Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/299de584ed779e09a7fdf8945ac5b663cf07540c.roa
File:                     299de584ed779e09a7fdf8945ac5b663cf07540c.roa (raw, json)
Hash identifier:          nFaI4ZzYvjxVZ6q70JmUhYH5EavPOdCKyEY8Q6baH4A=
Subject key identifier:   91:FA:45:E8:4B:C6:D1:CE:14:B0:3C:FF:FC:48:E0:B3:5D:AA:C5:35
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       24F48D
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/299de584ed779e09a7fdf8945ac5b663cf07540c.roa
Signing time:             Thu 07 Sep 2023 17:29:59 +0000
ROA not before:           Wed 06 Sep 2023 17:29:59 +0000
ROA not after:            Sun 07 Sep 2025 17:29:59 +0000
asID:                     271936
IP address blocks:        181.188.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421901 (0x24f48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep  6 17:29:59 2023 GMT
            Not After : Sep  7 17:29:59 2025 GMT
        Subject: CN=299de584ed779e09a7fdf8945ac5b663cf07540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:3c:57:6f:a9:8a:0a:7e:79:78:53:c1:6e:
                    47:6e:c2:6a:a8:2f:4d:12:c8:71:42:64:59:e5:15:
                    d5:72:8a:7c:6f:a8:9b:98:80:8b:57:19:7d:4f:b2:
                    3a:35:d7:13:c2:eb:d4:52:f8:47:8b:e0:06:b2:92:
                    47:e7:aa:a5:d8:69:d7:30:1c:ea:0d:5e:c1:39:1f:
                    87:e3:73:29:aa:a1:37:a2:ec:ea:34:cb:e5:27:d0:
                    f6:cb:37:41:bc:16:c1:61:57:61:aa:bc:5f:92:16:
                    76:ed:6a:ec:a7:e6:d8:9a:9c:df:f1:e5:ff:88:3d:
                    a5:2d:ad:8e:91:44:b3:63:0a:3a:70:f6:f3:75:a0:
                    10:06:1b:4f:62:1d:84:d3:47:ea:48:c2:b0:07:c9:
                    d0:a3:f0:78:c9:04:ca:14:ac:99:b4:96:14:c7:c8:
                    23:7d:7b:da:8a:5e:11:f1:2d:86:eb:da:66:04:4b:
                    fd:7d:91:29:cc:18:38:0b:24:05:3a:39:16:af:8c:
                    46:d2:7a:f4:a4:16:b1:c4:ae:bc:be:50:31:a5:0d:
                    05:30:48:af:ee:a3:0b:2e:0c:84:f4:f4:0c:41:21:
                    87:3f:1a:a4:78:0b:1e:4e:1e:d5:0c:e8:78:be:a5:
                    52:5b:f7:fc:40:b7:1a:69:b5:0d:a5:b3:a1:47:47:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FA:45:E8:4B:C6:D1:CE:14:B0:3C:FF:FC:48:E0:B3:5D:AA:C5:35
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/299de584ed779e09a7fdf8945ac5b663cf07540c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:0d:41:c6:4a:18:eb:d1:64:1f:05:01:eb:e5:22:06:4b:
         ea:92:70:da:f9:30:42:69:f7:ee:97:5e:4c:c9:e3:7e:f7:2f:
         4b:0f:92:6b:3d:1b:6e:51:c4:58:7b:9e:9e:9c:ed:56:e5:45:
         79:d3:e8:51:4f:19:61:c0:9c:f3:f2:8c:dd:73:7d:67:8c:08:
         03:ec:88:8c:7a:78:72:05:1f:a7:4f:c6:a4:ed:77:4d:55:de:
         f0:d4:fb:c7:b3:34:fd:2e:b0:10:d5:f9:fe:f8:84:5c:03:47:
         18:64:43:1a:f5:b0:93:e9:55:e2:fc:a9:90:96:52:84:3b:1c:
         62:f0:02:da:61:ed:9d:d2:be:79:72:c1:12:61:5a:1d:e5:7f:
         4d:3a:4f:5e:e7:1b:b7:55:75:c3:11:af:89:19:3a:03:f4:9e:
         44:55:38:e9:0a:37:ce:f5:e2:d6:e4:85:1b:cc:be:ae:91:ac:
         1d:da:f5:22:ba:be:bf:b7:13:87:d2:f0:99:ab:14:c1:70:fb:
         04:2f:8b:96:9a:6e:92:cc:42:ef:ce:55:ae:f8:7b:ed:9c:0f:
         e7:01:85:38:6d:0c:6a:5b:95:8b:68:d2:d8:06:12:8f:6e:51:
         2f:39:9e:c8:d2:7e:f7:25:ed:7d:e5:6c:85:4d:7c:37:43:1e:
         db:d1:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org