Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/a4969f7a67e31f78affa597f55237967460def61.roa
File:                     a4969f7a67e31f78affa597f55237967460def61.roa (raw, json)
Hash identifier:          vQ0Zu04MtfaxURMit2Lp0dG9D+40eF5yS55ri64lorw=
Subject key identifier:   B3:85:BB:00:13:52:1F:AF:B9:3B:5C:B6:47:A1:72:2A:DE:BD:B6:3F
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       13F783
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/a4969f7a67e31f78affa597f55237967460def61.roa
Signing time:             Wed 17 Jan 2024 03:22:57 +0000
ROA not before:           Wed 17 Jan 2024 03:22:57 +0000
ROA not after:            Sat 17 Jan 2026 03:22:57 +0000
asID:                     272082
IP address blocks:        181.232.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308547 (0x13f783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Jan 17 03:22:57 2024 GMT
            Not After : Jan 17 03:22:57 2026 GMT
        Subject: CN=a4969f7a67e31f78affa597f55237967460def61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:47:6d:c6:d2:85:b7:59:df:fd:9d:00:53:
                    28:77:c7:e5:e9:af:4c:4e:52:94:27:54:1a:f9:69:
                    d3:08:38:33:ba:d8:03:3c:b1:8c:b7:cf:3a:64:f2:
                    9c:dd:05:f2:dd:f6:23:7d:8a:36:4d:da:cc:3c:c4:
                    bc:49:6f:77:bd:37:8a:b6:f9:c7:fd:43:44:a3:2d:
                    55:a2:f4:6f:e0:76:6e:f3:e6:a4:96:18:e9:b7:47:
                    85:ad:c2:52:b6:d2:4c:7b:a3:fa:a6:b7:43:4e:de:
                    ca:4b:c0:a4:0b:fe:cb:09:69:b2:85:63:9d:a1:b9:
                    a3:95:e7:2d:82:50:9d:c8:26:5b:60:04:38:54:4f:
                    84:12:f4:fd:fa:3f:59:f2:1e:82:e1:0c:ef:d9:4b:
                    2b:f8:6c:e4:28:63:ea:0e:c8:d4:ac:f1:89:00:b2:
                    93:76:3a:be:97:de:d1:ec:74:fe:b6:3d:63:cf:f5:
                    e1:4e:5b:d2:f6:58:ea:4d:b0:2a:2b:44:fd:18:35:
                    69:6d:1d:ec:b3:fd:21:fa:02:d0:9f:30:5b:c1:af:
                    c6:c4:76:83:80:f4:d8:ec:94:6c:53:af:24:b6:6d:
                    23:4d:31:1b:71:49:52:45:eb:9f:e1:4d:64:17:9f:
                    5d:8e:2a:91:d2:a0:85:f1:4b:35:76:df:ea:d2:77:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:85:BB:00:13:52:1F:AF:B9:3B:5C:B6:47:A1:72:2A:DE:BD:B6:3F
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/a4969f7a67e31f78affa597f55237967460def61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:79:20:c3:b3:99:46:2f:d7:53:d3:0d:7e:67:ea:66:8a:
         9b:f1:77:60:ce:35:02:eb:7d:80:a6:95:88:98:28:10:3d:c2:
         5b:ec:25:b6:f6:3e:00:32:91:43:0d:9b:51:84:77:00:4a:36:
         0c:4f:25:7b:bd:47:f9:f4:08:7e:56:17:67:ab:21:a6:0c:28:
         c1:57:91:c8:ac:d3:cb:00:17:e8:ea:44:52:e7:ad:85:18:9e:
         7e:d2:f2:3f:50:b6:33:eb:e8:a6:a2:07:2b:0c:a0:aa:e4:e3:
         aa:c0:1b:b8:01:39:99:1c:2d:69:c3:81:52:05:6b:52:7f:2d:
         21:d2:5f:bd:4f:7a:33:3d:6c:1b:6c:51:ef:62:fe:6a:1e:24:
         73:b2:01:01:30:ba:f8:b6:98:c1:28:61:50:f6:76:ef:de:2b:
         e0:4c:1f:43:ca:f1:ba:2b:67:59:b2:6f:04:e8:b7:78:7e:b6:
         a0:b5:63:01:50:aa:69:80:36:38:84:c4:66:77:1f:c7:8f:2d:
         54:13:6b:f6:9d:9e:d6:94:3f:b5:49:87:01:be:ac:ce:a3:aa:
         29:80:0b:50:44:df:d3:30:8b:5f:02:01:ae:07:dd:57:7e:e5:
         55:b2:a8:20:ee:3f:0c:09:d8:fe:a6:07:2a:dd:c9:10:b2:7f:
         5e:f6:41:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org