Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a7d32782bd5df96fd290d604fb2cdf7534e4b80b.roa
File:                     a7d32782bd5df96fd290d604fb2cdf7534e4b80b.roa (raw, json)
Hash identifier:          PQcpvom4QEDwLeo0iKnUy3uKH+3En98dH0DJVO11+EA=
Subject key identifier:   CD:24:43:DB:5B:75:46:DB:A5:E9:B7:B5:BB:BA:0A:6D:5F:A9:EA:5F
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1B5F21
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a7d32782bd5df96fd290d604fb2cdf7534e4b80b.roa
Signing time:             Tue 22 Nov 2022 14:21:53 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18747
IP address blocks:        181.78.128.0/18 maxlen: 18
                          181.78.128.0/19 maxlen: 19
                          181.78.160.0/21 maxlen: 21
                          181.78.192.0/18 maxlen: 18
                          181.78.192.0/19 maxlen: 19
                          181.78.224.0/21 maxlen: 21
                          181.78.64.0/18 maxlen: 18
                          181.78.64.0/19 maxlen: 19
                          181.78.96.0/21 maxlen: 21
                          181.78.160.0/19 maxlen: 24
                          181.78.160.0/24 maxlen: 24
                          181.78.161.0/24 maxlen: 24
                          181.79.64.0/21 maxlen: 21
                          181.79.72.0/23 maxlen: 23
                          181.79.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1793825 (0x1b5f21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=a7d32782bd5df96fd290d604fb2cdf7534e4b80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:6a:f6:9b:6f:16:cf:33:a6:42:9c:54:6a:
                    8e:bc:e7:b2:38:52:db:62:49:61:fd:94:f6:60:51:
                    32:f0:85:2b:cf:60:f5:d8:1c:3e:ea:b8:33:d0:a7:
                    33:71:96:ac:9a:05:b1:cb:d7:54:de:6f:41:fc:a0:
                    41:3b:ca:cd:2d:9c:a1:37:db:c7:07:a6:1a:62:75:
                    8a:bd:f5:3d:85:35:c2:89:3a:9f:d6:85:04:45:17:
                    9f:09:28:e8:ae:01:0a:b6:d3:a1:e8:c6:3e:ab:85:
                    86:f6:89:36:04:51:82:a9:d8:da:3f:2a:f4:75:33:
                    3c:b1:a2:71:94:f8:08:ea:c1:9c:e4:16:22:a0:3c:
                    77:cf:45:eb:aa:8a:ec:a6:64:3a:36:6f:8b:a0:e7:
                    21:72:9f:69:c3:d1:f5:f5:1a:d1:00:28:9f:91:cd:
                    68:db:fc:24:db:22:f6:53:d7:1f:99:d8:87:b3:51:
                    85:c8:6b:58:6d:70:d0:1c:78:25:10:ec:d2:ae:78:
                    a0:17:f2:a7:ad:19:14:5d:80:bb:44:59:85:9d:ce:
                    17:82:77:32:d6:79:b7:70:60:77:da:4e:67:40:28:
                    4d:ed:3e:ba:42:60:49:cb:3d:18:8b:3c:ca:56:b6:
                    a9:86:eb:df:a8:4b:0f:32:d1:68:7e:7c:f2:57:c8:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:43:DB:5B:75:46:DB:A5:E9:B7:B5:BB:BA:0A:6D:5F:A9:EA:5F
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/a7d32782bd5df96fd290d604fb2cdf7534e4b80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.64.0-181.78.255.255
                  181.79.64.0-181.79.73.255
                  181.79.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:29:8f:1d:09:f1:53:b4:3a:4d:25:2a:73:92:83:2b:b6:81:
         f4:e1:47:90:c5:e1:fa:3c:be:02:46:18:45:25:75:f1:67:8b:
         6d:b8:82:76:6b:7f:14:f6:2a:12:3e:51:ec:c5:fe:53:01:76:
         56:8a:a7:ce:02:24:4c:96:54:5a:ca:d3:21:16:6e:1a:b0:6a:
         b9:74:18:88:ab:a3:34:a2:f5:24:be:34:39:73:a6:81:93:2b:
         9d:ff:c6:31:9a:ea:58:34:f6:a9:b7:81:cd:96:cb:85:95:33:
         5c:57:6a:79:fb:24:3a:76:64:95:51:be:e5:1a:2c:fc:01:44:
         74:3d:df:b3:77:23:ba:7a:09:9d:6b:7a:04:3c:23:45:65:c3:
         48:17:27:87:1b:f0:be:3d:87:86:90:9e:8c:ee:df:04:32:00:
         0e:dd:18:5c:03:e1:aa:ff:51:20:f2:6f:e8:a4:ec:b4:ee:cf:
         d2:77:f2:07:3b:42:15:ba:ce:ec:d4:08:d6:2c:1d:a3:68:7a:
         43:b6:db:8e:f9:51:84:e0:db:7d:f1:60:36:a2:0f:c5:7f:0a:
         16:18:7f:e9:94:96:e7:c7:0e:a5:7c:f8:9c:dd:4d:fa:8f:51:
         57:58:b4:4e:40:c0:55:f2:95:41:8b:15:ff:19:c4:7e:eb:76:
         4a:ad:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org