Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bec6d8874da474a4058f029b8604f701779963d9.roa
File:                     bec6d8874da474a4058f029b8604f701779963d9.roa (raw, json)
Hash identifier:          aEODseXyZDg2v83vGrKakJvDHeT6XwRoENG9sl7Tk/I=
Subject key identifier:   A3:11:2A:B1:2E:3B:93:54:E0:27:CC:B6:36:F4:EB:64:6F:60:C2:D6
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       2591A4
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bec6d8874da474a4058f029b8604f701779963d9.roa
Signing time:             Wed 27 Dec 2023 02:58:54 +0000
ROA not before:           Wed 27 Dec 2023 02:58:54 +0000
ROA not after:            Sat 27 Dec 2025 02:58:54 +0000
asID:                     52468
IP address blocks:        181.78.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2462116 (0x2591a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Dec 27 02:58:54 2023 GMT
            Not After : Dec 27 02:58:54 2025 GMT
        Subject: CN=bec6d8874da474a4058f029b8604f701779963d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:4e:5c:1b:07:d3:0f:9e:b5:ac:9a:0b:fa:
                    6d:c6:39:1b:b6:03:fe:8b:c7:74:fe:ae:68:62:af:
                    9a:c2:08:83:b7:10:31:00:20:fa:d8:db:39:90:c0:
                    3a:ea:bc:84:a7:6d:ce:3f:33:55:90:31:0d:bd:52:
                    45:71:52:3a:55:1a:c5:c0:96:71:e1:0d:f3:72:f2:
                    8b:5a:6f:c7:a3:56:5f:70:3d:0a:ea:e3:ed:78:70:
                    18:cf:fe:54:f3:93:df:d4:06:5a:23:d9:01:16:43:
                    de:7f:ac:a5:d7:ba:eb:f7:ef:21:53:ae:4e:94:93:
                    d0:a6:f5:26:d9:0d:d8:fa:99:70:71:3b:0f:38:fa:
                    31:ca:02:d0:df:3a:ae:e9:b9:30:39:ac:4b:2d:f1:
                    f2:9c:15:5a:98:3c:d7:42:5c:55:79:98:d1:1e:14:
                    f4:e9:57:41:1d:26:03:40:e1:1c:96:4c:c9:6c:16:
                    82:fd:e6:cb:c4:b6:6d:5c:ab:10:7c:f5:e0:ff:63:
                    d2:bd:e0:38:01:ab:25:74:a3:bf:1e:0f:d0:b6:44:
                    00:db:11:9f:38:a6:9d:57:b0:e3:48:6d:78:72:99:
                    84:b5:31:7b:91:83:eb:fb:91:0d:99:31:b6:cd:ec:
                    51:21:c4:30:2d:03:d6:91:71:1c:26:c3:ca:ce:ff:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:11:2A:B1:2E:3B:93:54:E0:27:CC:B6:36:F4:EB:64:6F:60:C2:D6
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/bec6d8874da474a4058f029b8604f701779963d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:a2:8e:5f:b1:68:11:f6:fd:8b:c6:d2:93:90:0e:ef:23:
         fb:55:c9:cb:b5:10:21:5b:96:14:d7:77:29:50:cc:66:dd:d7:
         39:ea:67:fd:4d:7c:24:80:ac:a3:43:52:6d:2a:d0:45:2a:75:
         81:7e:79:e1:d9:8e:02:fc:5e:a4:d6:e8:93:68:90:c3:10:58:
         ea:29:bf:d4:ea:95:83:29:7d:91:d6:b7:36:93:4f:da:f4:78:
         7c:17:71:35:1d:93:b2:1f:52:d6:90:2c:eb:e7:99:6f:e3:00:
         0b:1a:0c:b9:ef:00:79:a1:28:97:2a:29:c6:18:cc:91:4d:c4:
         03:8f:6c:d9:bb:f7:5c:80:28:92:af:13:91:2e:c1:c9:b4:15:
         2b:e6:77:f1:e3:91:68:00:a7:e9:a9:ab:31:06:9f:3c:78:ce:
         2d:8a:e5:b4:7b:db:3f:89:63:69:fc:a7:ba:cd:d2:ca:7e:14:
         f1:7e:26:f0:be:2c:e2:96:84:72:1c:fa:25:8f:d7:de:68:01:
         49:ab:1c:41:9c:1f:92:56:62:81:f2:37:a7:45:02:05:40:95:
         e0:3c:86:25:50:a5:c8:05:27:61:90:98:98:1f:1b:3c:0a:3a:
         2e:38:a5:9a:8c:1a:c4:d3:ca:79:15:0e:e9:74:17:8f:8d:7a:
         09:34:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org