Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d5729194255b7ea4ae6b1811d1f8137a035b3946.roa
File:                     d5729194255b7ea4ae6b1811d1f8137a035b3946.roa (raw, json)
Hash identifier:          Un9ufYkPLgVu2vegkJKAEkrjzJYPqAh3MfFYkObw0s0=
Subject key identifier:   ED:53:D1:10:78:80:69:A4:07:DA:2B:26:DD:A3:1B:5C:D0:DB:E4:4E
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D1A02
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d5729194255b7ea4ae6b1811d1f8137a035b3946.roa
Signing time:             Sun 17 Mar 2024 18:42:27 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        181.56.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2955778 (0x2d1a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=d5729194255b7ea4ae6b1811d1f8137a035b3946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:93:de:3b:76:a3:97:8c:7f:e8:87:8b:22:
                    7f:8a:b8:ba:4f:e5:c8:d2:fb:9f:5c:28:17:bf:4f:
                    2f:f1:b9:20:32:6f:3c:c4:27:e3:65:68:02:e1:12:
                    53:ef:8b:81:6d:1b:21:92:36:cf:f9:33:d1:4d:31:
                    76:06:d6:e7:e8:1b:12:0a:3f:d7:40:ee:dd:90:28:
                    5a:ba:20:f7:fc:eb:14:e2:63:cb:80:4e:98:79:8e:
                    4e:8f:de:55:57:92:c1:4e:4e:52:0c:c9:fb:b8:c5:
                    d8:8d:0e:cb:24:15:0b:03:04:4a:29:3f:98:26:a2:
                    f3:33:20:36:9f:77:c8:4c:7d:f5:80:83:59:1d:14:
                    68:d7:11:0f:f6:5a:57:c1:e7:df:84:2f:fe:49:06:
                    1c:75:1c:31:ad:58:2e:d5:4e:1d:fa:39:0b:7d:59:
                    5f:a1:0a:c7:24:e7:11:74:24:ac:75:d9:6e:08:b5:
                    b0:65:65:52:8a:76:65:0b:20:78:47:e3:19:cb:3a:
                    da:8d:f3:b8:9e:28:35:1e:86:ae:3e:eb:f9:ab:eb:
                    5c:d4:5a:49:6b:a3:01:56:ba:d4:51:3f:7b:72:07:
                    c5:1a:f3:7c:77:d2:3e:50:44:20:53:c4:54:3f:e4:
                    69:c8:44:05:de:34:5f:b9:70:76:86:4a:a5:b6:cf:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:53:D1:10:78:80:69:A4:07:DA:2B:26:DD:A3:1B:5C:D0:DB:E4:4E
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d5729194255b7ea4ae6b1811d1f8137a035b3946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.56.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         19:2c:39:10:3e:49:84:4a:06:f1:1d:c2:14:6a:ef:17:e1:04:
         c1:ec:94:67:b6:03:06:54:93:73:e8:ce:ed:c1:44:cc:2e:0e:
         56:58:b6:0f:21:aa:d4:ba:60:b1:5a:da:01:92:71:cd:ba:bb:
         27:4d:87:c7:86:d7:54:29:98:89:7d:28:37:12:08:8b:3c:8f:
         01:97:24:6b:fc:2d:00:dc:32:6a:8f:30:d7:e7:9a:36:06:49:
         31:ea:5e:5c:a4:31:2a:0e:de:c8:8c:ff:ee:67:28:47:50:8d:
         b1:08:b1:23:22:2b:dd:f8:7d:03:7c:14:37:ba:5a:7a:1a:75:
         ad:a8:77:66:32:47:df:13:57:f1:fb:5a:93:3b:05:e6:5c:00:
         e5:d5:29:00:7d:c4:49:82:6e:35:a4:f9:f8:ba:fc:0a:0f:8b:
         5a:c3:46:fc:d2:d1:54:50:27:f7:3a:1b:fe:ef:e2:76:70:18:
         52:a3:21:67:e8:06:6a:02:a2:67:09:b0:53:78:37:97:a0:56:
         1f:7e:eb:0d:c8:bd:da:e8:e1:ed:94:81:06:3a:b7:54:14:87:
         4f:bb:36:96:82:9e:94:4e:2d:29:eb:50:60:1a:df:70:c9:f9:
         97:65:9a:07:54:9e:32:88:96:4a:af:42:ab:15:56:83:b1:43:
         a9:ef:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org