Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d77cf4dd24e779ff09dbd8504dc07305328ab187.roa
File:                     d77cf4dd24e779ff09dbd8504dc07305328ab187.roa (raw, json)
Hash identifier:          btr0ViPdC5qaNCfwwswz3VACMypEeiy4l65JwJvdxmE=
Subject key identifier:   8D:97:05:D2:04:94:3D:CD:BB:3C:16:83:00:40:94:00:08:2B:63:18
Certificate issuer:       /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial:       0B7B
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d77cf4dd24e779ff09dbd8504dc07305328ab187.roa
Signing time:             Wed 22 Dec 2021 15:07:47 +0000
ROA not before:           Wed 22 Dec 2021 03:00:00 +0000
ROA not after:            Fri 22 Dec 2023 03:00:00 +0000
asID:                     271855
IP address blocks:        181.191.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2939 (0xb7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Validity
            Not Before: Dec 22 03:00:00 2021 GMT
            Not After : Dec 22 03:00:00 2023 GMT
        Subject: CN=d77cf4dd24e779ff09dbd8504dc07305328ab187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:7c:a0:57:ca:c1:d2:3a:c8:a8:ac:53:54:
                    d5:59:23:a4:dc:e4:14:e4:81:31:e4:fc:ea:dc:9e:
                    3d:5f:65:32:4f:62:75:33:2d:11:40:1a:63:4f:0c:
                    98:9b:60:c6:36:55:20:ed:52:36:9b:be:39:14:24:
                    2e:93:07:f1:f6:f2:ad:57:45:36:18:d6:66:f5:1f:
                    03:3b:91:60:ea:9c:c9:f3:da:77:4e:2b:92:28:b6:
                    e9:8b:9f:a7:52:d5:14:74:d6:17:7f:db:eb:b2:3e:
                    2e:6d:20:de:9d:67:bd:5f:cc:16:97:58:94:41:cb:
                    c1:2a:a9:8b:fe:72:cd:e4:5b:ba:65:eb:04:34:58:
                    34:d5:0c:44:0a:74:a8:74:22:1f:7e:ac:77:69:fd:
                    2c:a8:5a:1c:04:c5:d5:6f:de:01:e5:d3:20:9d:db:
                    a2:71:6d:f7:32:b7:5a:ed:c3:b1:3d:a7:1c:aa:a7:
                    eb:8c:ef:ab:c2:de:04:41:77:c8:92:9a:8f:c8:a1:
                    f3:de:73:e2:93:87:60:15:68:a4:f1:aa:36:8e:60:
                    15:5d:75:ff:45:24:f3:9a:ca:b5:a2:de:c4:ba:25:
                    ae:c9:b5:70:c3:cb:96:aa:4e:bf:fc:ae:5f:10:a0:
                    49:ba:d0:4c:40:9a:33:33:a2:13:ec:7a:2a:b5:1e:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:05:D2:04:94:3D:CD:BB:3C:16:83:00:40:94:00:08:2B:63:18
            X509v3 Authority Key Identifier:
                keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d77cf4dd24e779ff09dbd8504dc07305328ab187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:dd:06:2e:4b:58:fd:7a:dd:fa:bb:e8:d2:37:fb:6d:b9:44:
         58:52:26:51:da:6d:9f:73:2c:fe:c0:b0:74:3d:8e:7d:1d:e1:
         d0:a3:a4:69:08:a7:22:05:23:f3:a4:b7:75:5d:b9:96:00:53:
         6e:8b:28:7b:c3:a1:fd:42:d2:36:6d:e8:f7:dd:7a:96:60:4c:
         6a:55:85:13:8b:5d:06:a0:83:1a:f1:ec:59:c5:9f:08:e0:51:
         b9:7c:ab:8a:82:c0:24:ab:78:f5:48:70:ba:6c:46:41:77:5d:
         7d:21:d8:c8:0c:a3:78:02:9d:86:a4:66:ca:c2:89:2e:74:cc:
         fd:41:72:ab:7d:22:3e:e6:fa:01:72:55:0d:19:69:0e:8c:2d:
         4c:7a:7f:00:dc:e9:05:99:32:40:06:6e:6f:a0:5c:09:53:2e:
         b4:78:4b:21:13:62:20:a7:11:dd:d3:44:1b:f8:ed:0f:57:4b:
         f2:7e:5b:2f:5f:01:06:56:a3:cd:11:31:28:66:74:85:23:af:
         bb:01:94:e3:07:de:d1:7c:a6:46:89:45:8f:77:d6:95:0b:4e:
         bf:06:9e:c8:0a:2e:39:54:41:4e:f7:e4:21:94:03:8b:94:1b:
         d4:ae:2d:3a:31:28:14:b6:43:e7:52:c2:52:6a:62:1e:ca:c5:
         d8:98:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org