Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa
File:                     9d91a7bcff6e32917a34690d2a21124b97a19354.roa (raw, json)
Hash identifier:          GwK9pcj4fkuNDKmOHWNDxaFu1o/93DcxJmUfOaAsNsY=
Subject key identifier:   58:93:7A:D6:18:8E:0B:E0:9D:76:40:BC:C7:41:0A:31:AA:46:59:D2
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       264F7B
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa
Signing time:             Sun 16 Apr 2023 21:11:56 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     265686
IP address blocks:        181.105.233.0/24 maxlen: 24
                          181.105.234.0/23 maxlen: 24
                          181.94.252.0/22 maxlen: 24
                          190.228.177.0/24 maxlen: 24
                          181.105.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510715 (0x264f7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=9d91a7bcff6e32917a34690d2a21124b97a19354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:ae:f2:8a:d3:97:c1:02:40:b3:8c:a2:f3:
                    be:14:77:31:42:bc:f4:35:b6:80:9a:b6:44:26:7a:
                    9f:46:24:ff:48:52:bd:2a:da:e3:76:bd:59:da:d0:
                    f5:c5:0e:a4:f1:92:fb:d9:1c:07:3d:81:49:c9:ef:
                    42:c3:d6:cf:7c:9a:1c:07:0b:eb:6d:3d:04:e8:64:
                    e3:11:3d:fb:29:c8:54:f5:c4:fa:53:e2:cc:bc:3b:
                    aa:4a:8d:44:77:5e:95:c6:82:64:fb:01:48:37:52:
                    50:73:06:a4:30:20:87:bc:22:41:65:e5:eb:f1:d6:
                    87:19:e0:f8:42:09:b5:7d:a1:2e:ea:46:bb:c1:09:
                    6b:bb:38:db:5a:3a:07:5a:8c:ce:70:2c:a7:e3:5a:
                    dd:ce:83:c7:cf:4b:0c:bc:28:9f:de:5c:41:c7:31:
                    8d:7f:08:25:94:04:76:e6:62:ea:fe:33:b3:15:9b:
                    c0:51:24:b6:96:12:07:fd:df:02:80:02:7f:6c:d4:
                    33:1c:8b:e7:11:b1:13:55:9a:f7:aa:15:57:9d:1d:
                    47:a0:35:69:1c:24:4f:79:24:f5:1a:a5:bd:03:b5:
                    ea:30:4f:cf:5b:d4:8a:cd:8b:d4:02:20:79:7e:14:
                    69:dc:20:73:7a:96:91:3d:9b:9a:a7:8a:67:58:be:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:93:7A:D6:18:8E:0B:E0:9D:76:40:BC:C7:41:0A:31:AA:46:59:D2
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.252.0/22
                  181.105.221.0/24
                  181.105.233.0-181.105.235.255
                  190.228.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:25:d4:fa:93:e6:2d:1f:ff:7f:90:09:ff:e4:2d:da:3f:f6:
         3f:2f:54:36:b9:93:a9:76:53:4f:b8:e4:10:5b:e0:04:7b:17:
         e3:c6:03:26:d8:0c:46:79:f9:f8:c0:47:97:a4:54:44:25:9b:
         a4:d9:d5:3b:25:70:49:cd:1f:91:57:2c:d4:0d:61:99:9b:b6:
         b3:d0:6a:af:47:50:73:c3:31:ea:9d:23:e6:fd:b2:63:e2:7e:
         f0:97:ac:92:7f:44:2b:27:03:a5:ba:1f:99:f1:5c:c4:24:78:
         bd:a6:1d:16:7a:c3:9c:ed:e4:f1:2c:df:66:32:fc:04:5d:09:
         73:4c:df:d7:90:57:11:59:56:61:47:b7:f3:a7:1e:23:b5:45:
         20:0f:b9:a3:c8:c5:ca:0a:5d:00:27:1c:93:db:bc:2d:fe:16:
         9e:72:ed:14:a6:b4:b8:49:46:0d:be:58:7d:0a:8e:23:0c:cb:
         f0:73:67:36:38:31:b2:77:bd:4e:ff:11:0f:47:39:7b:4f:01:
         c4:3c:33:4f:16:86:84:81:b6:8c:1b:60:bc:de:56:41:13:1b:
         55:50:55:b3:00:21:a3:ca:48:f8:0d:5c:16:14:37:ab:14:9e:
         f2:e8:84:d9:c4:ef:c4:27:ea:fb:f0:dd:21:53:33:a2:8c:97:
         1a:2c:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org