Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/78f9886b77d24b86515081ef7dfa62b869d6c1cd.roa
File:                     78f9886b77d24b86515081ef7dfa62b869d6c1cd.roa (raw, json)
Hash identifier:          WYDQmiC8SdEaTCgpXPL233sScxs3us/uZExgNBz6du4=
Subject key identifier:   B0:8E:AF:CD:44:07:B9:F6:72:8B:17:E9:F5:E3:A7:31:A9:A4:7C:7C
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       23FA95
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/78f9886b77d24b86515081ef7dfa62b869d6c1cd.roa
Signing time:             Thu 26 Oct 2023 22:04:20 +0000
ROA not before:           Thu 26 Oct 2023 22:04:20 +0000
ROA not after:            Sun 26 Oct 2025 22:04:20 +0000
asID:                     265620
IP address blocks:        181.78.220.0/24 maxlen: 24
                          181.78.221.0/24 maxlen: 24
                          181.78.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357909 (0x23fa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Oct 26 22:04:20 2023 GMT
            Not After : Oct 26 22:04:20 2025 GMT
        Subject: CN=78f9886b77d24b86515081ef7dfa62b869d6c1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:27:40:97:5c:18:b3:a0:25:bb:17:4c:f4:
                    2e:53:94:be:e3:f9:5c:96:2b:b8:73:d3:17:59:c3:
                    78:36:bd:a8:b4:af:14:ca:3f:80:d5:d2:c7:e0:57:
                    07:18:48:d8:d5:c1:f3:c6:a6:ba:cd:68:29:ed:99:
                    c6:63:7a:58:dd:cc:f2:7b:86:17:61:01:18:f0:73:
                    7a:74:c2:53:3f:28:27:4e:34:d3:f0:cb:e9:ec:39:
                    19:38:52:9b:a3:4a:7b:b3:6c:5c:d8:c5:1b:d2:c7:
                    28:7d:42:96:7b:0e:5a:a2:de:63:6f:fa:bb:d8:d2:
                    4e:c9:12:61:08:3c:49:64:dc:aa:11:eb:1c:21:2c:
                    e5:6a:3d:f3:4d:c1:dc:70:21:cc:ab:4a:c3:8a:a4:
                    24:17:63:4c:84:2b:07:94:02:9a:0c:b3:83:26:d4:
                    34:14:a7:47:c4:59:26:75:6e:21:6b:8b:38:52:92:
                    3c:cd:fc:b5:b4:e4:80:9d:9c:cb:8f:52:0f:09:2d:
                    56:fe:b2:b8:53:69:6e:63:d3:65:e6:8e:77:63:df:
                    de:d8:99:53:71:b4:fb:6a:40:1a:f8:47:13:63:bb:
                    c8:5c:2d:11:67:81:6d:4b:a9:9b:d0:a4:5a:01:f3:
                    e7:77:4f:76:cc:53:7a:c7:45:f7:45:fd:7c:a3:bf:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:AF:CD:44:07:B9:F6:72:8B:17:E9:F5:E3:A7:31:A9:A4:7C:7C
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/78f9886b77d24b86515081ef7dfa62b869d6c1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.220.0-181.78.222.255

    Signature Algorithm: sha256WithRSAEncryption
         12:40:31:73:d1:e9:5f:06:af:d9:14:f8:4a:8c:9b:86:1c:41:
         a5:88:9c:e4:ca:d9:f3:34:39:3f:c4:f8:a5:87:e1:7a:81:75:
         ba:45:6b:7d:9c:5a:84:42:5a:2d:44:f1:ea:93:5e:19:15:63:
         e5:c0:c4:4c:ac:fb:32:ae:a6:15:76:a8:cb:77:a0:12:1f:4f:
         3d:c7:dd:e9:10:e5:6e:55:fd:6d:af:c5:e7:64:da:21:c5:38:
         8c:5d:cb:b2:cc:aa:86:4f:9a:4a:92:40:39:7f:5f:26:ed:2b:
         81:08:76:8d:b8:55:1b:dc:68:d8:d9:cf:32:1a:6c:92:0e:8e:
         39:8e:8e:40:d4:87:53:56:94:b5:ee:ae:44:06:c4:bd:36:0f:
         c5:3f:5b:98:a3:b2:b0:51:ba:5b:57:4d:eb:a2:ba:14:13:d6:
         8e:bc:a1:02:03:2b:4b:8a:ea:d7:29:d9:b3:23:3e:83:6a:e1:
         24:38:78:ae:cd:16:b1:35:ed:d4:35:70:94:e0:3f:dd:b3:06:
         af:36:31:bb:49:cb:46:54:d3:05:26:94:ae:6a:38:ac:a8:6b:
         e3:13:37:5c:cc:69:c1:ea:26:55:f5:bf:fd:78:2a:5c:a8:28:
         9c:59:d8:87:d3:1e:ab:f5:4a:9c:7c:2f:20:b7:0c:73:16:a6:
         af:88:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org