Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/8b5a0850ea9c00b9188dfa3d5bec5d8b826f5c8b.roa
File:                     8b5a0850ea9c00b9188dfa3d5bec5d8b826f5c8b.roa (raw, json)
Hash identifier:          W6Ompa7qY7SOZzWFDlNcx5U7rWlkR+XLqPrtnwWx/+Y=
Subject key identifier:   B3:DD:C9:E3:72:13:5E:C3:75:52:2D:63:8E:70:2B:6A:85:5A:72:A9
Certificate issuer:       /CN=44185224cf7ca78dbccca01419f06c7cc212b495
Certificate serial:       18F1A5
Authority key identifier: DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/8b5a0850ea9c00b9188dfa3d5bec5d8b826f5c8b.roa
Signing time:             Mon 20 Jun 2022 13:25:38 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Thu 20 Jun 2024 03:00:00 +0000
asID:                     47869
IP address blocks:        181.225.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634725 (0x18f1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44185224cf7ca78dbccca01419f06c7cc212b495
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2024 GMT
        Subject: CN=8b5a0850ea9c00b9188dfa3d5bec5d8b826f5c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:c2:3e:7c:ca:5c:b4:71:85:17:a6:45:bd:
                    ad:13:4e:92:33:b5:3f:a1:e2:b4:d0:9a:5c:26:b2:
                    66:27:af:dc:7a:c1:3f:dd:ff:0a:38:fa:5b:52:a8:
                    49:98:e2:1a:72:cb:72:b2:29:c6:f8:0e:b8:b2:71:
                    2d:d0:04:96:0f:fb:a1:3a:9a:f2:10:04:ac:5d:78:
                    92:4f:b4:59:fe:44:8e:ee:62:30:dd:35:17:1a:f8:
                    4c:34:75:20:83:db:ff:83:da:1a:94:0d:9b:86:72:
                    35:be:70:fc:41:03:ee:62:5f:04:ca:ac:65:5b:fa:
                    dc:85:22:d5:b7:a8:bc:16:36:8a:cb:a5:4f:f2:81:
                    ed:fb:8f:dd:2a:75:fd:8c:e6:55:c7:2d:9c:bc:a4:
                    1f:ba:18:cf:fe:af:0c:70:3e:69:4e:00:40:82:d8:
                    d0:f4:b7:c3:50:48:aa:56:21:6b:03:81:34:cb:c1:
                    67:60:66:64:26:f0:dc:63:a5:0d:66:48:ae:66:57:
                    ff:4c:d0:89:c8:3a:52:70:84:2d:c5:d8:c4:42:a4:
                    d4:b9:6c:10:4c:43:31:2f:e3:e3:0f:98:39:58:25:
                    fd:64:90:57:e0:42:79:74:ee:79:a3:24:ba:62:cb:
                    b6:47:d6:01:50:cc:a1:bc:db:77:3b:2c:7c:c2:7d:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:C9:E3:72:13:5E:C3:75:52:2D:63:8E:70:2B:6A:85:5A:72:A9
            X509v3 Authority Key Identifier:
                keyid:DF:52:89:92:E5:35:F4:ED:70:12:21:8E:36:98:5F:3C:90:1E:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44185224cf7ca78dbccca01419f06c7cc212b495.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/8b5a0850ea9c00b9188dfa3d5bec5d8b826f5c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a1a1652-5499-487f-8b97-1a12ef27d9d6/44185224cf7ca78dbccca01419f06c7cc212b495.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:17:bb:33:39:a5:6c:7c:f4:0e:a3:d2:82:86:f1:76:51:3b:
         de:7f:14:37:c6:5e:c8:9b:8f:e0:af:74:42:74:57:b2:d1:73:
         45:69:54:62:6c:42:81:ae:f7:af:a5:e6:3a:3d:ac:fe:db:c9:
         5f:4a:a3:04:58:44:07:89:ba:7b:7f:af:43:3a:2d:ea:d6:fc:
         15:06:4e:25:cf:67:73:83:25:78:cd:07:42:52:f1:e9:c3:00:
         39:4b:b9:d6:fe:b3:21:9e:fc:d3:56:59:a6:0d:23:61:db:56:
         82:c5:ff:70:b6:dc:63:ca:3e:5d:c9:ea:d2:b7:1d:58:6e:2b:
         dc:ed:c3:d2:59:e7:6c:b1:7f:f5:d9:1e:3e:56:ce:16:ae:ae:
         32:d1:1a:f9:97:4a:6a:17:9b:73:c8:04:02:0c:66:13:e8:f9:
         aa:96:f3:03:53:d9:12:16:96:39:0e:7f:30:b0:0c:91:0b:b8:
         57:8c:4c:73:62:c7:74:49:9a:1e:3b:13:9f:3b:af:b7:ec:6a:
         a6:20:ca:65:44:b6:0c:0b:12:d4:50:ae:29:ff:f3:9b:e5:8f:
         89:e0:ff:1c:cb:19:80:dd:7b:65:5e:7b:8c:0c:2d:3e:30:04:
         4b:dc:b1:de:6b:83:b0:57:ad:14:c8:2c:0a:c6:44:01:01:a7:
         e3:b9:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org