Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b5790efeb6602475741b632e77f094a5b268b967.roa
File:                     b5790efeb6602475741b632e77f094a5b268b967.roa (raw, json)
Hash identifier:          NPX9bf9WR+yw2sJOl0+dhmdmRW3zsw5QO3fRrjPQnt8=
Subject key identifier:   14:52:4D:88:EA:F5:3A:22:65:1D:4E:DF:D6:EE:DF:B0:33:CE:10:5B
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2B5139
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b5790efeb6602475741b632e77f094a5b268b967.roa
Signing time:             Wed 10 Jan 2024 07:30:00 +0000
ROA not before:           Wed 10 Jan 2024 07:30:00 +0000
ROA not after:            Fri 09 Jan 2026 07:30:00 +0000
asID:                     14080
IP address blocks:        181.54.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838841 (0x2b5139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jan 10 07:30:00 2024 GMT
            Not After : Jan  9 07:30:00 2026 GMT
        Subject: CN=b5790efeb6602475741b632e77f094a5b268b967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:e3:95:81:b3:da:38:4e:1f:99:cd:76:98:
                    87:aa:09:a7:26:b2:c8:35:08:aa:c1:3f:43:50:79:
                    1a:a8:0c:4b:fd:54:e0:88:13:b3:07:b4:cf:41:96:
                    27:1f:71:d3:25:4b:ee:62:08:68:d8:2b:31:65:fa:
                    75:14:52:8b:d0:16:0a:72:a2:37:4a:2b:e6:a6:fa:
                    a3:14:b4:05:59:f1:83:6c:69:d0:f8:e7:92:18:6e:
                    55:cf:b8:ef:85:2c:9c:5b:d0:d7:7c:42:b2:d7:22:
                    17:b5:dc:8a:80:83:f5:f8:ac:61:c1:42:0b:98:7a:
                    52:2f:b2:2a:33:18:f9:44:92:ee:79:4a:60:da:5a:
                    57:dd:a1:ad:6b:14:f8:f4:0e:47:ad:1c:bb:ff:a7:
                    bb:f4:f1:72:e9:fd:97:8e:d5:41:a1:02:81:e1:f6:
                    a4:9c:fc:a4:4a:4f:68:eb:29:ac:f5:52:19:5e:84:
                    8a:aa:3e:d1:92:36:c5:05:4c:a1:d1:4b:93:ba:e6:
                    ca:c5:9a:31:2e:d0:a9:a3:94:1f:02:d8:33:14:f0:
                    30:06:80:3c:08:17:25:cc:37:c3:06:09:01:30:50:
                    2e:5a:f8:cd:7d:30:31:2f:52:49:56:aa:3d:b2:3e:
                    68:5c:ca:2b:ac:13:85:ce:c6:74:a4:57:5b:c5:fb:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:4D:88:EA:F5:3A:22:65:1D:4E:DF:D6:EE:DF:B0:33:CE:10:5B
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b5790efeb6602475741b632e77f094a5b268b967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.54.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:91:7f:08:af:21:55:6c:a2:1d:fb:03:a0:c0:7d:c6:a2:
         ad:be:33:f4:d9:42:a6:15:44:32:cc:80:da:ec:10:a5:52:b6:
         d5:e0:ae:3e:df:91:0e:19:79:91:44:04:67:f1:b1:f7:01:30:
         7e:ad:0d:62:98:5a:cb:1b:bd:0a:2e:90:5d:75:3d:ef:75:62:
         2b:2e:a0:3f:84:ed:b1:42:90:d9:e7:3a:b3:5d:e7:a6:dc:14:
         62:44:62:25:f2:1a:d6:47:ca:ce:53:33:fa:ee:62:4b:64:ae:
         f0:20:93:7f:f0:8b:14:08:ba:78:38:82:29:f6:83:e1:d5:88:
         d8:a9:56:af:b1:2b:d9:cd:96:4f:ad:5b:53:78:4d:f2:99:ea:
         57:fd:b6:7c:f8:5f:a2:9b:f0:2b:7c:02:96:7f:c5:4e:a0:c6:
         0d:dd:55:61:90:ec:e5:66:16:78:15:d7:d3:60:ce:fd:3d:87:
         3b:99:23:cf:6e:de:72:b6:54:30:4c:ce:b3:e4:94:b2:19:e0:
         58:e6:dc:ae:e7:31:f3:c5:86:6a:a3:ea:9a:b0:4f:9e:4a:6e:
         66:10:c2:10:b1:7b:0c:42:dd:52:43:bd:2f:5e:ab:58:ae:65:
         0e:3d:6a:b9:22:26:78:5c:dd:d9:82:9a:d8:46:12:9d:f4:1a:
         c7:00:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org