Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ae6d032371d3ce062844d87690265d6b51b7e2a7.roa
File:                     ae6d032371d3ce062844d87690265d6b51b7e2a7.roa (raw, json)
Hash identifier:          7tPJW21sxrKnhAdoPll1NipP+beqO/9DwkUUYGlG1qc=
Subject key identifier:   88:F0:20:EF:34:55:FD:B0:17:3E:94:44:AF:1A:04:04:7D:B1:3C:44
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0DF863
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ae6d032371d3ce062844d87690265d6b51b7e2a7.roa
Signing time:             Wed 24 Mar 2021 14:29:00 +0000
ROA not before:           Wed 24 Mar 2021 14:28:59 +0000
ROA not after:            Tue 24 Mar 2026 14:28:59 +0000
asID:                     28075
IP address blocks:        181.118.72.0/24 maxlen: 24
                          181.118.94.0/23 maxlen: 23
                          181.118.116.0/23 maxlen: 23
                          181.118.118.0/24 maxlen: 24
                          181.118.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915555 (0xdf863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 14:28:59 2021 GMT
            Not After : Mar 24 14:28:59 2026 GMT
        Subject: CN=ae6d032371d3ce062844d87690265d6b51b7e2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:77:73:3a:b3:8d:3a:98:7b:c5:72:e5:f5:d0:
                    7e:cb:0a:31:c8:03:5b:57:13:b5:a4:a6:24:77:f8:
                    22:b0:b5:42:28:db:63:46:df:c9:12:67:b3:33:a6:
                    48:c5:e2:82:76:c8:22:c1:2a:7f:da:ab:a7:30:e5:
                    19:7f:cd:97:2d:e0:36:44:ec:48:3d:4c:62:2e:90:
                    48:23:3e:af:fd:a6:2a:ab:e4:fd:d6:44:68:90:5b:
                    fb:6e:e6:f9:54:4c:a1:0c:68:02:38:1a:aa:6d:ec:
                    e6:ac:57:0e:8c:c0:42:a1:bb:29:b6:23:5a:22:bc:
                    d3:ea:e6:8a:50:0b:dc:9e:f1:69:22:0b:eb:5d:b8:
                    d5:68:78:a1:73:da:dc:2c:06:9c:c3:ff:23:88:ea:
                    e2:ae:91:03:69:d2:78:76:e4:be:7c:2a:bc:5f:96:
                    66:34:4f:bc:58:02:b1:ff:84:9f:31:f1:85:9e:f9:
                    46:11:0c:24:e3:d2:7a:8e:fe:72:91:20:48:72:2e:
                    c7:dd:5f:ae:28:82:81:22:f7:71:35:b9:1e:37:fe:
                    19:96:ac:4e:cc:37:1b:83:70:99:24:01:c4:8b:30:
                    37:16:a1:a2:27:91:97:11:be:b3:bb:79:de:e3:6b:
                    58:b2:62:8f:5e:ec:50:b1:89:ef:c4:60:e4:07:4f:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F0:20:EF:34:55:FD:B0:17:3E:94:44:AF:1A:04:04:7D:B1:3C:44
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ae6d032371d3ce062844d87690265d6b51b7e2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.72.0/24
                  181.118.94.0/23
                  181.118.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:6f:37:86:60:e6:1e:f6:2f:68:2a:8e:ea:2c:63:d0:f2:22:
         63:cb:ca:60:39:87:4c:a2:4c:27:5f:bb:df:fb:20:df:0d:60:
         8e:d1:66:6b:98:ab:b3:05:8f:86:61:d7:a9:d0:c8:c7:04:cb:
         1e:16:1d:61:72:a2:38:6b:ce:87:66:ff:d0:29:2f:c8:e9:ae:
         31:d0:95:01:16:24:7e:b9:c4:02:73:b2:e0:1d:10:62:a7:8d:
         33:20:e1:58:16:5d:2c:5c:e1:2e:b3:32:4d:83:b5:f8:19:86:
         9a:ca:a7:7f:4a:2d:f8:27:e8:b1:27:06:61:22:15:ba:fe:10:
         58:35:11:b9:72:9b:d6:eb:bf:82:bb:57:a9:5e:bf:21:26:1f:
         f8:be:eb:8b:29:f0:80:c4:36:f1:2d:bb:a5:d6:e0:45:09:7a:
         34:a7:7a:b0:57:24:45:f3:22:cf:3b:07:c6:45:48:3a:cf:9e:
         55:25:99:ec:60:3a:13:3d:50:bb:f4:c1:96:5a:40:47:da:91:
         a3:5d:54:44:8c:b0:3c:aa:81:4e:1f:9f:fd:ba:0c:6e:f8:f5:
         bf:2a:c6:f6:6b:c7:58:b4:6a:c9:3e:74:46:0e:74:a6:21:eb:
         7a:82:36:be:ef:75:9e:22:8e:36:10:e5:87:26:36:7e:9b:28:
         4c:aa:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org