Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/51febbfa7078b609c6683004d232b0887483a2c1.roa
File:                     51febbfa7078b609c6683004d232b0887483a2c1.roa (raw, json)
Hash identifier:          nhqmc/jGHB1C7U6vAzXlbDcWVSWV1xcIRriZe0+Yj/4=
Subject key identifier:   1B:B8:26:8F:E4:6F:9A:E0:B3:7A:84:A7:54:FC:86:58:B3:9B:EE:29
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       24FEDB
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/51febbfa7078b609c6683004d232b0887483a2c1.roa
Signing time:             Thu 07 Sep 2023 18:19:22 +0000
ROA not before:           Wed 06 Sep 2023 18:19:22 +0000
ROA not after:            Sun 07 Sep 2025 18:19:22 +0000
asID:                     19114
IP address blocks:        181.188.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424539 (0x24fedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep  6 18:19:22 2023 GMT
            Not After : Sep  7 18:19:22 2025 GMT
        Subject: CN=51febbfa7078b609c6683004d232b0887483a2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:89:53:ae:61:00:9b:8f:ab:56:15:8d:37:
                    f4:2f:a9:ce:b0:e7:c7:c7:18:d9:e0:f2:99:d8:b5:
                    6b:f6:ff:2e:e1:fd:b0:04:87:02:fd:33:12:61:14:
                    d8:65:ba:93:38:4f:f2:83:f4:c9:5e:81:a7:29:a8:
                    88:58:9d:19:ba:75:a4:d8:34:13:ec:98:43:f8:51:
                    8f:9c:dc:85:e1:1d:3b:5a:3f:82:0f:84:f9:d0:a9:
                    71:5b:56:1e:b8:a6:86:42:ef:d5:ed:a8:77:1b:fb:
                    a3:8d:21:a1:ba:17:ef:0f:e6:eb:c7:e6:b0:1f:3a:
                    80:db:3f:33:c3:4a:e1:27:94:07:f1:31:3f:61:f0:
                    f3:e0:ff:35:29:1f:b0:0f:c2:59:9c:30:ac:fc:69:
                    82:4e:bb:eb:69:15:84:f4:6c:01:18:92:12:ae:86:
                    82:bc:41:51:52:8b:39:ba:2d:ad:c6:f9:ac:d3:27:
                    f1:79:11:42:a4:e0:57:8b:08:81:e4:c5:e5:fc:d0:
                    9f:c2:c2:4e:4e:fa:1b:5b:d1:e6:24:60:79:df:2e:
                    df:7e:cd:73:5e:df:05:67:2a:dd:d7:01:c8:16:a0:
                    e1:1d:f5:bf:20:3e:ea:72:c8:2b:79:07:e9:1f:70:
                    11:fa:e2:b4:b2:43:e3:55:4e:5f:2c:d1:b6:46:c3:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:26:8F:E4:6F:9A:E0:B3:7A:84:A7:54:FC:86:58:B3:9B:EE:29
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/51febbfa7078b609c6683004d232b0887483a2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:e3:d5:1e:4c:a7:bf:52:92:b9:50:cd:cb:7c:8a:68:78:
         58:a3:a7:c8:4f:c1:e3:90:59:3a:8d:39:40:7d:ea:ff:e0:ac:
         cc:70:48:60:ae:28:3b:82:19:25:d1:f0:63:e9:63:11:7c:90:
         1f:b8:fc:01:1b:8e:4d:c1:b4:7f:49:c7:3b:a8:6f:76:71:16:
         7f:ed:b8:39:e8:f4:3a:07:b3:23:80:26:92:96:a2:a6:06:12:
         06:81:96:89:37:88:14:26:ae:fb:ce:d5:94:b9:00:4b:2c:29:
         56:36:0e:40:cb:e1:93:bf:67:a7:67:18:82:07:a4:5d:63:57:
         91:63:ba:25:32:e0:b4:f1:2f:ca:16:eb:c8:08:e1:67:0f:31:
         0b:fb:3b:48:2b:16:67:e4:b1:dd:65:35:9a:f0:eb:e8:7c:de:
         93:9e:54:92:75:13:cd:6a:6c:03:61:1b:bb:f8:ed:e7:02:c5:
         56:2e:df:b7:94:18:3b:90:c9:05:84:88:81:3b:c7:4d:e6:7d:
         7a:0f:bd:03:17:c1:c8:96:67:45:86:7a:de:6f:fd:c5:62:f8:
         d0:61:a8:18:be:0f:96:7e:ff:51:10:f2:e5:03:b0:f3:77:36:
         30:be:72:3a:70:bd:ff:2e:1e:8d:56:18:db:77:97:f6:6a:4a:
         b6:ed:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org