Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/f6e6671f95e3460614c98ce9c879994a47bfc74c.roa
File:                     f6e6671f95e3460614c98ce9c879994a47bfc74c.roa (raw, json)
Hash identifier:          JnXOdtNWVK80hwKqJWAJ9AgQLMMFXKTTeJFLMnHsJWg=
Subject key identifier:   7E:A3:5F:E2:5B:8A:CB:34:C7:9E:D7:BE:C1:E6:E3:1D:3A:97:AF:49
Certificate issuer:       /CN=c011f0d257f63ff1e00629cfe11fe357d8aec974
Certificate serial:       0C88E3
Authority key identifier: 77:86:21:F5:99:B5:66:2A:EF:DB:9A:65:7D:61:85:E8:52:EA:A2:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c011f0d257f63ff1e00629cfe11fe357d8aec974.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/f6e6671f95e3460614c98ce9c879994a47bfc74c.roa
Signing time:             Thu 28 Dec 2023 23:35:58 +0000
ROA not before:           Thu 28 Dec 2023 23:35:58 +0000
ROA not after:            Sun 28 Dec 2025 23:35:58 +0000
asID:                     265779
IP address blocks:        181.191.68.0/22 maxlen: 24
                          2801:13:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821475 (0xc88e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011f0d257f63ff1e00629cfe11fe357d8aec974
        Validity
            Not Before: Dec 28 23:35:58 2023 GMT
            Not After : Dec 28 23:35:58 2025 GMT
        Subject: CN=f6e6671f95e3460614c98ce9c879994a47bfc74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:9c:2c:2b:b1:35:48:c7:96:76:81:88:39:
                    a8:3b:c5:fd:30:34:10:15:de:44:21:cf:5c:af:74:
                    f7:84:7d:32:b4:b0:bf:f9:fd:1b:78:d5:e5:7f:3d:
                    91:47:e1:cc:59:de:18:05:f6:84:f7:5b:ee:ef:ea:
                    06:ac:2c:47:3a:63:60:8a:e2:53:71:56:47:7b:7b:
                    a2:65:c7:c9:c1:6d:32:dc:ef:c5:81:9e:55:f0:dc:
                    3c:de:bc:7c:fe:81:db:30:0d:5c:45:50:c5:f4:9d:
                    66:14:bf:2f:7f:4d:68:be:ac:b6:94:5f:7b:1d:22:
                    48:6a:fb:df:8d:90:c7:b8:7c:f2:82:1b:7e:ef:f6:
                    b3:60:05:8c:a3:d0:fc:47:6b:c4:1f:9e:46:51:a7:
                    4b:f8:dc:f6:0b:df:d3:b0:b9:30:a8:f5:1a:ad:da:
                    42:0e:e3:75:3d:e6:03:9e:8e:22:0b:9e:ac:32:2c:
                    e8:c4:b0:3a:ef:a0:f8:61:6f:48:ef:68:07:e9:e2:
                    a6:01:e4:80:57:da:f6:88:26:f6:0e:d4:e7:ba:33:
                    aa:58:72:cd:1d:3d:40:a5:bd:1a:5b:8e:0b:6d:fb:
                    af:4b:24:3f:47:c0:50:e6:ad:5d:60:0f:aa:38:39:
                    9f:ef:d1:36:6e:c2:92:ac:de:f9:11:50:3c:b2:68:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:5F:E2:5B:8A:CB:34:C7:9E:D7:BE:C1:E6:E3:1D:3A:97:AF:49
            X509v3 Authority Key Identifier:
                keyid:77:86:21:F5:99:B5:66:2A:EF:DB:9A:65:7D:61:85:E8:52:EA:A2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c011f0d257f63ff1e00629cfe11fe357d8aec974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/f6e6671f95e3460614c98ce9c879994a47bfc74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a573e3-5276-4101-a44b-5fd6c6c2566f/c011f0d257f63ff1e00629cfe11fe357d8aec974.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.68.0/22
                IPv6:
                  2801:13:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:6d:95:8e:ea:4d:4c:d1:1a:c1:5b:cc:36:34:fc:7b:71:
         a1:e1:6f:11:0f:50:b4:03:7c:a5:7d:b1:99:ad:57:d4:dd:fd:
         85:01:4d:f1:14:c7:9b:68:46:a4:39:b7:9e:a6:2c:93:fc:62:
         83:07:c7:e4:f3:21:e1:f4:d9:30:1c:7d:f6:22:74:c6:8e:50:
         a2:b0:19:76:f0:75:b4:82:25:28:a7:03:57:b6:99:40:bd:cd:
         6e:d3:42:e9:f9:83:3f:ff:2d:6d:a2:de:34:fc:b7:b8:74:8b:
         1a:65:8b:36:27:62:a7:29:80:f5:18:06:0b:af:bd:39:37:40:
         ee:bb:ae:b0:af:eb:e5:76:92:98:bd:fc:cc:71:26:82:3d:80:
         b2:00:2d:70:e0:75:28:6d:27:12:2f:98:4f:4e:60:d2:3c:bf:
         63:24:f2:a9:2c:1a:3b:76:8c:f2:fd:bd:da:38:2b:b3:e6:9d:
         f7:33:15:d5:e1:99:03:2e:06:07:bc:2b:49:6e:97:20:7c:b7:
         13:15:b4:1d:5e:22:62:44:18:10:e2:2d:a0:a1:f4:d1:c0:d0:
         4f:1e:ad:38:83:f4:b9:f5:b7:5d:47:0f:ff:27:fd:44:c7:da:
         6e:e2:fd:ab:50:ed:65:18:71:b0:b1:16:46:28:b0:35:bb:6d:
         24:d0:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org