Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/8a0e57358e3f6190864dd64cf27abd20fba66b6c.roa
File:                     8a0e57358e3f6190864dd64cf27abd20fba66b6c.roa (raw, json)
Hash identifier:          ZF0ZjpWC5LUFyUUe0rjWuWGsMo9ir6T+ghQ37PvkgD4=
Subject key identifier:   8A:2C:BB:F9:2A:B2:FF:B7:84:08:89:47:CA:D2:79:E7:D4:FB:A2:9C
Certificate issuer:       /CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
Certificate serial:       11C4FB
Authority key identifier: 14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/8a0e57358e3f6190864dd64cf27abd20fba66b6c.roa
Signing time:             Fri 09 Feb 2024 07:32:25 +0000
ROA not before:           Fri 09 Feb 2024 07:32:25 +0000
ROA not after:            Sun 08 Feb 2026 07:32:25 +0000
asID:                     272024
IP address blocks:        181.189.24.0/23 maxlen: 24
                          181.189.26.0/24 maxlen: 24
                          2803:2510::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164539 (0x11c4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
        Validity
            Not Before: Feb  9 07:32:25 2024 GMT
            Not After : Feb  8 07:32:25 2026 GMT
        Subject: CN=8a0e57358e3f6190864dd64cf27abd20fba66b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:1b:d0:e2:1b:06:23:7c:fd:09:8c:b5:42:
                    af:ef:89:24:db:bb:c1:66:13:39:b9:5b:7b:7b:63:
                    0f:3a:aa:eb:3b:90:13:2b:60:ce:96:17:0c:19:45:
                    9d:2e:43:2f:b2:bd:bc:eb:54:2c:cf:a6:2c:df:94:
                    c7:45:85:b9:10:a7:d2:b7:6a:db:57:b6:0c:62:94:
                    18:4f:88:20:8c:47:1c:6a:c0:71:4f:a8:8b:77:ec:
                    32:3c:9f:ef:86:85:1a:17:b3:06:2e:d6:85:a4:bf:
                    17:c0:56:ac:6a:f0:5e:eb:d1:5c:40:31:4e:42:43:
                    05:ff:3f:50:3a:6d:5b:32:9b:23:7b:8d:5f:75:9d:
                    53:b6:bf:9e:87:12:6b:16:c1:ee:19:94:f7:7b:07:
                    b5:f1:60:be:b9:cc:5b:e6:75:a5:ae:7c:b9:d4:c0:
                    d5:50:ff:dd:86:5d:ca:28:2f:bc:40:8d:b8:f9:d5:
                    55:9a:61:96:4d:30:d9:5b:aa:56:f1:94:12:07:d9:
                    84:54:47:f1:e4:16:5c:b9:d7:c0:52:16:f3:dc:ba:
                    4e:0c:2f:68:4b:78:4a:68:68:38:58:35:f5:59:e9:
                    be:e5:f6:90:f3:95:bd:b3:21:7c:da:dc:cc:39:2c:
                    29:6b:89:5f:40:c7:d4:b4:0e:ea:38:af:57:85:07:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2C:BB:F9:2A:B2:FF:B7:84:08:89:47:CA:D2:79:E7:D4:FB:A2:9C
            X509v3 Authority Key Identifier:
                keyid:14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/8a0e57358e3f6190864dd64cf27abd20fba66b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c8c59d2967ce698ceab49f8ca58b384c5945c526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0-181.189.26.255
                IPv6:
                  2803:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:92:1d:ce:65:85:24:04:d2:61:b8:0a:4f:ef:ca:d9:24:
         4e:19:7e:f4:0e:a5:65:ca:f6:71:db:92:33:fe:b0:d0:b4:4d:
         8d:e9:5c:64:62:a3:b8:1a:73:95:d0:b4:c2:e7:eb:22:e3:ca:
         4b:b1:d3:a8:63:e8:a6:c9:ca:a4:2c:18:7b:27:b1:bf:f1:9c:
         e7:7c:2e:c7:27:a2:b3:52:af:38:11:8d:cf:9b:c0:2f:92:97:
         f9:9f:f4:04:78:b4:56:05:ea:f8:ad:84:b1:95:2c:0f:6a:f4:
         fe:41:34:02:d1:dd:3e:94:38:d0:1d:d1:5b:c7:04:53:04:04:
         6b:e0:3d:ce:1d:89:98:9c:69:b1:a6:58:2c:9b:86:15:77:f9:
         f2:8c:06:d9:1f:fd:88:d7:ef:3a:bb:5c:e3:c4:37:72:85:d2:
         f0:a8:31:b9:f9:b8:73:b2:2e:27:c3:1a:18:24:b7:75:ff:51:
         ab:c9:b0:b3:84:c0:51:cd:44:68:0e:73:78:d0:10:fb:3c:3a:
         7d:f8:61:8a:6e:d2:0f:47:a3:48:95:d3:21:66:22:ab:4c:f1:
         2f:af:46:b6:6c:22:03:71:52:72:59:3c:3c:f6:ac:8f:87:a9:
         3a:cd:84:16:44:06:8d:90:01:3f:52:89:7d:fe:d5:d7:97:98:
         17:86:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org