Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d975b4a8814196ad2b0def4c67d0e4614a705d74.roa
File:                     d975b4a8814196ad2b0def4c67d0e4614a705d74.roa (raw, json)
Hash identifier:          Ntu69RI8aHx9wOK2T/LS40wRG40qQv3/C6zM10AoRP0=
Subject key identifier:   59:E1:93:C0:AA:40:2E:1F:DD:05:51:5B:AE:6C:AE:F3:AB:A2:58:B8
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E3C4B
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d975b4a8814196ad2b0def4c67d0e4614a705d74.roa
Signing time:             Wed 19 Apr 2023 17:51:59 +0000
ROA not before:           Tue 18 Apr 2023 17:51:59 +0000
ROA not after:            Sat 19 Apr 2025 17:51:59 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 24
                          181.224.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932939 (0xe3c4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 18 17:51:59 2023 GMT
            Not After : Apr 19 17:51:59 2025 GMT
        Subject: CN=d975b4a8814196ad2b0def4c67d0e4614a705d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:77:bd:54:36:04:98:76:f3:0e:25:56:0b:
                    71:a7:54:d8:c8:25:84:db:7b:21:1c:82:7b:5b:bf:
                    1a:07:dc:67:38:3a:83:71:37:bf:98:f6:d3:93:00:
                    8d:d0:0b:23:f4:01:9d:3a:2b:f2:8f:4c:c1:62:30:
                    ed:14:02:26:df:66:24:38:36:47:c1:47:d5:cc:72:
                    16:24:88:41:18:dd:d3:be:11:d9:d9:81:f6:9f:02:
                    ae:c4:8c:36:5e:dc:ad:9d:c6:93:8e:02:91:7d:3d:
                    9b:4a:66:f4:1f:c8:37:12:ee:7e:1d:ee:af:c5:f4:
                    e0:39:fb:51:ca:0f:7d:c5:8b:84:53:8c:b6:98:af:
                    6e:f9:95:cf:c6:a6:ce:1d:b0:12:9a:92:8a:00:13:
                    98:54:9e:aa:4d:e9:90:28:1f:8a:be:a0:a3:5e:08:
                    1c:95:91:02:81:d2:3f:8a:e2:42:11:89:bb:ef:35:
                    d5:80:26:ee:c8:24:3d:64:12:e0:99:8a:6d:ed:4b:
                    bc:75:a6:f4:1f:6b:b4:f5:1b:92:00:b6:ec:41:dc:
                    e3:e5:d5:02:7e:0b:c2:67:0c:68:8a:3d:54:a7:eb:
                    ae:5f:6b:18:46:a8:4b:82:c8:5b:de:28:30:46:1c:
                    9f:58:2a:52:2d:a5:f7:57:c5:87:93:31:35:fc:03:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:93:C0:AA:40:2E:1F:DD:05:51:5B:AE:6C:AE:F3:AB:A2:58:B8
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/d975b4a8814196ad2b0def4c67d0e4614a705d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:64:27:8c:dd:3d:c0:e5:58:01:e3:0b:14:87:15:e7:14:
         d2:f1:09:65:36:ae:2b:e1:54:f7:e5:80:c9:5e:f5:51:e8:52:
         6d:06:7a:eb:fe:35:a3:17:f0:2b:09:e4:6e:f4:6f:32:0f:54:
         cf:6e:6f:94:98:e6:c7:96:6d:56:43:bf:17:ff:27:66:41:e5:
         fd:c1:b0:cf:93:34:a2:a2:bd:83:03:33:20:0a:26:8d:6c:5f:
         9f:4a:22:32:9b:e3:92:72:7b:09:e4:e9:29:6a:f8:dd:55:e5:
         44:67:93:74:f7:9f:ab:cb:e2:92:cf:a4:eb:63:59:36:13:d9:
         70:4e:11:d3:58:c0:ea:16:b6:f0:d1:c7:f3:f9:a2:d8:c3:45:
         de:32:04:2d:55:3d:d2:52:1b:77:b1:f3:f2:1c:e5:3c:02:20:
         87:65:24:df:73:c3:74:f1:77:78:34:ba:2e:3e:67:46:03:f3:
         2c:cf:07:c4:71:15:31:88:a2:ea:1d:9b:aa:c4:05:50:5f:3e:
         73:c9:d3:bc:59:f8:7d:27:21:c1:95:6a:4a:60:91:a0:87:85:
         a6:d6:10:69:f0:73:90:2b:f0:9e:3a:32:dc:ec:8a:ae:d9:51:
         3f:4e:4f:48:c4:d8:eb:ba:87:78:b3:a6:50:14:aa:d3:d6:3e:
         2c:10:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org