Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bdf6040ca3998d2b875c7ac7b44466f7272c0434.roa
File:                     bdf6040ca3998d2b875c7ac7b44466f7272c0434.roa (raw, json)
Hash identifier:          lUd2bdOO0RTw6KA74gLUMOHVJKwTm9gw77lMv8/2KwY=
Subject key identifier:   92:61:9D:2C:B6:87:94:30:63:04:01:9D:B5:85:F4:11:18:BC:2D:48
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       241123
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bdf6040ca3998d2b875c7ac7b44466f7272c0434.roa
Signing time:             Mon 30 Oct 2023 23:54:27 +0000
ROA not before:           Mon 30 Oct 2023 23:54:27 +0000
ROA not after:            Thu 30 Oct 2025 23:54:27 +0000
asID:                     265620
IP address blocks:        181.78.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2363683 (0x241123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Oct 30 23:54:27 2023 GMT
            Not After : Oct 30 23:54:27 2025 GMT
        Subject: CN=bdf6040ca3998d2b875c7ac7b44466f7272c0434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:8c:ad:85:89:92:59:36:dd:ac:d1:3d:02:
                    e2:74:ac:05:29:2c:c5:fe:2e:66:6c:0b:5d:46:c3:
                    a8:8a:53:d9:7d:51:ae:29:b2:0c:35:95:ef:56:ec:
                    5d:27:97:86:3c:37:9f:c9:f5:c4:8e:10:cf:00:d8:
                    69:39:ef:c0:57:4a:a2:ef:1d:0c:19:b0:db:c5:d6:
                    11:dc:54:ea:f9:be:c2:33:31:2b:c0:8b:04:e4:4e:
                    9b:04:e0:98:5c:94:a5:c4:0c:66:1b:1d:d0:9d:11:
                    e8:05:20:27:b3:90:1f:b2:aa:75:33:a4:6e:ce:40:
                    dd:52:8b:a8:71:9a:f7:b7:b2:ec:7b:03:64:60:45:
                    68:cd:3e:7e:8c:c4:a3:b3:d8:35:5a:ba:5a:d0:57:
                    a8:1d:97:9d:57:08:4e:81:fe:c2:d4:3c:f2:51:55:
                    e3:27:3d:ae:a5:42:62:ae:c3:53:21:a0:2c:1b:41:
                    18:63:13:29:0e:18:ea:cd:af:78:6c:a8:d1:7d:af:
                    a9:87:51:b8:a1:3d:c1:32:a4:8f:10:d2:c7:a6:61:
                    73:e3:2b:e9:65:d8:dc:64:3a:5b:e7:ff:14:1f:0e:
                    7b:95:9d:59:5d:dd:69:a6:db:8d:9b:b2:4f:50:56:
                    e1:d0:c6:27:ff:02:50:58:89:cb:e5:cc:63:54:81:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:9D:2C:B6:87:94:30:63:04:01:9D:B5:85:F4:11:18:BC:2D:48
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bdf6040ca3998d2b875c7ac7b44466f7272c0434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:98:43:63:19:9a:0c:4f:ba:87:c7:e8:99:5b:09:eb:58:09:
         04:ed:60:53:19:3c:0b:14:7c:b2:87:fb:33:c7:d4:c2:b1:6f:
         76:12:fc:55:c8:e6:ad:72:cf:91:55:d4:88:0f:ae:28:5a:68:
         a1:ee:e7:48:33:ba:14:31:ad:da:95:31:a3:14:34:49:5d:f4:
         08:fd:b4:5f:9d:c8:e5:44:5f:9d:00:cf:17:d2:2e:c3:61:6a:
         82:e0:1d:89:55:b9:2d:92:47:5b:e2:d5:0b:c0:15:ff:e3:72:
         9b:cc:21:e7:f5:d5:a4:62:ff:b5:3d:62:60:5b:ab:f9:37:43:
         a4:a0:e1:54:98:13:d3:b7:36:e8:81:d9:4a:36:01:a7:df:7e:
         e3:72:d0:be:14:e1:81:83:3a:56:59:e8:7a:f7:48:c3:30:d3:
         19:c2:8f:f7:cb:1a:fd:9c:01:c3:06:28:bd:23:57:c4:62:a6:
         ca:4e:85:ed:1c:4b:76:f0:23:49:89:e1:1d:18:76:08:3c:30:
         23:48:d6:cb:c4:a0:56:02:20:c9:ce:37:04:5e:61:50:42:18:
         5a:7d:d6:74:8b:2f:fd:87:08:d2:2c:a4:b3:2f:53:cb:cd:63:
         5c:92:e0:7d:e1:f3:5f:7d:ca:4a:b3:42:01:42:28:63:63:69:
         52:4c:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org