Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e2037333033.roa
File:                     3138312e3137342e3231362e302f32322d3234203d3e2037333033.roa (raw, json)
Hash identifier:          bvZ6+o9dl51S7XjpM3ILCP/CEagOMUnQ29Q6CSgSMVo=
Subject key identifier:   AB:FD:6D:DB:46:5F:12:0A:A2:20:F1:BC:6E:B9:CB:0D:09:AC:5D:A0
Certificate issuer:       /CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
Certificate serial:       030620C1812341D195DAECF864494C2784E5DA8F
Authority key identifier: 4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 18:03:41 +0000
ROA not before:           Tue 05 Mar 2024 17:58:41 +0000
ROA not after:            Tue 04 Mar 2025 18:03:41 +0000
asID:                     7303
IP address blocks:        181.174.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:06:20:c1:81:23:41:d1:95:da:ec:f8:64:49:4c:27:84:e5:da:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
        Validity
            Not Before: Mar  5 17:58:41 2024 GMT
            Not After : Mar  4 18:03:41 2025 GMT
        Subject: CN=ABFD6DDB465F120AA220F1BC6EB9CB0D09AC5DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:84:d7:26:53:6d:9f:88:3e:83:6b:46:ac:
                    05:a6:14:99:a8:95:67:16:94:02:24:33:db:ab:98:
                    f9:77:ce:4b:a9:02:53:9c:5c:94:5b:21:09:14:f9:
                    5f:7c:62:ab:6a:c8:d1:5e:e0:31:7f:4f:8f:d6:15:
                    04:ff:9a:17:5c:f1:14:01:b5:e3:8f:bd:b0:2a:58:
                    8e:f5:ed:73:bb:7b:bd:eb:ac:18:5a:60:7e:85:a8:
                    19:99:83:75:05:72:a7:91:f5:0b:a4:a0:d1:1c:ab:
                    48:c5:ff:74:e7:62:af:9a:8a:68:1f:b8:1c:30:43:
                    aa:3d:48:8b:e7:f4:43:0b:c5:5f:a2:60:51:cf:01:
                    4b:25:a8:d3:ea:46:b3:cc:64:1c:b9:2e:e0:67:7c:
                    fb:cc:8d:18:d7:b8:ca:78:45:2e:28:d1:f1:b5:24:
                    1c:08:4f:67:7c:dc:30:8e:bd:58:f0:f1:c5:da:b8:
                    5f:aa:cf:52:24:39:e3:b7:e9:88:09:1f:a2:12:b0:
                    68:ac:88:38:69:71:36:8c:39:8e:b2:d8:24:c7:42:
                    0b:4b:ad:4c:dd:db:c9:00:2d:b2:d5:5b:92:8d:d2:
                    5c:65:9e:0d:75:6f:d8:e9:ba:75:86:2f:52:6c:8a:
                    5f:6f:51:8c:c6:df:97:69:36:1c:4d:a0:e3:c9:01:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FD:6D:DB:46:5F:12:0A:A2:20:F1:BC:6E:B9:CB:0D:09:AC:5D:A0
            X509v3 Authority Key Identifier:
                keyid:4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:86:39:63:4d:96:25:49:3c:e5:9b:e3:52:ea:72:bb:7e:fe:
         e7:be:ad:df:77:25:07:13:79:d3:28:c0:ba:5b:71:11:40:fd:
         b5:8a:8f:5a:dd:e7:96:39:62:8b:00:86:77:30:4f:f8:62:1e:
         c0:8e:07:ef:08:5d:95:fe:f8:2a:62:83:d2:7c:95:ba:e9:91:
         d3:b8:d0:d0:84:90:c2:27:74:80:78:27:2a:69:76:d4:93:82:
         43:73:21:7d:6f:df:0b:97:ac:55:dd:38:df:a8:7c:98:71:3b:
         50:ac:76:d2:5b:39:49:9d:06:d5:b2:e8:63:93:4d:7e:9d:29:
         1d:78:b5:92:5a:00:eb:f2:ff:32:ab:2d:29:be:8f:0e:85:ab:
         7e:3a:f6:8e:e4:87:44:33:92:c4:f0:7a:ad:11:d0:1f:e6:f4:
         36:47:86:ba:48:e2:63:61:34:cb:58:d6:d2:0b:0a:bb:ec:63:
         8e:20:73:1f:6d:5f:d6:24:a2:c8:a9:fd:78:64:a3:f5:78:0e:
         be:4a:9c:0a:80:80:5b:2d:21:ad:28:c5:bb:84:48:2d:23:3d:
         38:96:56:61:85:7d:cc:d4:23:c1:86:75:3e:c9:c8:ae:b9:ce:
         b8:08:b3:e4:b4:17:b1:e7:96:78:fa:a7:df:58:7c:e8:99:1e:
         50:8d:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org