:24:18:21:5B:CF:A8:B9:17:93
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0BF854
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/430acb98b52e39fe8b734b18df5a6683e4b36f8f.roa
Signing time:             Tue 16 May 2023 23:51:44 +0000
ROA not before:           Mon 15 May 2023 23:51:44 +0000
ROA not after:            Fri 16 May 2025 23:51:44 +0000
asID:                     272097
IP address blocks:        181.233.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784468 (0xbf854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: May 15 23:51:44 2023 GMT
            Not After : May 16 23:51:44 2025 GMT
        Subject: CN=430acb98b52e39fe8b734b18df5a6683e4b36f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:14:7b:cd:58:4c:f5:65:10:0d:e9:28:23:
                    bb:3b:43:68:0f:d7:70:cc:5c:7f:8e:78:94:7e:59:
                    82:85:d8:bf:79:3d:c5:78:81:d6:bf:9a:9a:06:b2:
                    38:41:87:8a:36:ab:f5:8e:33:b6:5a:0e:06:42:3b:
                    9b:96:da:d0:e9:af:15:e7:84:4d:e9:bc:18:ba:e4:
                    f5:2e:6c:c1:0a:89:0a:44:54:d4:7c:2c:bd:62:5e:
                    ec:92:3b:7f:3f:ad:e2:b4:86:cb:18:36:88:78:b1:
                    1b:18:17:25:9b:16:05:f1:a3:4d:44:b8:7a:fd:77:
                    e5:f3:73:5b:4a:8e:f6:d8:a3:a5:2c:34:5f:49:b9:
                    c5:c7:fa:32:fb:17:da:ce:15:f9:c4:9f:80:68:15:
                    7c:98:db:e8:8b:c4:89:3e:bb:45:a5:3f:b0:1e:ec:
                    93:9f:a2:bc:64:21:0f:7f:37:1d:4d:ea:47:0f:62:
                    4f:81:37:2b:41:05:ea:0c:29:33:5f:57:a6:10:8e:
                    85:f0:6e:69:6f:3f:17:85:07:b2:21:29:f7:fe:9f:
                    f1:74:c3:99:86:94:a2:d1:01:45:c0:3e:5f:aa:55:
                    2a:6d:90:d3:34:2a:b8:d2:b0:3c:88:71:1e:dc:d2:
                    db:af:8d:cc:89:37:32:6d:a7:90:80:aa:74:8f:1f:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:49:41:12:F1:C3:C0:90:A7:3D:24:18:21:5B:CF:A8:B9:17:93
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/430acb98b52e39fe8b734b18df5a6683e4b36f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:75:f6:39:e8:9e:96:71:71:ed:7e:69:95:f3:77:36:ec:08:
         a4:11:9f:88:cc:3f:e5:b7:03:cf:6a:a1:a9:42:02:57:c0:30:
         c8:87:1d:e2:d9:93:bd:59:3b:cd:32:99:33:b9:4d:da:39:a1:
         f0:70:4c:4e:a0:1d:00:c0:8b:f2:00:07:3a:be:3b:0d:3a:c4:
         95:08:5c:03:0c:98:d2:c4:55:b5:64:04:ba:50:c0:2e:bf:3d:
         a3:0a:c7:c3:a6:16:6c:1c:7d:c1:39:76:60:44:94:42:aa:fc:
         eb:8d:a2:1e:91:fd:1e:5c:d8:74:0b:3c:8a:08:1b:c7:0a:50:
         84:4e:23:c6:4d:bd:87:57:ef:f1:39:dd:95:24:ff:75:28:c5:
         3b:28:da:c0:6a:5c:6a:83:09:32:b7:1d:ba:d6:53:21:13:d1:
         66:94:40:92:d9:6f:c2:8c:0b:96:e5:cf:ab:21:dd:7c:f2:58:
         75:10:14:49:08:bf:af:89:0b:3f:9a:ac:3e:e2:06:44:b1:ac:
         22:c8:21:fe:d2:0d:4c:9a:cb:fc:94:9d:23:d8:f7:39:c6:18:
         6d:18:e9:d9:dc:7f:a3:bf:ea:c3:fb:e2:d2:99:ce:b5:5e:90:
         de:77:ac:e4:41:e8:cf:3d:22:d2:ca:09:fd:39:8c:b2:3a:ff:
         fd:d1:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org