Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/100dbd0d941f5faa585328fa8ebcf850c538a6b5.roa
File:                     100dbd0d941f5faa585328fa8ebcf850c538a6b5.roa (raw, json)
Hash identifier:          8kWLSDwaNnV4Lnnd0EKeFLticMpjG5mRsxT9PHSK4LQ=
Subject key identifier:   92:2F:89:6E:6E:26:26:85:BF:39:C4:0C:BE:16:B4:8E:D2:A8:38:C0
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A12B3
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/100dbd0d941f5faa585328fa8ebcf850c538a6b5.roa
Signing time:             Tue 06 Feb 2024 15:38:02 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     269805
IP address blocks:        181.188.246.0/28 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757299 (0x2a12b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=100dbd0d941f5faa585328fa8ebcf850c538a6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:4d:ac:3c:4f:0a:0e:0f:b6:82:e5:41:de:
                    e7:0b:54:ad:c4:c2:f6:55:ec:80:a0:7d:00:b4:d0:
                    a2:e3:9a:4b:ef:6a:13:fc:76:28:2d:5f:06:6a:2e:
                    c9:ad:28:f4:d0:85:47:fd:8e:86:01:9a:29:32:26:
                    1c:59:5f:9d:88:2b:e9:4a:56:fe:df:08:d0:04:81:
                    b6:ec:61:5b:33:e2:57:f3:16:9c:8e:89:ac:03:8e:
                    c2:ac:dd:65:0a:0d:4a:26:63:92:c8:f5:85:8b:77:
                    3e:b6:a5:75:0b:02:ed:58:81:64:7c:9c:51:10:28:
                    22:1b:df:9e:7f:3e:63:cb:38:26:db:ea:4e:68:c7:
                    1a:ce:42:bc:7a:c6:13:fb:e2:1e:76:07:7c:ca:ec:
                    9e:44:ae:f6:7b:c9:ca:25:4c:85:97:ce:f9:52:ff:
                    2c:c1:3f:fa:93:b1:db:e3:8a:d9:0c:37:8c:65:6a:
                    47:dd:e3:5c:71:65:82:b3:78:09:6c:61:4a:d2:cf:
                    88:97:f6:e4:61:18:7c:16:c8:f5:db:d3:12:db:d6:
                    43:25:e3:5d:98:61:f6:9e:70:29:e2:1e:a8:b2:a7:
                    8a:cf:1f:58:a4:a2:8a:7e:cd:1c:59:dc:36:fe:da:
                    1c:70:db:40:a2:35:28:f1:41:fc:96:f3:6c:f9:fc:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2F:89:6E:6E:26:26:85:BF:39:C4:0C:BE:16:B4:8E:D2:A8:38:C0
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/100dbd0d941f5faa585328fa8ebcf850c538a6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.246.0/28

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:bd:ee:4b:bf:c9:82:6f:10:dd:40:f4:85:4f:07:6d:97:
         d7:d8:2d:82:7e:e9:0f:6e:e8:69:8b:17:f6:9f:cb:3a:b7:04:
         ad:1d:63:f2:7f:40:f1:a8:26:57:80:3b:4b:1e:27:f9:d9:a1:
         64:e7:70:c1:90:ac:e5:e4:bb:e7:e1:c0:cc:2e:80:f4:5e:c2:
         93:91:5e:a6:90:1e:4e:37:0d:c6:70:e1:30:02:81:da:35:07:
         e8:ca:7b:b3:86:b2:47:09:b4:c8:88:a0:19:71:e8:a8:69:eb:
         68:ea:5e:60:2e:0f:42:c5:53:73:1b:e8:72:fd:7f:1d:86:91:
         02:56:14:2e:71:e1:a5:56:37:bc:c4:bd:d2:18:96:1f:96:d7:
         a6:60:af:cf:81:8f:5c:0b:02:3c:1d:dd:63:dd:fb:4d:54:e3:
         21:70:80:97:5e:67:10:88:7e:89:1b:72:5a:ad:c4:c9:bf:71:
         b0:b6:44:ff:ad:52:5a:c8:7d:6e:09:b1:29:af:e2:04:04:0f:
         30:63:68:b3:be:50:5c:08:b5:bd:bb:6e:8f:e4:1d:15:e7:d6:
         62:5e:26:83:29:10:88:10:1d:01:25:fa:d4:2a:68:6f:77:bf:
         d4:7f:85:22:7e:76:07:8d:dd:07:76:12:aa:26:dd:f0:c5:29:
         6b:d9:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org