Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa
File:                     ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa (raw, json)
Hash identifier:          ZPwpLG9nyUIy+tjxA06241y1fj/nmZjYVvoL/tcCt5o=
Subject key identifier:   86:F3:7F:26:37:F9:6B:DD:97:ED:22:26:33:78:C0:6F:EC:D3:AE:E8
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E258A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa
Signing time:             Thu 07 Dec 2023 13:00:51 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     265686
IP address blocks:        181.105.233.0/24 maxlen: 24
                          181.94.252.0/22 maxlen: 24
                          181.105.234.0/23 maxlen: 24
                          190.228.177.0/24 maxlen: 24
                          200.43.0.0/22 maxlen: 22
                          181.105.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3024266 (0x2e258a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:1a:2f:61:08:e9:41:e6:b6:87:8c:67:1a:
                    d9:60:89:61:7b:62:32:82:d1:fc:55:db:48:6c:a2:
                    c5:75:e3:85:46:88:bd:60:4f:b6:f3:26:b7:5c:71:
                    f9:5b:66:c6:5c:c1:80:85:1d:83:27:0b:21:d5:97:
                    4a:90:fb:53:ce:37:98:86:da:bb:f0:1f:8c:49:a5:
                    ae:7c:99:34:e3:a1:e9:34:f6:95:94:a8:d1:52:ae:
                    52:60:c7:b3:49:13:1e:19:a1:4c:0e:0a:a4:aa:48:
                    ca:fe:37:1a:e2:b0:1c:2d:0d:b5:4c:97:07:9e:ec:
                    b2:fb:9d:84:54:d3:cc:95:fe:aa:57:2a:aa:4c:21:
                    e7:83:ac:cd:bf:57:e8:16:20:86:28:bc:ba:0e:4c:
                    5d:83:5f:14:81:dd:dc:5a:e2:29:ab:77:07:cc:8b:
                    f6:6c:f2:9e:01:7d:ce:78:4c:c1:82:be:98:cb:63:
                    01:83:82:3e:a0:92:9f:e7:ff:88:25:5f:d1:5d:db:
                    7c:c4:93:d9:00:49:46:4f:fa:d7:42:87:73:4f:b4:
                    74:d4:47:5a:66:cf:19:da:76:41:e2:52:d3:48:42:
                    e5:60:ae:a9:bd:26:05:29:44:a2:15:c6:a5:1d:64:
                    9f:c7:89:17:80:48:11:7a:9d:23:8b:fc:6c:2d:5b:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:7F:26:37:F9:6B:DD:97:ED:22:26:33:78:C0:6F:EC:D3:AE:E8
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ddb9f0605ab9992e2c28ba5f7f7f93d2c9731e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.252.0/22
                  181.105.221.0/24
                  181.105.233.0-181.105.235.255
                  190.228.177.0/24
                  200.43.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:31:04:82:6e:a1:02:b3:5e:36:0f:20:4b:61:c0:38:f2:03:
         00:f2:88:90:a3:e0:3d:39:eb:93:6e:a7:a4:c0:ef:19:0f:f6:
         0c:33:2a:17:1e:37:bd:1b:52:e3:bf:d3:d0:3f:ae:f7:4f:e1:
         a5:01:25:e9:f1:86:23:99:3f:1b:16:60:85:de:b9:f9:40:48:
         d6:95:2c:47:b9:c9:8a:be:1d:7d:b2:5a:e0:40:b4:5e:9f:ae:
         36:a9:5e:3a:27:ea:c8:b9:72:d8:7c:fa:2f:34:4b:e2:b1:18:
         05:0f:f6:4e:14:c9:12:2f:7d:58:9d:07:e5:c8:86:f8:18:23:
         c3:9d:bb:e5:cc:d9:52:90:01:5c:d7:7b:69:80:06:23:03:10:
         88:87:b6:4a:4b:d0:43:a0:c9:4f:7a:a0:19:da:e2:f0:af:3d:
         ef:64:1e:fa:b6:ad:cb:83:07:b4:19:54:e6:37:e8:7d:de:46:
         8a:22:9d:0d:f1:1e:2d:09:7d:76:0a:1e:aa:75:7e:64:40:2d:
         d1:ec:54:b6:7e:55:22:b4:92:7a:0b:d0:a2:f8:9f:4d:fc:0d:
         62:cb:46:8b:ca:87:13:69:c6:9f:c3:6f:cc:48:b9:4a:b9:6b:
         0a:51:fb:31:cf:da:64:fe:97:5d:95:79:a2:ba:84:bb:b1:10:
         ab:41:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org