Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07068863de4008481f3cddd87116fb21116c6440.roa
File:                     07068863de4008481f3cddd87116fb21116c6440.roa (raw, json)
Hash identifier:          tIYo1/ALgMvEBPmasuuutS9V3GDmTYt9gLpwWDDn8ac=
Subject key identifier:   3E:AE:64:50:6B:81:6F:F0:AA:15:F0:E8:9B:21:B1:1A:4E:36:89:07
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       2796C2
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07068863de4008481f3cddd87116fb21116c6440.roa
Signing time:             Mon 20 Nov 2023 17:02:14 +0000
ROA not before:           Mon 20 Nov 2023 17:02:13 +0000
ROA not after:            Thu 20 Nov 2025 17:02:13 +0000
asID:                     7315
IP address blocks:        181.188.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594498 (0x2796c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Nov 20 17:02:13 2023 GMT
            Not After : Nov 20 17:02:13 2025 GMT
        Subject: CN=07068863de4008481f3cddd87116fb21116c6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:4a:0f:41:8a:3b:2e:96:69:df:2a:c9:47:
                    c2:16:19:8c:2a:7c:d1:be:9f:99:90:91:7b:6b:b1:
                    bd:6b:e8:70:7e:42:4d:d1:f9:1f:81:40:52:d1:60:
                    8d:46:f5:0e:76:7f:59:62:f8:89:df:96:fe:b5:ad:
                    b9:56:e0:69:ca:ae:39:c4:ba:90:06:f3:b7:6a:0b:
                    35:4a:3c:10:5b:c2:90:c4:3c:6a:2a:ce:a9:85:ea:
                    a7:ce:71:97:17:52:83:3b:b9:21:7b:62:a4:44:46:
                    1d:73:84:d4:44:a7:5e:68:64:45:5b:4c:29:0c:3d:
                    35:0f:f2:a8:de:e5:93:fb:7d:dd:1c:ba:d7:0b:6f:
                    de:50:98:64:db:6b:4e:f0:74:cb:0f:67:b4:c1:ff:
                    ee:97:a9:47:fa:b7:72:98:3d:c8:63:fe:8d:cc:2b:
                    d8:0a:2d:31:7c:15:d2:2f:68:3c:75:8a:9d:c1:3c:
                    17:53:6e:bd:30:19:62:86:08:62:97:33:f2:6b:76:
                    9b:3d:82:9f:70:11:21:08:fd:91:96:02:79:b5:50:
                    49:7b:dd:bf:1b:78:a2:59:bf:ec:bd:28:d8:9b:cb:
                    49:fd:c5:b3:05:a2:42:5c:61:af:fc:54:5b:d7:73:
                    23:6a:d4:41:bc:dd:63:fa:d6:9f:02:a2:6f:f5:cb:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:64:50:6B:81:6F:F0:AA:15:F0:E8:9B:21:B1:1A:4E:36:89:07
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/07068863de4008481f3cddd87116fb21116c6440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:9e:76:c8:1b:16:50:00:64:b1:ec:fe:a2:34:5d:e5:ca:
         c5:f3:fc:7c:6d:83:b8:b4:dc:2c:b5:43:c6:4c:66:54:97:d0:
         56:1c:e6:b0:0b:af:ce:f0:c2:46:7a:49:2d:96:5e:8b:78:fe:
         4d:f0:d9:3d:25:3f:62:59:5b:0a:4b:a9:e9:31:e9:d9:9a:e1:
         1e:53:22:bb:9a:aa:74:82:db:a2:7c:e4:ba:83:0e:4a:41:3e:
         e3:8f:44:9a:a4:fe:84:9c:ba:ea:24:76:5d:3f:2c:19:0c:c6:
         47:db:0d:bd:88:11:a9:fd:3f:07:7d:d2:6b:c2:72:ca:46:32:
         e8:7c:19:e1:c8:6e:5c:f8:6f:76:e4:be:33:77:e7:66:f3:e1:
         c8:1d:59:dc:01:3a:44:61:74:41:9c:3c:c3:23:30:a5:62:29:
         76:3b:34:fc:a3:7b:26:a9:55:b3:a2:0a:91:b4:33:be:36:b8:
         7f:86:21:8d:60:33:fb:98:b8:92:a0:97:54:47:3b:55:a4:e5:
         e8:08:01:90:e5:3e:e0:1e:9e:4b:a7:c8:7d:c3:da:da:67:48:
         e5:1a:38:2c:5d:23:b1:df:4f:f5:4d:63:3c:3c:1b:82:14:b7:
         b2:7c:5f:d9:80:e0:93:2f:70:5d:63:1e:26:33:04:d5:3b:45:
         1f:3f:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org