Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/198e64fb38ffe9ad2e31aab1f0803aeed7b55899.roa
File:                     198e64fb38ffe9ad2e31aab1f0803aeed7b55899.roa (raw, json)
Hash identifier:          OQb6QKXe/ehvltLYHGSrAsyuzky4KwUXLJeJqL2Viz0=
Subject key identifier:   3E:C4:B1:24:D9:64:61:40:A9:CA:8B:58:AA:25:BF:FC:FA:3F:15:8A
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26BF5B
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/198e64fb38ffe9ad2e31aab1f0803aeed7b55899.roa
Signing time:             Fri 27 Oct 2023 16:38:29 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539355 (0x26bf5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=198e64fb38ffe9ad2e31aab1f0803aeed7b55899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:d9:d8:08:b5:97:24:e1:9f:54:83:5b:9f:
                    85:80:08:5f:09:b5:1e:e4:d8:a3:b0:68:c2:e7:99:
                    ba:01:26:81:9a:67:67:51:7f:88:72:4d:f0:82:e0:
                    39:65:46:4d:11:2b:68:63:fe:a4:b2:f4:ec:50:47:
                    45:43:08:f4:58:34:96:9d:71:58:b9:5e:d0:68:a0:
                    ce:4e:64:35:72:b4:c1:8e:81:35:3a:0f:7d:99:f6:
                    8f:e3:75:0c:b8:92:17:1c:f6:fa:0e:eb:26:66:2e:
                    0a:c6:dc:fd:8f:ec:ee:3b:5e:64:5f:8a:9f:c6:56:
                    4d:c9:b7:cc:6c:0c:f5:f7:88:cc:4d:2b:3c:3c:39:
                    3c:64:74:74:3d:93:91:86:d1:a1:e8:81:aa:82:e9:
                    98:18:77:f3:bb:f0:23:87:26:41:57:c0:ae:79:ec:
                    9d:11:c2:a3:4e:85:c0:6d:13:61:17:30:db:71:09:
                    8b:77:f1:3f:ad:81:76:e7:32:f6:86:63:dc:a1:d6:
                    7a:d7:b4:b9:87:2a:06:65:07:db:15:6d:b5:74:13:
                    ed:f8:db:f1:73:66:fc:5b:4d:dc:17:1c:f4:95:17:
                    1e:06:d1:53:f8:73:57:17:2d:a0:1b:96:06:f1:79:
                    fd:27:ae:62:f8:db:0e:0f:ce:74:96:aa:b3:85:58:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:B1:24:D9:64:61:40:A9:CA:8B:58:AA:25:BF:FC:FA:3F:15:8A
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/198e64fb38ffe9ad2e31aab1f0803aeed7b55899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:7b:76:80:87:44:cc:d2:6d:d4:6b:d1:13:97:f6:30:d0:
         cb:d6:35:79:94:92:0c:09:8c:35:c9:0d:64:3b:79:f7:b9:ac:
         c6:da:6d:b7:ac:c0:48:9b:69:68:3f:77:78:0c:bc:70:f8:ca:
         ec:ba:c6:23:13:ca:6b:c6:2e:84:d4:59:b3:fd:54:ce:ab:42:
         6a:e7:0e:6f:8c:35:d1:8c:2e:0e:1d:bd:36:35:24:43:0a:cd:
         35:8d:fe:98:f0:31:47:60:ad:f2:95:7f:a1:cc:8f:d7:63:19:
         3d:eb:1a:a4:52:4f:b2:e7:49:16:af:67:76:a0:f6:ed:ae:0a:
         2f:fa:c5:6e:d9:a2:b0:d0:f9:3f:37:c0:44:9a:63:bb:11:b9:
         a3:40:5f:87:1c:84:d4:29:9f:a3:b0:80:87:38:8e:06:0a:3e:
         ef:17:4a:09:5f:39:24:fc:4d:8f:ef:ee:19:6b:22:f4:8c:17:
         72:33:58:b6:8f:27:18:20:fc:d3:9d:9b:d0:b1:41:fb:bf:5a:
         4c:5e:83:c3:81:87:ca:81:4a:1d:a0:c2:23:13:11:70:f4:e8:
         fc:03:ef:f7:8e:bc:31:c9:fe:bf:95:c5:c9:58:98:c0:82:a3:
         27:bc:5d:a6:58:17:a0:4e:83:15:23:00:a0:7b:17:b3:b0:e5:
         5a:e6:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org