Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6dee9487f7496e7abf68309e88517d4559cb7f9b.roa
File:                     6dee9487f7496e7abf68309e88517d4559cb7f9b.roa (raw, json)
Hash identifier:          8mVTLJYDPFLdOxNOFb+XB0khUBDQcmt6K+Lu37xWVPw=
Subject key identifier:   E1:9B:F6:6D:8D:0B:37:F8:22:CF:A3:9E:11:C4:2F:DF:C7:E1:84:D5
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       4504
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6dee9487f7496e7abf68309e88517d4559cb7f9b.roa
Signing time:             Wed 09 Aug 2023 15:29:59 +0000
ROA not before:           Tue 08 Aug 2023 15:29:59 +0000
ROA not after:            Sat 09 Aug 2025 15:29:59 +0000
asID:                     52412
IP address blocks:        181.224.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17668 (0x4504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 15:29:59 2023 GMT
            Not After : Aug  9 15:29:59 2025 GMT
        Subject: CN=6dee9487f7496e7abf68309e88517d4559cb7f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:50:68:f9:eb:50:26:2c:65:a0:6f:95:ac:
                    81:c4:95:4d:36:03:19:1b:af:29:48:29:06:f7:27:
                    03:1e:ee:2b:d0:aa:06:4b:4d:67:6d:b4:24:8a:5c:
                    e7:c3:2b:78:98:16:1a:b4:15:9b:5a:98:04:b3:8a:
                    b5:8a:dc:5a:d2:48:d2:f9:8b:1d:68:01:95:f0:ba:
                    b7:41:00:1a:c8:5d:6c:e5:c4:3d:34:d0:e8:00:cc:
                    a3:66:38:76:c3:ed:44:97:4e:a4:1d:96:ba:b0:77:
                    50:3e:7c:6c:13:a2:6c:4c:60:9d:31:44:b0:a4:7e:
                    55:a6:86:26:40:0b:78:42:58:7d:43:0f:92:54:72:
                    97:b6:8e:a8:b8:ff:d9:ea:08:14:32:97:f2:51:a1:
                    9c:0f:65:52:bb:0a:8c:aa:66:28:03:6a:9a:12:43:
                    4a:e7:c2:55:e8:ed:62:b9:f9:20:cd:58:3a:06:60:
                    d6:f4:36:c3:00:de:79:8a:0f:71:b2:ae:a5:1f:e0:
                    3c:82:fe:ff:de:35:2d:62:bd:39:1f:35:ae:e4:02:
                    ed:4e:e7:85:6c:0b:b2:b3:e1:49:10:89:f0:f5:bb:
                    cf:b8:ac:51:35:dc:43:a7:2d:d7:1d:b3:26:7a:36:
                    89:65:0d:0a:4b:be:55:0c:9e:42:7e:ec:8d:24:c5:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9B:F6:6D:8D:0B:37:F8:22:CF:A3:9E:11:C4:2F:DF:C7:E1:84:D5
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6dee9487f7496e7abf68309e88517d4559cb7f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:ab:e9:5e:3f:06:4b:ce:2f:f7:f3:60:8a:02:9a:10:cb:
         39:52:98:8b:15:bf:e0:75:8b:27:49:d1:6b:2a:c2:ab:a4:b3:
         14:4f:8c:a6:df:5a:64:78:a1:d8:35:b9:d8:de:0d:22:d7:cf:
         20:ae:a5:c0:2b:cc:14:ba:a7:bc:77:7d:e6:99:c6:d1:e1:98:
         bf:90:41:73:38:b9:86:70:5a:af:f9:ae:6e:b5:7a:56:b6:71:
         ab:3f:2d:66:38:24:5e:15:cc:f8:bd:a6:3c:9d:a1:18:98:45:
         7a:00:87:32:e4:8a:99:d7:15:ae:48:18:1f:2f:f8:b7:bd:f3:
         a9:b3:cf:96:3d:05:12:c1:0f:1a:36:e7:06:69:7b:39:ab:a3:
         77:48:d9:80:7b:a0:7a:33:ed:40:b6:97:fb:1c:d2:c2:ab:37:
         06:b3:00:e2:96:54:d6:75:64:91:1b:0d:bc:15:6d:91:27:17:
         29:82:11:dd:76:dc:7c:64:87:0f:0b:86:0b:98:26:de:65:cf:
         b9:52:b3:9f:ae:dc:26:53:fc:c7:1a:ab:d7:98:f7:d7:13:6f:
         45:28:5c:76:5d:63:49:84:89:bd:5f:ac:6f:71:06:22:28:66:
         97:e3:df:2e:55:ef:b6:c8:a2:f0:ed:66:45:7e:29:13:5f:c4:
         f6:5d:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org