Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9ef88f943376497838b63db5d31cf6ffb0580eee.roa
File:                     9ef88f943376497838b63db5d31cf6ffb0580eee.roa (raw, json)
Hash identifier:          Nt8IPiMBkle0ts54rjX4DwwH7n7KpK7iQ+qMmU60Tr8=
Subject key identifier:   FC:AF:8B:2A:97:10:E3:33:FD:C1:19:7D:7C:80:7A:3C:F3:90:71:77
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DBF1A
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9ef88f943376497838b63db5d31cf6ffb0580eee.roa
Signing time:             Sun 17 Mar 2024 18:44:23 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        181.58.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998042 (0x2dbf1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=9ef88f943376497838b63db5d31cf6ffb0580eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:99:8b:ff:05:bc:1c:2a:55:e9:b9:42:aa:
                    a7:ba:5a:c6:cb:82:22:65:e2:8b:e9:23:fb:93:b5:
                    7b:b4:7d:71:a7:6a:18:1c:ab:5f:1d:ad:de:be:b1:
                    b5:3b:4e:be:95:dc:24:c6:37:96:a0:f1:0a:1c:e5:
                    f5:62:36:d0:73:df:74:8b:69:24:c0:99:d6:e6:7f:
                    70:79:3e:3c:b7:47:b4:0f:74:ef:b6:98:67:b9:1e:
                    03:75:8a:99:cd:f1:74:f8:4d:88:3f:da:f4:88:fc:
                    83:ed:c9:10:54:9f:aa:56:80:80:d5:5b:6f:af:83:
                    0b:f2:e4:1e:db:cf:29:ea:21:99:8e:a6:25:a8:83:
                    bf:00:84:38:b4:61:33:0b:15:e9:4c:8f:88:56:ad:
                    43:de:b9:0d:00:60:d2:55:23:91:17:74:a4:d5:3c:
                    10:8c:dd:b7:ba:ea:35:28:75:ce:0c:8f:d7:d5:9f:
                    2f:aa:b9:d8:15:1c:2d:d9:2b:ac:9c:69:90:b9:99:
                    11:ab:a0:0a:e9:dc:3c:b2:4b:11:bc:52:60:d7:52:
                    e7:14:86:08:e4:c6:16:8c:af:5e:fe:97:1f:71:f9:
                    82:07:9d:11:2b:8a:55:42:d7:a4:74:9f:2a:95:7f:
                    5b:96:1a:5d:24:49:7c:21:fc:27:b0:51:7a:c5:c6:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:8B:2A:97:10:E3:33:FD:C1:19:7D:7C:80:7A:3C:F3:90:71:77
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/9ef88f943376497838b63db5d31cf6ffb0580eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.58.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:1a:ad:11:a4:fe:3a:df:cd:f8:29:d2:e0:2d:fd:59:7e:
         39:06:d0:09:23:7b:e1:ce:80:98:cc:e0:fb:1c:32:07:d5:5e:
         a9:7e:a7:ed:a3:7d:6f:f5:30:d6:b2:76:5f:9a:fa:aa:63:45:
         c7:5a:6a:84:d6:7d:2c:1a:49:7f:73:f3:c8:05:d3:11:de:7e:
         57:7b:71:02:2b:dd:5f:87:90:ea:a0:19:90:d3:1a:e0:5b:68:
         53:10:e0:bb:fb:69:ae:02:d0:e8:28:4c:3c:94:26:cc:a2:38:
         91:43:75:0e:ab:c4:37:31:4f:d2:55:10:de:25:ea:3c:4c:51:
         ef:3f:42:e3:aa:58:9f:f9:8b:3e:73:88:40:92:6e:d8:76:e2:
         cf:72:e7:be:85:1e:70:4c:17:f2:c4:a4:d8:9b:4b:ee:0d:af:
         9e:fc:6f:b8:ad:c3:b7:64:cd:14:13:d3:fc:a5:e3:29:21:b2:
         e8:39:ea:5d:55:91:1b:e2:1a:ce:9f:ba:3e:6f:3d:ab:dc:97:
         45:83:38:fc:c4:83:34:99:99:9c:a5:3a:bd:e6:d0:6c:cd:54:
         6c:8f:ce:f0:6f:d7:01:99:84:86:69:de:d7:c9:3c:c7:68:ae:
         4a:98:69:d2:a6:53:31:e2:1c:c7:d8:92:61:2c:6d:bf:50:9f:
         91:40:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org