Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/2bbfa2318c48418e390223c199c7f17015ef9800.roa
File:                     2bbfa2318c48418e390223c199c7f17015ef9800.roa (raw, json)
Hash identifier:          PD2ArzRtw3lj6U9VGmSdf9yG9/LrLvnHLAluANoivm8=
Subject key identifier:   A3:A6:61:BF:83:C9:2A:C5:C6:41:7A:4C:19:5F:61:03:EA:6E:79:2A
Certificate issuer:       /CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
Certificate serial:       0704C6
Authority key identifier: B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/2bbfa2318c48418e390223c199c7f17015ef9800.roa
Signing time:             Thu 15 Sep 2022 00:02:20 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     265796
IP address blocks:        181.191.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459974 (0x704c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=2bbfa2318c48418e390223c199c7f17015ef9800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:87:9c:7a:ca:4f:a0:e8:e0:fe:a9:f9:77:
                    f7:41:ac:57:77:14:85:14:fc:20:d8:c8:60:7a:63:
                    eb:8c:e8:e9:16:07:fb:a3:a0:90:44:7a:76:d9:c1:
                    a2:5f:0d:f6:6a:1c:9f:1f:3c:ae:4c:7e:0a:db:09:
                    a5:c4:0d:58:c0:0c:ae:b1:94:68:2a:21:df:1c:6f:
                    5b:25:ef:c9:62:ac:21:a4:df:42:b7:dd:d1:74:bc:
                    8d:f7:73:fb:01:42:3b:a5:8c:f6:29:d5:2d:25:d7:
                    1c:43:a7:32:a6:3c:05:d7:8d:60:2d:7b:c1:a8:38:
                    8c:07:28:2b:a2:8b:94:bb:02:75:7a:cb:96:a7:7b:
                    95:a4:ff:45:8f:0a:23:83:9d:4f:16:ca:1d:90:41:
                    48:66:28:b7:fc:88:c2:fe:34:6b:90:04:61:c4:6c:
                    a5:d2:60:51:8f:f6:b4:29:d0:cd:8c:b3:4c:ba:b3:
                    6b:9a:06:2f:09:bb:44:a7:7d:84:8f:bc:29:db:48:
                    63:b1:39:c9:9f:be:63:29:68:97:69:0d:c1:8d:3b:
                    c0:55:b5:87:1b:db:85:04:64:b6:ac:10:a2:b7:23:
                    47:a8:f6:a8:8a:8a:52:e7:d2:36:c7:0f:c0:17:cf:
                    04:1d:c9:53:da:08:8f:8f:16:a8:5f:3c:62:5d:d5:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A6:61:BF:83:C9:2A:C5:C6:41:7A:4C:19:5F:61:03:EA:6E:79:2A
            X509v3 Authority Key Identifier:
                keyid:B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/2bbfa2318c48418e390223c199c7f17015ef9800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/041358da0b12ee28b9288c87d937e0f22e1b65f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:2d:21:bf:b1:f0:47:c0:71:6a:51:dd:2d:34:dc:06:45:
         8d:29:ca:a7:61:c7:31:44:a0:ec:29:dc:f7:c6:ba:ee:70:4e:
         79:22:03:de:d8:3e:e7:73:67:b6:e7:6c:f9:28:95:14:7c:8e:
         0d:85:26:c5:98:b6:da:73:66:3b:73:57:5a:d8:28:40:e1:cb:
         da:5e:85:62:81:66:83:12:e9:08:05:d5:76:11:9d:5f:63:4a:
         4d:55:d5:78:b4:61:61:6f:27:98:11:0a:65:54:ab:31:95:c0:
         b8:61:63:cc:52:50:ff:8b:78:10:0e:11:ba:4f:72:92:ab:53:
         27:e8:a8:2d:ec:12:b5:ef:eb:c7:00:60:18:7b:d2:84:1a:8f:
         c4:82:38:6f:1c:37:f7:5b:de:fe:3a:55:8c:9a:43:72:23:cc:
         78:58:27:7b:80:ce:be:db:51:97:66:de:5e:b8:cc:f7:8d:2c:
         ac:e8:d2:0e:77:c8:4d:7c:8f:57:3a:6c:4c:97:00:6f:c6:07:
         cc:c6:37:bd:50:7e:47:05:01:db:fd:8d:9d:bd:da:0f:db:f1:
         3f:1f:0d:e6:2b:49:3f:a4:e5:16:5f:93:6d:81:36:b3:b7:53:
         f0:d4:8b:7b:f1:24:7e:ac:dd:4d:c7:c4:eb:47:33:08:aa:1b:
         2a:32:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org