Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/e501603448d1f07c65ee8840ee9ffd9369f515d7.roa
File:                     e501603448d1f07c65ee8840ee9ffd9369f515d7.roa (raw, json)
Hash identifier:          hACIiptdomvLOwF7BdECeyCdxJ9n5As46nHeHPScqg0=
Subject key identifier:   07:AD:42:EA:00:90:EB:5E:CA:98:26:D9:A3:1B:25:7C:96:FE:B4:AF
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       0DB79E
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/e501603448d1f07c65ee8840ee9ffd9369f515d7.roa
Signing time:             Tue 02 May 2023 23:32:08 +0000
ROA not before:           Mon 01 May 2023 23:32:08 +0000
ROA not after:            Fri 02 May 2025 23:32:08 +0000
asID:                     272797
IP address blocks:        181.232.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898974 (0xdb79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: May  1 23:32:08 2023 GMT
            Not After : May  2 23:32:08 2025 GMT
        Subject: CN=e501603448d1f07c65ee8840ee9ffd9369f515d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:28:3c:03:ec:9c:5d:26:55:f2:c4:c8:6f:
                    d8:d8:6b:4a:a3:32:fb:a3:c2:17:23:64:d4:62:dd:
                    3e:f8:c1:19:d1:ac:d2:30:b9:fa:54:72:de:c5:9e:
                    4d:35:c0:6b:97:eb:d9:19:f3:81:65:5d:fe:ae:32:
                    35:66:63:16:9c:30:b3:98:f7:3e:81:d0:b4:47:3d:
                    82:b4:87:df:82:3b:ec:01:62:75:92:ef:a5:58:05:
                    d8:44:34:5c:e9:b8:d1:82:ca:67:4c:3c:cf:a2:14:
                    33:a9:c9:bd:2a:03:43:55:3b:65:d8:cf:36:6e:dd:
                    5e:d8:69:07:e4:c4:c0:b9:30:a3:4f:e3:6e:6d:f7:
                    e1:bd:98:cb:58:f0:8d:e5:9a:b7:34:b5:8e:d9:06:
                    7e:63:22:6d:83:5c:d3:8f:71:e9:6b:b4:c2:b1:cf:
                    08:7c:42:82:6f:18:b9:21:49:91:49:c5:6d:97:bc:
                    75:82:98:9c:2d:d6:1c:73:39:44:b2:78:a8:c4:5b:
                    c3:ff:0d:ec:bb:37:ee:d7:01:ff:f9:d0:9d:9e:a5:
                    2a:d2:f2:13:9c:47:3a:bf:90:01:89:c9:53:bf:5d:
                    b9:68:f1:f1:bb:c0:92:9e:64:5b:48:31:bc:8e:d3:
                    a5:cd:1e:40:85:e9:ff:d3:13:0b:08:9e:8e:dc:74:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:42:EA:00:90:EB:5E:CA:98:26:D9:A3:1B:25:7C:96:FE:B4:AF
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/e501603448d1f07c65ee8840ee9ffd9369f515d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:33:0c:18:85:e0:b5:d0:84:8b:1a:ef:fe:11:60:e7:80:
         2e:16:3b:6a:27:17:72:eb:33:7f:49:b5:13:f0:d2:90:d3:43:
         2b:5b:40:2e:bc:95:c6:be:1c:7f:0d:74:fe:2a:33:04:6b:8c:
         b9:fc:17:91:cb:2b:75:19:9d:a2:70:9b:9b:3d:df:ba:6e:e4:
         d5:b3:bf:43:e7:3f:0a:d4:20:1c:72:62:cc:98:bb:07:14:89:
         37:44:5b:49:d9:2b:9b:e1:47:e2:7c:85:bd:c0:6a:b8:b6:29:
         d2:4a:e8:85:1b:37:16:54:24:57:50:10:bb:28:fe:0e:68:73:
         8a:91:d5:f7:d8:d7:87:84:c6:cb:ba:51:47:f6:c3:27:3f:2f:
         0c:a8:ce:6d:48:5e:d4:59:54:32:5b:2c:74:10:07:0c:5b:5b:
         17:af:31:d0:c3:c4:f0:93:79:9c:bf:27:05:86:00:0c:f1:51:
         ef:6f:95:77:02:e2:61:8f:19:62:f3:3e:c8:fb:0f:d6:d9:ca:
         dc:dc:fa:c6:cc:6b:49:ab:37:c3:e2:d0:62:9d:5b:46:5e:cb:
         d2:98:2f:65:79:4d:99:f8:92:51:15:7c:e1:66:af:2b:5b:50:
         4f:72:a7:e7:a1:59:9b:94:ab:26:ab:35:2e:2e:34:ac:b6:3f:
         4c:a3:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org