Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/63362df16d486b9f58d1b65843df49208ae0398c.roa
File:                     63362df16d486b9f58d1b65843df49208ae0398c.roa (raw, json)
Hash identifier:          rVnBYw5pwBeIWWY9eYur3SlWMVsEqGjanTSN5WITc7I=
Subject key identifier:   7E:9E:D0:86:82:F5:A2:96:1F:8F:3E:3F:D7:0E:01:86:87:31:63:E4
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27A70B
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/63362df16d486b9f58d1b65843df49208ae0398c.roa
Signing time:             Mon 17 Apr 2023 13:01:56 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     264753
IP address blocks:        181.10.187.0/24 maxlen: 24
                          181.10.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598667 (0x27a70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=63362df16d486b9f58d1b65843df49208ae0398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:ca:65:cb:00:93:c6:04:b8:a4:0b:7d:5d:
                    33:96:87:f5:57:8a:e7:32:cc:8b:6a:12:cf:90:bc:
                    c9:18:51:2a:0d:22:f7:b0:cc:29:44:cb:c8:5a:c3:
                    68:71:a6:8d:67:eb:5f:c0:d4:8d:77:77:57:67:7e:
                    a1:1f:b9:09:3c:cf:5b:30:d9:67:a2:91:c1:2b:de:
                    3b:5a:84:49:02:c5:b3:a6:51:19:be:6e:40:fa:38:
                    e5:5e:01:5c:a6:92:ec:db:ca:f4:07:7c:c1:ba:7d:
                    86:8e:c9:d3:8e:0a:89:66:e6:39:07:f0:85:73:ac:
                    e6:22:46:72:d2:bf:0c:bb:50:d6:c1:ab:c8:96:7f:
                    11:44:e9:55:6e:c9:b5:ee:97:81:ef:de:c6:0b:f1:
                    4c:27:f6:f7:3a:1c:4b:f1:85:01:3c:68:27:1b:5c:
                    b2:8f:0d:3f:48:ae:6c:ce:14:e9:bf:ad:5a:58:b3:
                    aa:81:64:3b:aa:a6:f4:81:95:f2:8d:34:89:07:ef:
                    3d:6f:ac:11:ac:05:d8:ba:93:b1:04:9c:79:40:1e:
                    3f:bc:4e:eb:ef:fd:d3:9c:9c:40:33:7b:a9:02:e5:
                    37:98:7e:33:ed:09:c3:52:36:f7:c4:43:c7:1a:d8:
                    42:eb:ae:f6:be:56:fc:eb:21:9b:5a:96:6d:56:63:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:D0:86:82:F5:A2:96:1F:8F:3E:3F:D7:0E:01:86:87:31:63:E4
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/63362df16d486b9f58d1b65843df49208ae0398c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.187.0-181.10.188.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:01:4a:30:10:5f:3f:a2:d7:ce:76:95:8f:82:ce:84:57:
         b7:fb:2f:16:ee:49:d4:fa:3a:9a:d7:78:3a:32:7b:53:e1:ee:
         40:f8:13:c4:be:c5:ec:96:95:21:ef:05:d1:de:f8:4d:c2:73:
         34:39:f8:db:05:ca:6d:78:af:0d:06:34:d7:f6:7a:ac:66:fe:
         a1:42:7d:b7:39:67:3a:bd:84:cd:d0:87:ad:b2:c9:33:a3:45:
         9c:ce:6a:d2:25:9a:11:dd:1b:4c:d4:5e:1f:bd:da:3d:9a:99:
         73:a9:a0:81:7f:ab:29:ae:4a:d7:35:3d:ea:dd:11:bb:eb:cd:
         35:85:34:9b:04:08:4f:6b:ae:c9:46:26:eb:c8:20:c1:b6:cf:
         23:a6:de:fe:dc:23:3c:3a:65:ee:29:1a:f4:05:dc:8b:21:6b:
         82:ea:ff:bf:98:09:00:d5:7f:7d:70:14:a2:c6:17:db:a0:0e:
         f2:26:bb:de:31:9b:0c:de:94:fd:d1:f1:38:a1:54:11:f1:59:
         21:33:f0:10:5e:cd:c2:72:b3:96:b7:2f:f8:35:0c:95:cc:5f:
         3a:2d:c4:bd:8a:b0:c0:9a:40:c6:51:26:2e:07:e6:85:27:47:
         51:9e:d6:5e:01:24:2a:55:ee:3a:90:40:eb:d8:08:a9:7f:77:
         42:a7:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org