Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a08fa919233314d9e4e73e0a659db2bd0b836010.roa
File:                     a08fa919233314d9e4e73e0a659db2bd0b836010.roa (raw, json)
Hash identifier:          zKvUxNkTMRmpjU4yTeK+rM20sM34dvDYjof8Cx4RvYs=
Subject key identifier:   66:EA:05:66:80:CA:C7:6E:9E:82:62:2B:3B:F7:17:31:7E:F1:CE:71
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       258DEA
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a08fa919233314d9e4e73e0a659db2bd0b836010.roa
Signing time:             Wed 27 Dec 2023 02:35:33 +0000
ROA not before:           Wed 27 Dec 2023 02:35:32 +0000
ROA not after:            Sat 27 Dec 2025 02:35:32 +0000
asID:                     52468
IP address blocks:        181.78.96.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461162 (0x258dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Dec 27 02:35:32 2023 GMT
            Not After : Dec 27 02:35:32 2025 GMT
        Subject: CN=a08fa919233314d9e4e73e0a659db2bd0b836010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:9e:60:bd:e4:a3:4f:5e:41:31:98:8d:2c:
                    fe:bf:e1:4d:77:4f:3f:db:b8:06:91:20:79:1b:a1:
                    df:1b:de:fd:fc:84:7d:ea:f1:5e:54:ef:2f:63:df:
                    b4:4f:71:0f:1b:52:66:03:5b:3c:d0:a3:bb:cf:4a:
                    e9:f3:ea:f4:ff:83:07:27:8f:c6:d2:1a:e7:35:f1:
                    85:15:51:f8:29:18:fe:27:3e:8b:88:31:37:48:fb:
                    72:56:44:eb:7a:39:e3:0b:49:36:63:9b:d3:a4:6f:
                    b3:4a:e8:cb:aa:39:d9:01:f8:7b:92:77:1b:d7:20:
                    13:12:1c:3d:fd:87:98:80:bb:77:cc:7e:88:42:b5:
                    f7:d2:6c:fc:1e:db:20:57:37:86:b9:4a:62:aa:04:
                    0b:15:09:c3:aa:74:cb:1f:92:24:62:e2:bb:cd:a7:
                    84:10:4e:33:e6:7b:7e:39:8a:f6:3f:3c:26:a5:d2:
                    f0:4a:3a:fb:96:49:ce:4d:15:4d:58:2c:c6:bf:35:
                    b0:34:e2:bf:c3:9c:66:bf:78:56:c3:94:88:49:2f:
                    73:ee:a4:1e:4e:88:92:ed:7d:92:66:cd:a3:fc:93:
                    04:84:5d:3c:dd:d8:00:a3:ff:85:78:c7:d0:01:e9:
                    67:43:0d:d5:75:09:3e:08:63:98:c0:1c:11:10:3b:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EA:05:66:80:CA:C7:6E:9E:82:62:2B:3B:F7:17:31:7E:F1:CE:71
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a08fa919233314d9e4e73e0a659db2bd0b836010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:55:a7:51:e8:a0:9f:3e:9b:66:68:c5:96:e8:df:c2:eb:e0:
         ae:ab:a1:46:87:0c:b1:6e:55:f8:1c:f8:c7:eb:1e:42:29:05:
         21:b4:c6:6e:b2:95:b0:f6:8a:46:e2:a7:55:64:fb:be:e1:7f:
         48:64:87:0f:34:4a:45:2e:98:4f:95:d5:0e:9b:e8:34:b1:7a:
         ba:42:b1:09:9c:98:0a:8d:10:24:75:af:3f:61:94:9f:0d:b1:
         70:83:de:e5:c8:10:99:e1:c2:fb:a6:d9:70:61:0a:73:ea:a8:
         4f:65:84:d8:ec:46:91:3b:12:7e:a6:3c:02:44:e0:c1:c5:c3:
         97:aa:52:a9:ef:fe:b3:02:31:06:bd:e7:41:f9:f9:12:69:2c:
         aa:9a:ee:30:5b:91:af:77:f8:08:02:fd:c7:de:ce:36:9a:44:
         69:3a:99:01:1b:d1:0e:63:b2:e7:38:68:1c:b7:b4:3e:1b:82:
         aa:e0:2e:6a:4e:71:64:46:23:0e:ca:98:10:4b:79:d8:74:86:
         53:45:86:4d:e8:f7:b2:ed:f4:30:e4:31:62:fa:ba:c6:e8:cf:
         fb:13:bb:05:8d:47:8e:c8:b2:8b:e9:e8:a3:40:6c:c0:2a:19:
         97:af:39:7a:a2:cb:33:28:e3:43:ae:da:cc:a3:30:ad:29:5a:
         42:73:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org