Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f8bbc71d1bc4efadd3d82f1c298a09c53cad5ad.roa
File:                     9f8bbc71d1bc4efadd3d82f1c298a09c53cad5ad.roa (raw, json)
Hash identifier:          EI9cheA0cmA/iCjMhvLQLQd+YW/QO/sS/zWk2yThGkI=
Subject key identifier:   A8:B5:82:43:37:87:B2:35:41:9A:0D:FB:EC:DD:FC:91:9E:31:91:10
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       26626C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f8bbc71d1bc4efadd3d82f1c298a09c53cad5ad.roa
Signing time:             Sun 16 Apr 2023 21:12:26 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     264753
IP address blocks:        181.10.187.0/24 maxlen: 24
                          181.10.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515564 (0x26626c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=9f8bbc71d1bc4efadd3d82f1c298a09c53cad5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:17:f6:2b:f9:c7:cc:e4:d9:66:4c:29:a0:
                    f6:f6:c7:7d:86:4c:68:2d:71:3b:28:e5:70:7f:83:
                    c1:2c:6b:3c:44:dc:7f:57:6f:00:09:37:93:21:c8:
                    d4:10:18:c5:52:dd:65:c0:83:14:d8:77:8b:2a:4c:
                    57:70:2e:02:cc:9f:ad:dd:a9:ce:00:7e:1a:55:ab:
                    34:4e:da:6e:ff:73:fe:91:b9:1e:ac:ec:9d:cd:de:
                    6f:c7:cf:0f:7a:0a:ae:3a:d8:89:25:35:21:54:74:
                    13:b4:c4:c5:91:96:19:72:eb:14:3f:b5:10:52:a3:
                    06:5c:b6:5e:57:e7:25:5c:f1:a9:6a:0d:75:1d:74:
                    5a:1c:24:d7:5e:08:6f:c2:0e:26:46:ec:fd:44:50:
                    69:ac:8d:6a:08:45:65:61:98:68:72:31:cf:00:5b:
                    41:7a:d8:8b:35:df:04:81:a8:2c:b5:56:8f:78:bc:
                    82:d4:67:b2:55:39:5b:05:ef:fc:5f:65:04:44:45:
                    b3:3e:39:e6:df:e2:09:e8:84:9c:c6:b5:e7:e4:6d:
                    60:d8:d8:24:d0:a7:31:43:d3:e1:2a:01:d8:b0:36:
                    d6:f6:c4:be:e3:41:af:a8:eb:48:07:2d:30:91:aa:
                    fd:38:f6:a3:01:8f:b7:48:a1:8c:28:ee:8c:54:9a:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B5:82:43:37:87:B2:35:41:9A:0D:FB:EC:DD:FC:91:9E:31:91:10
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9f8bbc71d1bc4efadd3d82f1c298a09c53cad5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.187.0-181.10.188.255

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:95:76:7d:a0:fd:c3:a6:7c:72:c2:72:f6:04:19:4f:67:
         8a:52:24:98:a5:78:56:c7:fa:c9:ef:2a:21:7d:e4:e6:45:c2:
         40:a9:f6:46:2f:e2:ee:47:39:2c:87:e8:7d:7a:1b:e9:c8:03:
         74:68:78:27:fd:8f:a9:a0:00:b4:41:8b:a2:38:e9:76:c6:06:
         ed:df:b9:79:b4:61:de:89:f6:44:8a:b4:a5:fe:3e:b4:6b:0c:
         c8:77:7a:8d:f8:36:04:d5:fa:2f:c6:63:57:99:fa:da:82:27:
         33:f7:ff:9a:3e:c0:05:13:99:dd:f0:7a:cc:f1:91:40:a8:1b:
         4d:d1:86:b3:c5:9b:de:15:8c:cc:e0:a5:d9:c8:d9:55:ec:e8:
         51:9d:6d:9d:9a:91:46:78:6c:45:6f:39:cd:e1:e4:4a:91:33:
         eb:e5:ab:00:15:f2:32:ac:4a:6d:ee:9b:21:9c:ae:ef:7c:0a:
         b3:24:c2:6f:37:93:79:2b:b2:73:41:16:ff:7e:06:f3:91:14:
         61:12:99:fd:db:c2:77:72:6a:ca:f9:e1:5a:dc:e8:6f:db:31:
         72:66:2e:f3:b0:fc:c6:af:97:c5:9b:ca:cf:13:54:b3:b1:9f:
         44:a5:21:dc:5a:45:dc:05:de:d2:9c:22:5b:fd:57:8d:a0:99:
         8e:c8:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org