Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d22a356285247df6db529f571d8860542ee7c7ce.roa
File:                     d22a356285247df6db529f571d8860542ee7c7ce.roa (raw, json)
Hash identifier:          K/T3QqnzZMVU2WSOAliHNtyEw2vkYQ8OhK9UpE3enNE=
Subject key identifier:   33:51:7F:51:77:C9:44:B2:73:EE:18:7F:C0:90:DA:EF:A6:90:61:06
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       24E7C5
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d22a356285247df6db529f571d8860542ee7c7ce.roa
Signing time:             Thu 30 Nov 2023 06:00:16 +0000
ROA not before:           Thu 30 Nov 2023 06:00:16 +0000
ROA not after:            Sun 30 Nov 2025 06:00:16 +0000
asID:                     266725
IP address blocks:        181.119.3.0/24 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.29.0/24 maxlen: 24
                          181.119.33.0/24 maxlen: 24
                          181.119.34.0/24 maxlen: 24
                          181.119.41.0/24 maxlen: 24
                          181.119.158.0/23 maxlen: 24
                          181.119.169.0/24 maxlen: 24
                          181.119.71.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418629 (0x24e7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Nov 30 06:00:16 2023 GMT
            Not After : Nov 30 06:00:16 2025 GMT
        Subject: CN=d22a356285247df6db529f571d8860542ee7c7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:f3:41:c0:3d:51:1a:d0:79:77:14:99:a8:
                    5e:cb:92:71:df:92:8c:81:80:e4:20:e4:dc:8a:6f:
                    cc:2d:eb:b5:d8:df:21:ac:9f:ff:eb:b6:f3:24:43:
                    f0:6e:5f:de:58:9b:c4:3d:08:80:ca:98:42:b1:a2:
                    6a:9d:39:2a:36:81:3d:c5:36:0e:cf:a1:57:1c:11:
                    9b:cb:cc:d4:74:d4:f0:2f:39:f1:79:c4:08:62:1f:
                    13:b5:a7:2b:d2:c4:20:2d:7b:11:fc:95:d8:74:a9:
                    b3:2f:26:a5:23:c5:07:53:66:2e:16:37:c9:38:b1:
                    b2:8b:10:fc:aa:a4:20:7f:a6:dc:41:e9:40:c5:8b:
                    d9:d3:3e:b4:bd:11:04:63:b2:b9:0d:88:6e:0c:29:
                    5b:49:75:0e:0a:5e:ca:4a:d1:18:e9:f5:f8:ed:f6:
                    c1:a1:10:05:6c:30:c3:59:4c:a1:78:e8:45:ac:28:
                    ca:14:62:71:97:63:70:8e:d9:af:29:f3:aa:37:a5:
                    49:f8:f2:14:cc:96:d3:1f:f6:c1:35:bc:c5:42:a8:
                    6f:5d:75:fc:bc:1a:8c:52:70:54:fc:af:96:d0:36:
                    01:46:95:24:3d:01:11:63:ac:88:c5:b9:45:55:f6:
                    2c:a0:41:ac:95:e2:1f:f4:68:e4:3e:4c:ea:2d:98:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:7F:51:77:C9:44:B2:73:EE:18:7F:C0:90:DA:EF:A6:90:61:06
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d22a356285247df6db529f571d8860542ee7c7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.3.0/24
                  181.119.29.0/24
                  181.119.33.0-181.119.34.255
                  181.119.41.0/24
                  181.119.71.0/24
                  181.119.82.0/24
                  181.119.122.0/24
                  181.119.158.0/23
                  181.119.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:84:5a:c4:22:47:3c:d1:05:c4:d1:21:ab:48:bc:e2:7d:
         47:3b:64:e4:e0:9e:05:89:dc:d1:5f:91:40:1a:38:42:9b:22:
         8c:f3:73:d4:11:4a:0d:6d:03:d7:ce:95:4e:03:6c:0a:99:24:
         6b:f2:90:48:80:bd:28:a1:b3:cc:32:16:d5:c3:28:da:e9:f8:
         69:00:2c:67:df:37:90:23:23:43:26:c4:6c:dd:62:e6:8d:45:
         48:78:61:d7:d8:55:29:cf:d6:0d:ae:c1:0d:e4:ee:c6:66:9d:
         58:dc:2d:71:43:e3:b4:5e:dc:f1:8a:9a:4e:4c:1b:d5:25:98:
         52:a0:0d:4e:c2:68:4b:9c:0f:26:97:8c:2b:82:79:4a:63:a7:
         2b:3b:90:af:47:a3:76:93:64:d4:b1:96:66:90:a2:eb:c8:d8:
         be:4c:ae:d3:c6:39:f5:2b:dc:da:c2:60:43:ce:34:6c:46:82:
         52:bc:e4:59:4f:9b:7c:40:ea:fa:22:48:6c:6d:80:4e:3a:78:
         87:a2:c8:d2:fd:00:1e:a6:e1:35:b2:f0:c3:93:7d:99:1a:37:
         4b:f1:60:f8:9c:00:bb:bf:9e:52:05:04:97:f7:fb:d7:c5:3f:
         7c:36:2f:ea:53:f2:e4:2e:e3:d3:6e:9d:fe:8a:2c:53:7b:5e:
         1e:3e:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org