Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3dd19d380242aa99ed99f2b7bfd092f367694770.roa
File:                     3dd19d380242aa99ed99f2b7bfd092f367694770.roa (raw, json)
Hash identifier:          8qNc3j9I3zSMXEbyFLgSOi9CReHtZ4rHL0R62LefUN8=
Subject key identifier:   6A:C7:03:D0:04:88:3E:83:BE:AA:8F:D7:9C:7A:32:57:3D:B8:64:54
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11B03C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3dd19d380242aa99ed99f2b7bfd092f367694770.roa
Signing time:             Thu 15 Apr 2021 23:58:31 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265630
IP address blocks:        181.94.192.0/22 maxlen: 24
                          181.81.246.0/23 maxlen: 24
                          181.93.244.0/24 maxlen: 24
                          181.93.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159228 (0x11b03c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3dd19d380242aa99ed99f2b7bfd092f367694770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a0:5b:34:4b:bc:4f:a0:36:28:da:d1:17:f5:
                    90:c5:34:65:88:1b:af:40:2f:e9:a9:26:eb:01:ad:
                    44:8c:a9:4b:2b:b7:c4:f3:d6:69:20:8c:63:3e:7c:
                    2f:73:c4:2f:8d:2b:be:33:60:94:e7:61:5a:74:37:
                    aa:b6:b5:f2:42:b1:7c:1b:13:34:01:a6:8c:7a:16:
                    51:1f:59:7a:85:b7:91:4b:c1:66:95:ef:df:04:52:
                    96:2b:a3:b6:f3:66:22:df:00:75:96:a2:31:a0:f6:
                    d7:db:7b:6b:a7:99:38:52:7a:9f:6a:f4:d5:d9:23:
                    e5:0d:3b:f4:d4:22:63:19:92:09:90:ba:23:ec:d4:
                    17:f9:54:d4:1a:ee:db:a8:99:a1:54:00:af:29:c8:
                    b1:f7:e8:af:c4:91:60:c4:89:fc:55:78:ed:04:bf:
                    24:c1:0c:15:57:b8:85:f3:bc:f9:8f:40:c2:01:99:
                    f0:b6:ed:58:54:b3:9d:7f:87:df:d4:31:37:72:55:
                    18:dd:97:2e:05:a8:d1:98:29:99:de:4d:4c:c9:5f:
                    cf:ae:aa:b0:c8:18:33:f3:6f:57:cb:2e:c4:f8:6a:
                    4b:89:63:54:87:49:cb:77:d1:c3:e9:7c:27:61:1f:
                    51:64:41:9d:db:2c:2d:30:04:55:65:a5:90:14:6a:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:03:D0:04:88:3E:83:BE:AA:8F:D7:9C:7A:32:57:3D:B8:64:54
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3dd19d380242aa99ed99f2b7bfd092f367694770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.81.246.0/23
                  181.93.244.0/24
                  181.93.248.0/24
                  181.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:76:0f:c2:ad:1c:ad:cc:61:b1:20:20:07:8f:44:68:18:
         b9:e2:90:09:45:72:48:3c:2e:e2:6d:4a:16:be:fd:86:6e:70:
         07:53:78:a7:5a:94:75:9f:96:d7:39:76:e1:9f:46:b2:b8:1d:
         dd:5d:54:dc:66:90:ee:0f:4b:43:3d:2c:45:86:3e:7e:f1:e3:
         92:a0:64:99:68:da:af:c5:95:64:81:0d:03:1b:a3:7a:eb:fc:
         b3:6d:23:a7:6a:fb:a6:59:d0:d5:83:b0:94:b9:6a:dd:68:37:
         cf:e4:ea:75:5b:4c:d3:95:d3:8e:d9:67:22:27:d6:65:58:e2:
         37:27:7a:e0:7f:ea:96:da:dc:91:8c:79:2e:51:b5:ad:ef:ed:
         49:e9:1b:c2:cf:24:9a:35:bb:c4:af:3b:72:1f:ed:4a:c3:98:
         a2:ef:1c:55:e5:fe:8c:9e:90:c7:61:57:65:04:1a:67:9f:a8:
         e3:f2:f0:a5:c2:11:bd:54:1f:3c:39:a0:43:c2:50:32:ec:eb:
         68:3d:80:10:06:fd:11:81:66:46:c2:37:b5:27:fe:7f:91:f3:
         e3:0d:7e:cf:8c:05:07:7c:c5:7a:f9:1f:d3:dd:8d:8b:f6:a4:
         3e:ee:b1:92:ac:52:eb:95:71:22:39:c9:26:8c:be:5a:8d:bb:
         26:5a:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org