Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d6c83849196f6b72f595c48b411c49a84344a362.roa
File:                     d6c83849196f6b72f595c48b411c49a84344a362.roa (raw, json)
Hash identifier:          gmtRB9I9Y4iD936TEPy10f2b3o+9rpbzc+BsKc5VY8E=
Subject key identifier:   D9:78:15:23:A2:E4:6E:4A:DF:83:4C:29:D6:CE:7E:F8:9A:99:48:A1
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       22919F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d6c83849196f6b72f595c48b411c49a84344a362.roa
Signing time:             Tue 02 May 2023 16:31:00 +0000
ROA not before:           Mon 01 May 2023 16:31:00 +0000
ROA not after:            Fri 02 May 2025 16:31:00 +0000
asID:                     14709
IP address blocks:        181.197.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265503 (0x22919f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: May  1 16:31:00 2023 GMT
            Not After : May  2 16:31:00 2025 GMT
        Subject: CN=d6c83849196f6b72f595c48b411c49a84344a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:ae:c0:cd:8c:96:b1:4e:25:c0:7a:69:ad:
                    c0:f2:f7:3d:c3:74:23:2c:6b:3c:e6:a2:c7:a4:cc:
                    37:b2:48:84:7d:17:69:76:3d:39:25:74:35:e7:a1:
                    94:22:6d:f3:54:b4:1c:95:27:da:34:9d:bf:46:91:
                    f9:6d:22:84:51:4b:8b:eb:14:6a:ee:61:b5:7c:98:
                    e3:54:a9:b6:f1:73:20:2c:13:be:9e:e0:02:85:85:
                    97:15:b9:99:17:6c:ba:6c:75:1b:ca:b7:be:e5:b5:
                    7c:63:8f:5a:49:11:9a:39:e4:8c:f6:6b:ce:a1:37:
                    cb:9a:81:53:f1:d0:6b:9c:f7:9c:4c:8a:ad:04:f1:
                    5c:9c:cf:ec:28:a6:36:43:17:e3:5a:35:c4:ed:ac:
                    32:f5:b8:9f:06:47:e4:1d:ec:f0:be:62:ed:f3:4f:
                    27:f3:bd:38:60:22:0d:7e:f5:57:78:76:6c:2a:a7:
                    aa:7b:0f:16:cf:ca:c9:fe:89:f9:94:87:0c:91:cf:
                    4f:36:73:94:bf:27:60:f3:96:d3:2a:b3:84:87:28:
                    04:1e:a8:f7:65:9c:50:89:86:04:60:b7:91:c5:10:
                    29:5a:40:a2:3d:00:05:49:d0:df:20:73:cf:3c:a4:
                    31:84:0a:6d:d2:80:f8:02:f4:9e:c8:c7:17:e6:53:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:15:23:A2:E4:6E:4A:DF:83:4C:29:D6:CE:7E:F8:9A:99:48:A1
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d6c83849196f6b72f595c48b411c49a84344a362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:be:8d:a0:6e:5a:7f:e0:43:60:45:65:12:ff:39:00:ba:22:
         48:14:fc:5d:27:e7:30:4a:aa:b1:83:57:d7:5e:d3:8e:69:24:
         66:b0:37:24:29:c2:88:56:75:23:5e:27:59:e0:63:45:e0:85:
         79:25:9b:2e:ef:37:cb:bb:3f:2e:82:78:84:b4:de:3e:c3:9e:
         ef:db:65:cb:e2:91:41:d5:68:97:37:54:58:6f:0c:76:cd:76:
         66:e9:3a:46:95:be:57:6f:7d:22:30:72:93:21:f4:33:03:c0:
         52:43:b1:72:b4:1b:98:b9:d2:72:49:60:1c:34:84:0f:7d:fe:
         1b:94:74:12:0a:e4:86:50:4d:86:df:bc:b5:18:7d:b2:15:b9:
         68:5d:d5:ca:4a:0c:49:01:d4:55:63:ad:1a:b9:dd:51:97:9a:
         10:02:9f:6d:e1:29:c4:b9:69:cb:38:48:61:3f:34:6d:d9:3b:
         78:00:ee:89:c1:16:39:36:4b:67:4e:78:b2:bf:36:8d:9f:00:
         ba:5c:2f:61:c5:1f:ea:21:24:0a:b9:5d:06:63:d2:67:0d:9b:
         53:26:c7:11:c1:28:2e:06:85:8a:2e:8a:69:03:9a:a4:0f:4e:
         a3:35:99:b2:ba:88:80:5a:0e:7d:03:cc:ae:01:08:81:0d:a5:
         2e:35:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org