Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/1c46f6010adbdf66a840909ab2d25c88bfbcc65a.roa
File:                     1c46f6010adbdf66a840909ab2d25c88bfbcc65a.roa (raw, json)
Hash identifier:          hROaRGKgl/dOsD4NJOHxMBw8/ZwHFqs2rLB30Ykz4Lw=
Subject key identifier:   E7:6B:D7:FD:50:4B:7B:3C:C8:AE:4F:C0:11:66:78:B9:4D:55:7D:CB
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       2667E5
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/1c46f6010adbdf66a840909ab2d25c88bfbcc65a.roa
Signing time:             Fri 26 Jan 2024 22:21:42 +0000
ROA not before:           Fri 26 Jan 2024 22:21:41 +0000
ROA not after:            Mon 26 Jan 2026 22:21:41 +0000
asID:                     52468
IP address blocks:        181.79.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516965 (0x2667e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Jan 26 22:21:41 2024 GMT
            Not After : Jan 26 22:21:41 2026 GMT
        Subject: CN=1c46f6010adbdf66a840909ab2d25c88bfbcc65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:7c:71:fb:e2:fb:46:28:a7:b2:8f:d7:69:
                    70:1e:21:7d:19:5e:e7:df:56:8f:e2:56:f4:b8:f4:
                    a3:c3:45:45:ff:2c:26:44:18:5e:7b:b4:c9:0e:78:
                    70:31:04:18:b0:74:77:03:c2:5b:f2:a8:de:e5:3b:
                    d0:b4:7b:da:00:4d:d7:fb:86:79:0c:e4:f7:70:4a:
                    08:a0:ec:b3:80:1e:d8:e7:f2:75:70:d3:98:ed:a0:
                    dd:a6:09:a8:5a:2a:65:33:eb:e7:7e:19:a8:43:4d:
                    57:21:2c:92:f0:6a:6d:fb:ce:51:b7:f5:4e:d7:c4:
                    35:9a:53:c2:8b:7b:f5:ed:c1:4c:1c:e8:5b:b3:10:
                    31:1f:75:68:e2:c1:ab:66:82:6e:9b:fe:30:94:8b:
                    58:96:a5:b4:06:6e:36:b1:a2:2e:31:20:a1:45:6b:
                    be:64:9a:59:9d:2c:c1:db:19:f2:c7:4f:90:89:73:
                    ef:b9:a1:db:96:3c:7e:61:f8:4f:dc:2c:58:a5:ae:
                    58:75:02:ad:6d:b1:89:1d:c3:2e:dc:18:32:28:b0:
                    8f:20:ad:0c:01:f4:5d:21:e8:d2:b5:76:bb:05:eb:
                    2e:1e:d6:07:34:d9:0e:f1:3a:91:c3:16:9d:de:eb:
                    bf:1c:a5:c6:88:2e:e4:45:3d:81:5a:8c:87:ed:09:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:D7:FD:50:4B:7B:3C:C8:AE:4F:C0:11:66:78:B9:4D:55:7D:CB
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/1c46f6010adbdf66a840909ab2d25c88bfbcc65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:e6:c3:96:ed:03:29:dd:2d:93:4b:54:30:12:da:ba:18:
         1d:d9:42:4d:b0:f2:ac:0e:ec:5d:ca:2f:3a:96:cf:d4:5a:2c:
         b8:45:da:1b:4c:6f:8d:05:74:04:71:a3:fb:9b:2b:bf:50:f5:
         de:e2:d3:f0:5f:62:10:0c:12:7c:42:35:45:2b:14:b4:c3:f5:
         97:ca:97:53:c2:cd:d2:1f:8c:1f:8c:8a:1a:96:99:9a:3b:a5:
         9a:de:a3:ac:30:43:34:d4:08:9e:d0:53:db:4e:18:41:ee:3f:
         fe:71:da:e5:2f:0e:49:ef:70:d4:c6:40:bb:5e:07:aa:e8:3d:
         eb:5c:50:a4:a0:73:3a:fc:1d:db:c9:e9:34:58:c3:39:1f:76:
         60:57:71:1f:e4:97:3c:74:c7:2e:33:7a:b1:c7:68:5e:fc:0f:
         c5:01:cc:68:fc:34:de:d2:9c:b8:3f:92:63:de:04:40:6d:39:
         c2:b1:f3:05:89:bc:2f:eb:31:9e:d8:ca:c2:03:fb:f6:02:99:
         f2:26:89:c4:ee:c7:33:0b:c1:08:c7:a6:1f:bb:de:82:c1:33:
         43:15:cb:93:5e:46:22:0a:fe:1f:a2:4e:91:2e:17:4e:b1:1c:
         6f:64:dd:9b:50:fc:f4:25:4d:81:43:c9:a9:0e:c6:fc:4a:df:
         80:97:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org