Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43eb3d791ddbc4a9fac54e33df62c59be681fc67.roa
File:                     43eb3d791ddbc4a9fac54e33df62c59be681fc67.roa (raw, json)
Hash identifier:          9h6eJhPIi8L8/ylW/Wzpmrvrao6915E0Jh6JZlR+W7U=
Subject key identifier:   B8:FD:46:8D:05:6A:F8:DB:1C:3D:5C:EA:02:E0:CD:C6:C9:CB:0F:40
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26CF2F
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43eb3d791ddbc4a9fac54e33df62c59be681fc67.roa
Signing time:             Fri 27 Oct 2023 16:38:40 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543407 (0x26cf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=43eb3d791ddbc4a9fac54e33df62c59be681fc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:25:0c:97:ed:6a:59:fd:78:a0:47:de:9d:
                    34:cd:76:16:c4:64:cf:7f:ce:86:ff:29:78:02:a9:
                    82:38:c7:68:b5:5a:d0:f1:7f:fa:c9:a1:8d:cf:15:
                    bf:fd:c0:11:06:6b:e2:7d:37:af:f6:5b:c0:8a:b8:
                    fe:a1:d7:56:4c:8e:d6:3e:01:a6:a1:41:46:75:4e:
                    b1:8c:ba:95:da:ea:55:6f:5f:40:bb:13:84:b7:01:
                    03:39:3d:ac:97:00:9d:a0:b3:8a:dc:45:82:2b:ee:
                    14:db:46:98:b4:17:25:cc:a1:28:23:98:bb:05:83:
                    5a:7a:b0:24:72:e6:6c:87:4d:36:7a:25:94:3b:af:
                    ee:cc:e4:4c:6a:fe:d8:65:5e:dd:39:e3:44:60:a0:
                    75:de:29:87:6e:bb:f6:66:ed:0d:0f:33:26:82:ce:
                    59:79:95:9d:6a:6c:13:05:67:50:42:87:d1:08:83:
                    12:fc:f9:f7:0f:4e:78:7c:8c:2c:3c:95:80:89:e9:
                    4f:e6:28:ea:f9:26:38:1b:05:67:f6:ad:0e:b8:40:
                    e1:7f:d7:fe:33:10:84:8d:77:a6:c1:9f:08:21:05:
                    ec:e7:1b:81:61:97:1c:0b:77:9c:2d:5e:4b:33:93:
                    4e:85:f0:b1:32:c0:8f:3f:b1:35:04:7e:1d:64:a7:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:46:8D:05:6A:F8:DB:1C:3D:5C:EA:02:E0:CD:C6:C9:CB:0F:40
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43eb3d791ddbc4a9fac54e33df62c59be681fc67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:66:ca:be:b1:c6:66:24:8f:bd:d4:64:09:2a:e7:9d:79:
         57:a0:a8:63:7d:45:94:74:f0:40:99:80:7e:3e:c1:ca:46:f6:
         d7:16:5a:5c:b3:86:25:33:0e:55:2f:66:25:fa:71:30:18:a7:
         6b:9f:08:2f:75:de:12:09:91:c5:03:96:fd:a0:66:b8:c7:3b:
         d9:41:11:66:66:9d:8f:dd:23:85:df:6e:7c:a3:9d:29:63:42:
         18:f1:46:26:49:50:3d:f6:67:83:77:57:af:65:1a:48:07:87:
         57:a2:21:cf:22:75:b8:6e:7e:35:08:42:47:47:38:3e:01:f9:
         5d:8a:a2:b4:90:a6:99:4e:3f:47:06:6d:11:5f:93:e5:a0:e6:
         e8:f3:19:4d:42:f7:20:4d:fc:8e:58:0b:65:aa:7e:6c:75:31:
         e1:fa:36:c7:8e:c7:de:c0:68:cc:3c:24:27:38:bb:62:72:fd:
         15:85:02:2b:c1:1b:94:5f:f5:91:ad:63:f3:0b:d4:ee:b1:12:
         6b:47:e4:4f:3a:63:36:69:d0:97:ac:57:f1:12:ff:3e:57:2a:
         8c:d4:af:0d:2e:bc:ae:b1:d9:d4:c6:26:9c:65:93:0c:52:99:
         a8:a1:a9:34:23:f7:2f:f1:a7:a7:47:81:29:01:cd:cb:5a:2c:
         fb:c3:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org