Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa
File:                     d81312069b28d4a522469a14f5f5a4c05eb648ca.roa (raw, json)
Hash identifier:          D47sdFgsp1TmbJmnnXKtHM3PWLy38gH3HTvO++UuZao=
Subject key identifier:   5E:80:82:6E:56:47:39:1F:1E:07:AC:CD:2C:AC:10:A5:EA:CB:B6:56
Certificate issuer:       /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial:       2805E8
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa
Signing time:             Wed 06 Mar 2024 06:58:32 +0000
ROA not before:           Wed 06 Mar 2024 06:58:32 +0000
ROA not after:            Fri 06 Mar 2026 06:58:32 +0000
asID:                     265524
IP address blocks:        131.196.248.0/22 maxlen: 24
                          181.191.244.0/22 maxlen: 24
                          181.191.248.0/21 maxlen: 24
                          192.141.124.0/22 maxlen: 24
                          201.182.20.0/22 maxlen: 24
                          2806:2eb::/32 maxlen: 48
                          2806:286::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622952 (0x2805e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
        Validity
            Not Before: Mar  6 06:58:32 2024 GMT
            Not After : Mar  6 06:58:32 2026 GMT
        Subject: CN=d81312069b28d4a522469a14f5f5a4c05eb648ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:0e:de:f6:45:bb:3c:0a:7e:d5:bf:d6:65:
                    99:6c:eb:54:59:26:d5:df:b6:74:a8:75:c8:75:f0:
                    6a:db:db:31:db:f4:bf:60:24:fd:3c:22:45:ef:fa:
                    31:f0:2a:cb:4b:dc:c8:50:ff:0b:98:b1:21:92:3a:
                    a7:3c:64:ab:bb:a7:7b:04:3e:c7:17:fa:1a:f5:7a:
                    2c:6e:55:5c:0d:b5:8b:6d:9b:51:cf:92:0d:36:1c:
                    a2:79:fa:f3:62:b3:9b:22:64:bd:d0:0b:e9:e6:8c:
                    94:ec:95:70:8f:2a:30:a5:14:4f:de:b4:5f:38:d9:
                    43:3e:d5:06:b5:df:ad:9d:da:f2:19:93:1e:42:e2:
                    c7:21:d2:f2:2f:cb:45:5c:6a:eb:84:6b:8f:a7:77:
                    38:bc:e9:96:87:8f:d4:7e:4f:cd:ae:77:8e:c6:70:
                    da:fb:1c:3c:e2:41:07:0d:57:de:bb:65:d8:ec:d6:
                    73:5e:cf:32:33:8a:cd:e5:b8:3f:00:ef:05:2b:67:
                    d2:5e:b0:8b:e4:7b:89:0a:56:b5:a8:28:5e:80:54:
                    15:2d:3c:a4:0a:20:37:48:dd:82:a4:ec:70:2a:b5:
                    1d:b2:9f:32:3f:4c:8b:16:65:4d:13:2f:df:9f:81:
                    26:41:f6:a5:b5:09:5b:b8:1d:53:69:68:6b:b3:2a:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:80:82:6E:56:47:39:1F:1E:07:AC:CD:2C:AC:10:A5:EA:CB:B6:56
            X509v3 Authority Key Identifier:
                keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/d81312069b28d4a522469a14f5f5a4c05eb648ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.248.0/22
                  181.191.244.0-181.191.255.255
                  192.141.124.0/22
                  201.182.20.0/22
                IPv6:
                  2806:286::/32
                  2806:2eb::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:7b:21:3d:17:96:45:32:e6:e5:d9:30:34:b2:09:8e:95:
         a0:51:02:05:06:b1:1f:86:74:70:d5:c9:f3:c8:c6:78:5c:cf:
         ca:73:d7:7e:a2:6e:ea:45:a9:27:26:a8:e3:d7:36:0e:42:59:
         96:5e:1c:d3:92:b1:dd:30:39:f5:53:79:cf:d7:7c:ef:ce:a4:
         d8:bc:44:b6:be:2e:60:32:60:9a:52:f7:c4:1e:80:c7:0b:2b:
         41:53:4b:be:27:01:4a:d3:cb:c2:95:95:b8:57:20:63:d8:1a:
         54:12:37:71:15:f0:71:d6:aa:a3:28:c9:cd:f8:89:16:c4:e3:
         18:e9:88:58:fa:84:d8:4e:a3:4e:7a:10:e8:da:85:15:4f:00:
         e9:4b:47:c5:ab:32:63:19:65:cc:13:b1:64:ce:f5:29:6b:ec:
         85:8f:1e:6d:41:0f:cc:51:40:f1:7a:b2:da:de:23:f7:9b:59:
         1a:42:6b:cb:25:a5:ab:ff:40:25:6c:9b:9f:46:b1:21:fe:7f:
         67:99:4f:e2:24:c4:07:fe:e2:1c:76:9c:36:28:9c:9a:1d:6c:
         54:35:e3:f5:33:11:61:ef:3f:3a:be:9b:60:6c:84:57:69:ff:
         c6:7f:21:52:a9:13:3a:6b:bd:c5:a0:53:2d:2f:75:1c:b6:b0:
         2f:9d:7c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org