Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/fff0e2198d60e87693bc99f35e7b05b7bfac5adb.roa
File:                     fff0e2198d60e87693bc99f35e7b05b7bfac5adb.roa (raw, json)
Hash identifier:          kFts+Hx6BEHjkghrqJDWvUn2Ksc9UA0GjcjwBpfy7ms=
Subject key identifier:   C3:94:9B:DE:A1:05:FB:EB:2D:06:4A:6E:8A:57:D3:3E:E1:61:64:A0
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       20FC55
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/fff0e2198d60e87693bc99f35e7b05b7bfac5adb.roa
Signing time:             Wed 28 Jun 2023 21:04:22 +0000
ROA not before:           Tue 27 Jun 2023 21:04:21 +0000
ROA not after:            Sat 28 Jun 2025 21:04:21 +0000
asID:                     52468
IP address blocks:        181.78.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161749 (0x20fc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Jun 27 21:04:21 2023 GMT
            Not After : Jun 28 21:04:21 2025 GMT
        Subject: CN=fff0e2198d60e87693bc99f35e7b05b7bfac5adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:53:21:a1:eb:19:1f:e0:50:3c:02:82:da:
                    78:94:b6:46:bb:3f:b8:25:b0:75:9f:92:e8:17:61:
                    37:2d:8d:97:81:ca:c0:eb:57:aa:8e:7e:64:28:44:
                    98:31:ed:fe:fc:33:89:23:5e:56:9a:33:3a:38:be:
                    1f:6a:60:ba:75:19:5a:b6:b9:7f:7e:3e:8e:cb:7c:
                    09:e8:f1:d8:e9:4e:e2:63:ad:d0:85:09:ab:13:07:
                    01:79:84:b4:4e:5d:44:69:82:b0:2d:d5:22:f2:58:
                    b9:43:fa:53:9a:81:8d:85:d3:e2:cd:fb:2d:eb:58:
                    08:30:9d:41:33:97:bc:32:7d:66:5c:c8:79:1a:e2:
                    33:7c:01:cd:1c:0c:94:b9:3e:44:0a:0a:21:29:78:
                    fb:37:b4:7b:15:f9:d3:c9:4d:1e:0a:e2:8b:3b:05:
                    7b:09:2c:a3:6c:cb:30:94:ba:bd:b0:34:c6:f2:3b:
                    d4:17:3f:4a:45:e0:4e:bf:d4:81:e7:0e:d2:3a:8a:
                    66:2b:16:69:77:49:6e:d1:1a:56:28:68:8b:c3:7f:
                    5c:97:5f:42:aa:ef:95:36:fa:69:2f:a3:e7:89:bf:
                    fc:1d:cf:7f:0e:93:db:3f:c5:42:08:57:21:fb:b6:
                    5c:04:eb:66:8b:79:02:f2:5c:2e:74:3c:62:f0:ae:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:9B:DE:A1:05:FB:EB:2D:06:4A:6E:8A:57:D3:3E:E1:61:64:A0
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/fff0e2198d60e87693bc99f35e7b05b7bfac5adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:b6:5f:93:2b:80:86:2c:79:5f:2b:c0:06:a0:af:73:11:
         0d:75:30:bb:ca:10:76:87:54:4d:0c:06:00:90:c5:63:e7:ab:
         bc:ec:d9:bb:e3:ef:ca:0b:10:47:1c:06:8f:99:78:c6:e0:ea:
         bc:e2:9d:d4:62:45:58:78:89:9a:6f:b6:f6:0a:bf:96:28:ed:
         96:3e:4d:5c:d5:69:e4:b8:8c:c1:c6:b0:e3:cf:29:11:8e:3b:
         ec:d3:22:f1:50:90:e7:1f:06:df:f3:c4:97:82:14:5c:69:9e:
         f3:7a:89:14:4d:e5:50:f8:03:8b:ce:91:35:3b:4e:57:a2:35:
         a6:31:c4:62:17:0b:66:95:22:b8:49:1e:e2:2a:f0:12:f1:4b:
         44:5c:8d:bc:08:1b:c3:9c:4b:9f:fb:6b:75:e3:b6:e1:2c:1b:
         98:31:10:57:50:3a:94:20:6d:9b:09:55:9d:ce:02:9d:ee:50:
         29:48:4c:c2:20:70:4b:e5:55:f3:a6:55:42:01:6c:aa:7d:d0:
         a3:5e:96:f7:b4:c9:f5:56:73:92:de:f0:37:82:e8:28:f9:1b:
         81:aa:44:9f:a1:22:3b:96:5f:37:47:7e:ff:85:14:c6:9f:1c:
         b3:ae:33:7c:cd:39:78:c1:37:d2:4d:5c:35:d9:94:76:32:49:
         06:bf:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org