Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa
File:                     054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa (raw, json)
Hash identifier:          PwKqYYy4OynfrHTl+obG49vj4lzlFC0TtIe6348caXw=
Subject key identifier:   ED:EC:11:EA:CB:5E:67:D3:D3:A3:3D:A8:01:FA:35:1E:78:B4:F3:8C
Certificate issuer:       /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial:       1261E2
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa
Signing time:             Thu 21 Dec 2023 07:30:00 +0000
ROA not before:           Thu 21 Dec 2023 07:30:00 +0000
ROA not after:            Sat 20 Dec 2025 07:30:00 +0000
asID:                     271855
IP address blocks:        181.191.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204706 (0x1261e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Validity
            Not Before: Dec 21 07:30:00 2023 GMT
            Not After : Dec 20 07:30:00 2025 GMT
        Subject: CN=054e3b78e49ee323ae9165c46445f8f55f7cc1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:ed:7f:09:1e:43:f5:fb:fb:7e:cd:3d:11:
                    39:46:ab:f4:22:96:c1:e1:f5:d3:5f:c8:c7:df:6c:
                    84:b1:6c:fa:16:36:53:4c:c8:4f:47:48:03:37:5a:
                    42:2e:5b:85:41:5d:af:4a:99:7b:5e:c0:b7:b1:32:
                    27:3e:99:f4:65:cf:e5:e8:68:48:f5:af:6d:7e:91:
                    ca:97:19:c6:fd:55:7d:ac:e6:ca:43:f6:15:4d:17:
                    44:ac:1d:b2:0d:c8:71:c5:38:9b:c4:26:16:fe:b0:
                    68:eb:c2:79:d4:8e:45:a2:26:b9:6e:ca:8e:d9:7a:
                    de:c4:49:31:d7:8e:48:65:1a:34:74:78:e7:c6:00:
                    4c:89:81:44:02:53:9d:bc:f0:40:f5:9f:40:a4:59:
                    12:3c:e5:77:26:fe:33:9c:bf:40:17:6d:5a:a2:85:
                    c0:4e:4f:46:c9:7b:47:48:33:fd:eb:aa:06:b6:58:
                    a0:fe:42:d1:d4:73:b7:ae:08:a0:62:f3:52:59:ec:
                    70:1c:dc:2a:54:d2:28:23:46:a9:e5:d7:38:e9:98:
                    9c:ac:53:32:69:51:86:5e:5d:a9:41:a9:67:00:66:
                    ca:7a:23:96:00:04:cd:7d:ba:88:3b:b1:42:9e:5d:
                    90:0d:b0:51:d6:6a:82:92:06:a4:75:e4:72:16:45:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:11:EA:CB:5E:67:D3:D3:A3:3D:A8:01:FA:35:1E:78:B4:F3:8C
            X509v3 Authority Key Identifier:
                keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:a1:96:3d:8d:0c:9e:f9:47:14:8b:12:69:fe:6b:51:2c:
         ed:a4:b2:35:6e:61:b3:aa:d6:e2:72:bb:5c:14:17:b8:54:4e:
         e8:d4:5b:c5:17:9d:3e:0d:17:aa:36:c4:e5:77:05:a9:d7:a6:
         c8:3b:1e:89:82:a9:2f:26:0f:e4:3e:be:5e:66:6d:0f:c9:fd:
         c4:9f:be:97:96:ac:81:ac:ab:22:ac:f5:03:18:2b:11:27:39:
         a0:48:44:de:ae:27:a5:f1:0a:ef:16:74:8f:3d:dc:bf:c1:21:
         3b:a7:b8:5c:48:3f:c0:4b:93:86:cd:74:f8:cf:32:d3:2a:a3:
         33:96:de:b4:e9:8d:cc:f4:e7:2a:a3:0d:bc:1c:d8:24:59:76:
         dc:eb:d5:47:3b:9d:bd:a1:9b:d0:91:f0:1f:78:17:57:a4:a8:
         2a:47:25:98:21:ea:9a:1c:90:a8:b9:bc:8d:95:07:18:f5:4e:
         2c:98:f5:e6:6c:df:4b:1b:8c:10:3d:49:ad:06:b3:d9:09:1e:
         93:1c:16:3e:97:f3:a5:c3:68:ae:bb:83:68:64:c4:ea:31:36:
         7d:b1:19:ff:82:54:0d:6c:8e:24:3b:ef:e7:cd:4f:14:a0:66:
         cd:b8:f5:ec:18:87:d7:3c:5b:bf:1e:ca:c9:75:dc:50:e0:c1:
         97:75:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org