Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/70f482b1d620e8ecdb7d658ecd979d1b2e98781e.roa
File:                     70f482b1d620e8ecdb7d658ecd979d1b2e98781e.roa (raw, json)
Hash identifier:          YDMuJg7oJk+Jx4Em4EK8werrbl7KRTq+yMCNd4PNECo=
Subject key identifier:   59:B0:57:B4:2D:0D:83:3C:D5:02:B9:58:08:50:0A:F9:B8:D8:6D:40
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       20ED49
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/70f482b1d620e8ecdb7d658ecd979d1b2e98781e.roa
Signing time:             Mon 26 Jun 2023 23:11:03 +0000
ROA not before:           Sun 25 Jun 2023 23:11:03 +0000
ROA not after:            Thu 26 Jun 2025 23:11:03 +0000
asID:                     52468
IP address blocks:        181.78.80.0/21 maxlen: 24
                          181.78.88.0/22 maxlen: 24
                          181.78.92.0/22 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.78.112.0/21 maxlen: 24
                          181.78.98.0/23 maxlen: 24
                          181.78.100.0/22 maxlen: 24
                          181.78.104.0/21 maxlen: 24
                          181.79.220.0/24 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/23 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/23 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          181.78.64.0/20 maxlen: 24
                          181.78.64.0/19 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.78.0.0/19 maxlen: 24
                          181.119.66.0/23 maxlen: 24
                          181.119.68.0/23 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/23 maxlen: 24
                          181.119.84.0/22 maxlen: 24
                          181.119.88.0/21 maxlen: 24
                          181.119.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157897 (0x20ed49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Jun 25 23:11:03 2023 GMT
            Not After : Jun 26 23:11:03 2025 GMT
        Subject: CN=70f482b1d620e8ecdb7d658ecd979d1b2e98781e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:16:57:5b:28:f2:cb:9a:67:46:90:21:ed:
                    c1:1b:63:c1:42:35:7f:40:98:3a:5f:fe:9c:34:8c:
                    6a:04:36:24:78:a1:c8:bb:38:16:9f:3d:97:72:1d:
                    38:b6:1b:02:87:28:9b:6c:94:87:a8:04:73:04:0c:
                    1a:67:e0:a9:09:24:13:68:df:1e:7e:48:a9:c4:b9:
                    9e:fb:5f:99:55:87:e9:0f:3a:ae:73:e9:a1:0a:fd:
                    1e:9e:83:af:42:fc:c3:c0:aa:4f:c1:06:e6:1f:b2:
                    57:b9:fc:96:a5:b1:2c:32:df:ed:0e:4d:c3:7a:4a:
                    c0:4e:d5:f3:5e:32:32:f1:f6:c9:38:c5:3d:bd:e3:
                    6d:8d:de:9b:31:b4:95:18:77:35:0d:01:98:02:2c:
                    94:51:b7:c8:09:07:35:d5:17:f7:a4:62:fa:70:52:
                    76:d9:af:77:24:b2:ba:44:93:22:04:08:63:0a:26:
                    49:87:63:c3:ba:b7:42:11:1b:02:a4:91:ed:1c:8d:
                    a7:36:f7:70:fe:ca:72:fd:01:db:65:d1:a6:17:dc:
                    01:bb:fd:01:63:3b:d3:61:03:40:b9:1e:80:c2:dc:
                    7f:44:f9:9f:a1:49:1e:d7:a6:48:34:8e:05:0b:fd:
                    22:e9:51:59:d0:79:c3:33:b4:e9:5d:74:d8:99:63:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B0:57:B4:2D:0D:83:3C:D5:02:B9:58:08:50:0A:F9:B8:D8:6D:40
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/70f482b1d620e8ecdb7d658ecd979d1b2e98781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.64.0/19
                  181.78.98.0-181.78.119.255
                  181.79.220.0/24
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255

    Signature Algorithm: sha256WithRSAEncryption
         48:73:49:8f:d7:43:d1:06:54:77:79:90:a5:41:73:e2:08:de:
         03:17:4e:69:2c:ef:0f:69:fd:57:cd:91:4d:05:d7:91:4c:85:
         0b:bf:2d:a0:a5:3f:96:88:78:c6:6f:cb:98:ff:ca:a3:1b:73:
         38:fa:44:d8:52:90:19:9a:2e:fa:92:4d:e4:8c:c9:c2:79:a9:
         2d:28:b8:fd:62:ea:d3:d3:8c:b1:52:1f:b0:b9:08:6c:63:28:
         95:70:5d:0f:61:e7:e6:48:18:84:fa:68:ba:6a:b1:ce:d5:c8:
         b7:5d:ce:9d:bc:7d:e6:69:e2:4e:0e:f8:ac:36:4b:de:23:b0:
         5f:12:5d:73:46:e0:cd:cb:a6:8f:0c:bc:e3:d5:01:f7:47:38:
         b4:2f:58:6d:a3:5f:af:0d:b7:22:ea:4a:d2:63:1a:8d:49:d1:
         8b:dc:b5:a1:19:67:7f:9f:fe:45:1d:0c:a4:d3:06:e9:1d:1b:
         4d:bd:f7:6b:60:89:90:b9:96:fe:53:96:9e:40:74:84:b0:d6:
         b2:c7:09:81:b3:e2:43:e8:15:6b:83:01:82:60:d2:00:54:e5:
         f0:07:1d:a8:d9:f1:48:54:5c:cd:d4:d7:5e:b9:48:8a:f8:32:
         c0:6c:ba:ca:0d:93:aa:27:b4:95:7b:bb:73:63:0b:89:dc:ea:
         59:df:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org