Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6986c4ead27720972846ed6dfd42eac650e02db3.roa
File:                     6986c4ead27720972846ed6dfd42eac650e02db3.roa (raw, json)
Hash identifier:          lfasy2uq3YAe5ssgIBuIFOp0wJcRG/EMtjxOjXKco+4=
Subject key identifier:   C3:19:D0:6A:5F:EA:F3:80:94:92:AC:FE:9F:7D:19:63:21:03:D6:3C
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       371D
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6986c4ead27720972846ed6dfd42eac650e02db3.roa
Signing time:             Wed 09 Aug 2023 15:28:01 +0000
ROA not before:           Tue 08 Aug 2023 15:28:01 +0000
ROA not after:            Sat 09 Aug 2025 15:28:01 +0000
asID:                     52412
IP address blocks:        181.224.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14109 (0x371d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 15:28:01 2023 GMT
            Not After : Aug  9 15:28:01 2025 GMT
        Subject: CN=6986c4ead27720972846ed6dfd42eac650e02db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:a8:af:61:d1:54:9f:8f:58:f3:31:36:26:
                    d1:f5:8c:5e:35:37:64:21:ff:be:3b:07:7d:6b:76:
                    93:a0:51:ec:df:b1:35:95:c7:20:01:29:28:0a:d3:
                    26:27:4b:0b:0a:35:2d:d8:50:34:25:24:f6:a8:d6:
                    5a:cd:bc:20:bb:24:4e:1e:7e:c5:43:4b:11:4e:03:
                    27:90:07:e2:87:ba:ab:c0:47:ad:af:fb:a4:f9:44:
                    3e:e1:81:e3:72:1e:62:4c:21:f6:7a:ef:85:3f:56:
                    e8:ac:6b:3d:c5:49:d3:eb:db:43:48:66:7e:79:4a:
                    d0:e4:9d:9f:46:80:a5:de:10:16:25:6e:1e:70:32:
                    79:22:ea:a4:95:6d:b0:5f:ee:4a:00:f7:cb:0b:ae:
                    1b:f2:bb:17:e0:9a:d1:d7:70:0c:18:67:1d:82:ae:
                    be:9c:af:dd:33:f1:a2:58:11:68:65:b9:cf:0d:dd:
                    0d:dc:57:ca:60:8a:61:5a:4e:76:6a:81:da:24:4e:
                    ac:45:65:58:87:8f:07:31:28:3b:79:1f:40:07:5b:
                    60:65:af:b2:95:77:84:15:5b:67:25:53:ca:10:99:
                    a2:f3:08:94:15:b6:29:72:32:62:24:2f:54:e5:bc:
                    b5:83:3f:80:aa:97:82:07:64:8c:59:64:89:fb:e4:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:D0:6A:5F:EA:F3:80:94:92:AC:FE:9F:7D:19:63:21:03:D6:3C
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6986c4ead27720972846ed6dfd42eac650e02db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:96:b3:0d:66:ca:14:f1:10:38:81:59:3b:f5:10:ce:5a:
         fa:82:59:43:e4:5f:6b:9f:02:62:d6:66:7e:01:ed:fb:2e:6d:
         d4:bc:f0:e2:f7:ef:1c:0d:7b:b3:62:3e:aa:0b:2c:14:9e:aa:
         1d:83:98:67:a5:c3:25:c5:54:95:f3:f3:74:67:20:5a:5c:c8:
         9b:37:8b:48:71:a1:40:0f:9c:cb:9e:35:93:30:f7:08:8a:67:
         27:57:45:6f:54:a8:36:aa:76:55:b7:59:1f:4d:5f:3e:1a:68:
         98:f9:1c:19:65:3d:44:0f:fb:61:99:6b:fa:0d:39:bc:0e:21:
         38:7e:26:79:a2:ec:d6:e3:b9:ee:7f:cf:8d:7c:46:85:d4:88:
         32:fd:2c:ba:94:7f:43:0b:93:45:94:0e:d3:8c:d6:7f:67:3a:
         f8:db:9c:cd:e4:4b:7d:e6:74:1c:73:9b:9d:60:f7:f9:c0:c9:
         ff:cb:5a:d0:93:50:2b:4d:56:a0:ab:e5:3d:fb:0c:f4:0e:a8:
         6e:db:d0:40:7d:bd:84:af:e9:53:05:ac:e3:70:54:02:56:79:
         ea:33:4f:c7:30:f7:0c:ea:38:00:f0:94:8d:cb:a2:70:b7:2e:
         e6:25:e7:ae:9d:b6:1b:e8:c0:5f:a8:21:01:88:fa:e3:92:24:
         f9:3b:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org