Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/540b8a668db7899b75716eb56a259f53e3cf426a.roa
File:                     540b8a668db7899b75716eb56a259f53e3cf426a.roa (raw, json)
Hash identifier:          ovzZgZsIDuacuCKi7u5aoeVz7wE3TyKjUUGgdCBzqP4=
Subject key identifier:   2D:8C:E8:49:FC:85:37:41:EA:5B:82:40:C5:69:80:F2:F6:B1:6E:C8
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       03BBBB
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/540b8a668db7899b75716eb56a259f53e3cf426a.roa
Signing time:             Wed 06 Apr 2022 14:24:26 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Wed 14 Feb 2024 03:00:00 +0000
asID:                     272082
IP address blocks:        181.232.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244667 (0x3bbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2024 GMT
        Subject: CN=540b8a668db7899b75716eb56a259f53e3cf426a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:4e:60:68:82:5c:60:5a:15:e3:73:d8:1f:
                    2d:c0:51:4e:11:d9:35:fe:05:d0:2a:1a:9a:8d:b9:
                    dd:b2:57:7d:9a:49:67:41:fd:ce:f1:39:01:d3:41:
                    a0:26:13:97:63:5f:be:ba:2e:1e:81:12:f8:84:23:
                    25:9b:45:0d:9e:b0:c0:89:c2:7d:50:d8:15:c2:62:
                    71:77:d0:fb:b4:12:e1:ff:8c:f2:ba:c0:69:96:cd:
                    c2:be:85:4a:2f:86:9e:94:da:6a:b9:14:0f:23:d4:
                    6e:ff:ef:70:a5:9f:f1:a9:5e:2d:14:f1:f4:cf:c9:
                    64:a1:75:2f:b8:97:a7:e2:48:72:6b:a9:c2:26:01:
                    35:69:66:22:a7:73:05:ad:48:e9:60:e4:32:2c:02:
                    2c:8c:60:53:9e:9a:b2:10:33:4d:bc:af:62:34:ec:
                    60:11:b7:4f:ec:7d:6f:0a:0d:66:d6:dd:05:fe:17:
                    7b:8f:07:ed:33:73:9e:58:a9:12:eb:8c:92:a9:2e:
                    06:22:82:ef:21:01:48:c2:e2:30:b8:84:52:e6:78:
                    d9:33:4f:fc:38:60:de:60:1a:c0:6c:61:ac:71:84:
                    44:9b:a7:8b:b6:be:88:85:19:43:6b:fe:ff:76:c6:
                    43:73:b4:6c:67:0b:44:db:5c:5e:43:8b:46:f2:15:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:E8:49:FC:85:37:41:EA:5B:82:40:C5:69:80:F2:F6:B1:6E:C8
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/540b8a668db7899b75716eb56a259f53e3cf426a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:5a:b6:c3:fa:7b:db:c9:48:16:a3:58:0c:74:ce:3e:ca:
         fa:b2:f4:c4:1f:81:f7:1e:f1:08:0f:76:11:e1:16:e0:87:7a:
         c6:85:da:97:99:3f:5b:14:87:d6:14:76:bf:07:59:11:8a:a3:
         94:49:ba:9f:60:84:ff:bb:a5:6e:97:8e:9f:5f:ac:e0:63:e5:
         8a:ce:df:f5:69:e5:07:50:3b:77:82:8d:58:8c:cd:e5:c9:20:
         93:10:8d:8d:0d:0a:d4:c8:48:96:a4:c9:30:53:fe:87:9d:62:
         cc:0f:2d:0d:6a:5a:2c:20:03:88:10:83:74:50:06:bb:a6:db:
         02:aa:9f:62:b5:15:31:48:23:af:00:97:ac:97:93:9c:54:c8:
         f5:67:3b:5d:27:7d:b7:60:1b:f4:aa:2a:26:5e:34:56:4b:21:
         05:7e:e8:2d:fe:71:20:bf:92:34:0c:b7:95:f8:89:6b:da:d4:
         c2:14:f2:27:17:2f:15:af:ed:7d:81:7b:4d:cc:e2:9c:f0:6f:
         5e:86:e7:83:94:62:70:ba:c6:a1:56:3d:61:58:ac:aa:5c:18:
         60:b3:24:d8:c3:95:14:a6:5b:90:d0:b6:2a:ba:54:3a:b9:e7:
         c9:58:d7:00:fa:8f:2c:8c:68:dc:05:99:69:48:e5:b4:99:55:
         8a:10:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org