Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/25bffe475f87f515771773652560994afeefcd3f.roa
File:                     25bffe475f87f515771773652560994afeefcd3f.roa (raw, json)
Hash identifier:          D1FuK6KbC0XAVQnINbyuQfC98PSiyaDj3spJLaFHqxU=
Subject key identifier:   59:36:56:99:D5:35:4C:C8:01:AF:5C:B3:1E:4A:17:D9:DD:B0:61:AD
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       3A2A
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/25bffe475f87f515771773652560994afeefcd3f.roa
Signing time:             Wed 09 Aug 2023 15:28:57 +0000
ROA not before:           Tue 08 Aug 2023 15:28:57 +0000
ROA not after:            Sat 09 Aug 2025 15:28:57 +0000
asID:                     52412
IP address blocks:        181.224.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14890 (0x3a2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 15:28:57 2023 GMT
            Not After : Aug  9 15:28:57 2025 GMT
        Subject: CN=25bffe475f87f515771773652560994afeefcd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:b7:03:83:71:3b:43:7e:eb:d2:6d:bc:99:
                    13:ea:89:b2:44:18:99:f8:b2:e3:05:99:c7:c3:da:
                    e5:f7:97:64:ee:72:0a:89:77:82:57:62:b2:7d:60:
                    51:6e:2a:8b:aa:8a:aa:b1:ba:18:b6:1a:a2:25:d0:
                    59:74:d4:fe:53:75:56:58:68:fd:22:a0:62:70:72:
                    96:0d:b1:11:42:f2:44:80:8a:c4:8d:a3:c8:56:26:
                    61:d7:53:4b:cf:97:8d:4a:e0:7e:af:50:09:7d:93:
                    95:68:3b:eb:02:13:a8:f3:5f:0a:fd:0b:d6:55:a8:
                    6b:62:ae:d8:58:90:ef:7e:86:d3:85:8d:ed:8c:61:
                    3c:d8:51:14:f9:80:37:1a:8e:de:fd:85:90:69:f9:
                    df:fd:4d:d6:47:9f:7f:2f:89:c3:f4:15:3d:f1:7a:
                    63:cb:75:23:2e:d2:06:d4:61:89:a2:24:c1:37:27:
                    02:10:9f:98:78:ab:65:0d:cf:54:41:00:01:56:00:
                    85:bd:ac:2a:19:88:59:ef:a7:8c:4c:68:ee:e8:16:
                    ed:a3:36:f9:55:5e:f4:77:1a:c6:79:46:ad:51:74:
                    c0:f4:4d:ea:16:09:e2:69:36:91:ab:22:4d:a1:63:
                    03:a8:9b:e2:4b:03:50:8f:cb:7d:9d:bf:2d:c3:51:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:36:56:99:D5:35:4C:C8:01:AF:5C:B3:1E:4A:17:D9:DD:B0:61:AD
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/25bffe475f87f515771773652560994afeefcd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:ee:f8:e7:c1:aa:35:40:1e:94:e3:7b:c7:0a:aa:26:91:
         72:13:8b:37:d6:ad:7a:47:07:c3:32:14:72:0a:4d:b9:87:7a:
         b5:bc:da:91:2c:90:22:dd:64:fc:a8:e1:94:52:0a:75:1c:76:
         e9:cd:a1:1f:07:8d:23:03:d5:d7:e0:e5:90:99:fd:fc:36:ff:
         6a:f4:bc:aa:ef:2f:14:ae:41:55:49:25:35:3d:d8:95:f1:1a:
         5a:4f:0f:9a:c9:04:39:9d:70:57:42:16:98:13:08:44:98:69:
         0c:dd:ae:3b:d3:cc:13:0e:5f:e9:08:6b:6f:35:04:e7:aa:8f:
         96:68:00:55:1d:3b:79:80:4d:44:38:7a:66:3b:dd:aa:41:13:
         bd:5a:fc:9d:92:6e:d5:d0:aa:b7:68:af:91:fd:87:8b:77:14:
         08:07:8e:61:78:25:67:df:d9:b9:6f:cf:95:15:29:71:d4:42:
         2b:f8:a8:29:31:ae:9c:fb:00:c8:27:00:6e:48:6a:af:78:c5:
         e5:33:dc:5a:1d:6c:b6:05:d7:02:90:e5:22:45:71:1c:6a:54:
         d5:97:8f:b5:eb:a0:29:06:e5:81:52:d4:84:69:53:0c:e7:95:
         f7:a9:25:c9:74:e2:81:51:10:fb:98:f1:78:07:61:6f:db:17:
         d9:11:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org