Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2b13154ccee999e06cd580be18a30baaa3791d63.roa
File:                     2b13154ccee999e06cd580be18a30baaa3791d63.roa (raw, json)
Hash identifier:          MuUqSmy6/9m6u4BR/GXUVRiMOhjBml2LgsPg97T+mB4=
Subject key identifier:   BF:84:DC:EC:2E:31:69:F4:5C:9F:98:E4:1E:89:10:38:C7:19:51:BE
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1BCBC0
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2b13154ccee999e06cd580be18a30baaa3791d63.roa
Signing time:             Wed 28 Sep 2022 02:16:38 +0000
ROA not before:           Wed 28 Sep 2022 02:15:28 +0000
ROA not after:            Sat 28 Sep 2024 02:15:28 +0000
asID:                     19114
IP address blocks:        181.188.192.0/18 maxlen: 18
                          181.188.192.0/20 maxlen: 20
                          181.188.192.0/24 maxlen: 24
                          181.188.200.0/24 maxlen: 24
                          181.188.201.0/24 maxlen: 24
                          181.188.224.0/24 maxlen: 24
                          181.188.232.0/24 maxlen: 24
                          181.188.240.0/24 maxlen: 24
                          181.188.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821632 (0x1bcbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep 28 02:15:28 2022 GMT
            Not After : Sep 28 02:15:28 2024 GMT
        Subject: CN=2b13154ccee999e06cd580be18a30baaa3791d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:23:a4:5e:2e:80:c4:dc:ab:6e:2c:8d:b3:
                    36:ea:2d:66:dc:99:c0:3f:ac:ce:e2:9f:2c:52:f8:
                    7b:27:67:01:95:82:e2:84:65:6e:b9:a0:af:54:be:
                    d5:38:25:fa:b1:24:8c:21:44:07:52:8a:d8:67:d1:
                    be:5c:8c:72:5d:98:e9:ce:3a:cf:38:c9:0f:75:1e:
                    fd:01:af:d3:24:19:05:55:c9:fd:8b:d1:d6:3c:6d:
                    25:95:21:2d:93:14:64:8d:4f:2f:b5:bf:ee:40:82:
                    ea:a6:71:f3:20:71:62:53:ce:c5:84:ae:e4:cd:27:
                    fb:94:85:2a:b2:cd:ff:d5:4d:4b:d3:2c:36:bf:bb:
                    fc:cc:24:0a:8b:3e:50:13:ee:2e:a4:81:37:9d:02:
                    f0:ab:a7:53:a2:a1:ff:1d:d5:35:78:ab:d9:49:a3:
                    a6:4f:cd:2d:7c:29:21:f5:ee:6b:93:2e:37:32:95:
                    de:8f:f5:8e:f9:77:43:79:76:f1:20:99:f9:c1:23:
                    3a:d0:26:ef:cf:f8:de:f3:33:42:2d:4a:b8:3b:a6:
                    72:ea:e8:70:7e:fe:b4:19:00:b1:af:c1:5d:07:a1:
                    ab:f0:19:e8:14:75:cd:ae:23:59:42:60:63:12:85:
                    01:03:27:c2:6f:a8:4e:3e:99:25:e7:84:92:65:26:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:DC:EC:2E:31:69:F4:5C:9F:98:E4:1E:89:10:38:C7:19:51:BE
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2b13154ccee999e06cd580be18a30baaa3791d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:48:57:df:4b:47:9d:32:fb:fa:a5:fc:e2:8a:aa:23:b1:da:
         d2:21:c9:b1:38:2c:05:5f:15:2b:72:1f:28:df:13:43:47:a1:
         26:a1:12:e2:d5:6e:92:8d:24:80:b0:0d:5d:33:77:8b:aa:b1:
         47:82:ca:61:1d:56:a4:83:21:63:b8:c0:a9:2f:ec:f2:d5:e9:
         b1:45:1c:a3:e4:84:10:ce:18:10:7f:6a:e8:09:12:5e:54:6b:
         ae:80:f2:87:2e:3c:ae:f0:a9:a5:37:32:5f:97:2b:e3:73:7c:
         e5:35:b6:08:ed:d9:35:21:fe:8b:66:ea:79:62:39:c3:e6:dd:
         4a:cb:47:92:1c:b4:32:ef:9d:4b:08:be:dc:84:79:d7:1c:a7:
         61:57:33:05:36:45:45:ec:08:1b:2e:da:da:d6:5d:13:f6:29:
         69:89:df:d0:57:2b:e9:a5:f4:c6:30:1d:cf:1c:2c:23:d9:e4:
         59:5b:92:5c:5c:2c:2d:8e:e3:a2:02:b5:43:6d:b1:77:fe:c2:
         ad:af:df:31:ea:84:61:27:95:67:8f:a3:4f:7f:50:41:bf:4e:
         b1:76:2b:43:ff:a7:cb:7b:e3:0e:ce:e0:42:de:12:43:a3:17:
         6b:5e:1b:b2:fe:31:ea:7f:ca:a8:4e:24:d9:46:10:9c:6f:f4:
         87:11:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org