Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d52816fa23c1290f585b8adb8d1093ef2f95cc36.roa
File:                     d52816fa23c1290f585b8adb8d1093ef2f95cc36.roa (raw, json)
Hash identifier:          puyUSkADsXfH1BJEr6XOswLOLCjgOsIWw3cbN1trrWc=
Subject key identifier:   7B:83:DD:15:2B:31:34:A9:16:AE:2C:63:77:62:5E:D1:00:EC:F3:82
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       25ACD4
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d52816fa23c1290f585b8adb8d1093ef2f95cc36.roa
Signing time:             Fri 29 Dec 2023 22:06:28 +0000
ROA not before:           Fri 29 Dec 2023 22:06:28 +0000
ROA not after:            Mon 29 Dec 2025 22:06:28 +0000
asID:                     272954
IP address blocks:        181.78.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2469076 (0x25acd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Dec 29 22:06:28 2023 GMT
            Not After : Dec 29 22:06:28 2025 GMT
        Subject: CN=d52816fa23c1290f585b8adb8d1093ef2f95cc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:6c:42:f4:ce:ac:51:64:7c:b4:ea:fd:df:
                    06:e9:4a:26:44:84:6b:95:ce:5d:3d:95:f8:1b:de:
                    03:3c:27:64:88:f0:1e:5f:d6:92:9f:58:f8:e5:af:
                    3a:b6:20:65:31:86:b2:d2:33:17:b3:e1:d6:5f:4c:
                    f1:ed:ac:9b:1f:0a:68:cf:1c:7f:c9:46:9c:e1:61:
                    24:4e:42:0e:c2:62:77:f7:6b:da:42:69:91:83:4a:
                    53:22:dd:6c:6b:72:d2:fe:72:8b:34:96:77:51:04:
                    5e:b6:9e:f7:72:68:b9:df:e3:50:79:c9:2d:fb:92:
                    3e:6e:7a:33:40:d8:1f:8e:e6:71:df:7b:47:ad:5a:
                    fd:b6:56:07:9f:a6:03:b5:36:bb:e7:8e:e9:7a:5a:
                    f7:d9:c2:20:50:e2:dc:56:75:82:58:d7:4d:8e:90:
                    53:d1:04:40:fb:93:37:c2:fc:77:76:29:6d:0a:4c:
                    ac:92:ab:d9:6e:ea:9b:fa:b7:6f:a2:b6:6c:49:7a:
                    61:ce:cd:e1:44:2c:1a:77:e4:62:81:68:8e:a6:8d:
                    d9:3c:8b:e6:5c:a6:f3:9f:5d:2c:39:b7:17:00:cd:
                    df:c5:bb:a0:d5:5b:d7:fa:0d:a1:31:04:42:9d:18:
                    8b:c4:97:c3:be:e0:b4:1d:75:d9:cc:53:82:f0:38:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:83:DD:15:2B:31:34:A9:16:AE:2C:63:77:62:5E:D1:00:EC:F3:82
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d52816fa23c1290f585b8adb8d1093ef2f95cc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:e6:86:61:33:00:86:9f:8f:de:e7:cd:13:5a:f7:6a:3c:
         f4:66:bf:b4:7c:fd:f2:5c:9f:b0:da:0d:70:8a:2c:e8:35:98:
         2e:3a:bb:e1:a1:77:c3:b1:e5:96:6a:d8:40:e6:bc:76:e7:94:
         e1:a9:16:12:47:d1:cc:25:41:a6:3f:94:60:34:d3:08:e9:2c:
         84:22:9e:d7:12:22:30:61:7b:5e:d3:84:1e:80:ab:d0:24:43:
         ee:b6:89:15:99:33:4d:c5:7b:8e:93:6d:9d:de:e4:9a:5a:57:
         98:4a:ae:a0:b9:04:69:16:c3:00:77:05:ea:ee:04:4b:c8:20:
         82:71:c8:ea:84:cc:8d:fb:09:d6:96:b9:3d:b1:44:af:48:a8:
         54:ca:85:5b:1f:04:6e:b1:23:4c:31:93:d0:64:5c:15:51:52:
         6d:77:39:f4:35:ba:e5:a4:53:43:71:f7:52:c7:b1:f5:10:a2:
         40:6a:f0:57:4a:62:0a:5b:aa:79:e6:64:57:b9:0a:68:bb:aa:
         cf:e4:08:99:0f:d2:d6:83:3f:1d:e2:5f:b6:04:27:a3:db:4a:
         c6:94:0f:bd:54:0a:9c:29:bc:42:b5:00:59:4f:3c:a9:1b:4d:
         2b:1e:a0:ff:b3:c2:8d:d9:76:d2:7e:90:fc:75:2a:bd:b5:8c:
         8a:67:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org