Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a1307ed943a99d342aa2e06d5984f7b4525e4140.roa
File:                     a1307ed943a99d342aa2e06d5984f7b4525e4140.roa (raw, json)
Hash identifier:          ixAMscaGP080oiLSVQNE6wyRpkkg4s5FnVokqw49xDw=
Subject key identifier:   B7:72:30:27:71:B6:23:F0:3D:F5:B9:31:6F:83:C5:A6:8D:7D:93:F3
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2EA76E
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a1307ed943a99d342aa2e06d5984f7b4525e4140.roa
Signing time:             Thu 07 Dec 2023 13:02:12 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     264753
IP address blocks:        181.10.187.0/24 maxlen: 24
                          181.10.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057518 (0x2ea76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=a1307ed943a99d342aa2e06d5984f7b4525e4140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:bb:25:e4:81:d7:86:bd:fa:a3:4d:7e:bc:
                    0f:31:ec:66:da:91:90:8d:0e:9e:23:f6:3f:a0:56:
                    21:74:97:f0:df:51:c5:88:48:79:f3:58:3a:c6:51:
                    69:a3:7d:ed:75:d5:8a:d6:f1:bf:c0:e4:72:a4:06:
                    45:b0:60:65:06:f7:4d:99:ac:2d:bc:1d:fc:54:6c:
                    04:80:21:0b:e0:81:b6:7b:5d:e3:5b:34:ee:9e:4c:
                    98:b8:ec:f1:0b:58:47:86:88:2d:9e:13:73:62:de:
                    7e:ff:2b:d6:62:98:4a:cf:03:4c:d9:4b:3a:f6:81:
                    c5:d2:90:af:12:b4:4b:c5:f6:6e:92:f9:dc:58:ff:
                    43:dc:ba:b1:c1:9b:0a:23:b9:9a:0f:fe:ac:7f:ac:
                    d0:6b:79:be:2a:de:33:bf:e5:8c:d9:1c:9f:66:74:
                    89:46:c3:41:06:80:20:e0:1f:f1:5d:53:6f:4e:74:
                    37:05:b1:e0:7b:1b:89:0d:da:37:3e:b4:7f:68:80:
                    dd:1f:6f:62:6e:03:b0:a3:0a:6e:95:17:0e:20:c6:
                    06:75:c6:69:42:cd:86:dd:4f:2e:14:29:1c:05:a6:
                    bd:d8:fb:ed:ac:7d:30:86:dd:5f:02:c2:8b:c9:50:
                    05:72:e6:5d:38:73:a6:12:52:ce:4c:fb:63:1f:34:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:72:30:27:71:B6:23:F0:3D:F5:B9:31:6F:83:C5:A6:8D:7D:93:F3
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a1307ed943a99d342aa2e06d5984f7b4525e4140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.187.0-181.10.188.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:58:bd:ef:9c:6c:0e:e7:93:d0:5a:67:d4:c0:a0:ed:80:
         c3:9f:77:55:e9:d0:8c:d3:77:bc:a9:80:08:c7:c5:96:c9:7c:
         65:0c:9b:86:a9:30:c2:3f:b3:c0:2d:95:6d:9e:88:e0:02:4d:
         e0:d6:e9:fd:8b:a1:98:7d:23:05:b3:d4:cb:14:b0:5a:0b:b8:
         d1:d1:ac:36:be:5d:de:50:8e:bf:08:4d:b5:48:2f:c0:87:51:
         a1:8d:ab:08:f5:7b:ab:2e:9e:6a:70:ef:8a:b7:d9:3d:0b:32:
         47:9a:45:98:cc:99:35:92:74:68:ad:f3:6d:10:e2:fd:57:df:
         83:1c:0e:74:13:c2:8e:2c:4a:d8:f6:1c:7e:13:97:f4:94:3f:
         fd:d3:ac:bf:d4:7c:94:0f:3d:c0:7d:86:7e:6e:51:9b:84:6f:
         b5:40:de:ff:cd:e4:ab:c7:d6:9f:a4:2f:bd:31:57:ca:25:c0:
         d3:ac:63:79:d0:94:55:3d:48:07:9b:e5:08:98:2f:b0:c9:d8:
         0e:9c:b7:79:9c:e7:e5:34:13:c4:2b:21:24:7c:4d:c4:eb:46:
         89:56:45:bb:72:e3:d1:6e:ba:50:9d:c3:27:92:be:1c:1e:e6:
         1f:c2:dc:c0:68:08:44:53:13:9b:d5:24:57:23:04:4c:5e:46:
         ce:22:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org