Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e1d6536b6d5ec8b5f636e9c14f1b8ea8ea7dbf7.roa
File:                     5e1d6536b6d5ec8b5f636e9c14f1b8ea8ea7dbf7.roa (raw, json)
Hash identifier:          JpZvwtG1pmzV5VFrEqFFqqX59SBJM17YM35ff3eCyFM=
Subject key identifier:   AB:FF:79:A2:A4:43:18:FF:6C:F3:E8:C5:BE:A4:4A:9E:B5:AF:B3:0C
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A3554
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e1d6536b6d5ec8b5f636e9c14f1b8ea8ea7dbf7.roa
Signing time:             Tue 06 Feb 2024 15:38:35 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     264668
IP address blocks:        181.188.202.0/24 maxlen: 24
                          181.188.203.0/24 maxlen: 24
                          181.188.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2766164 (0x2a3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=5e1d6536b6d5ec8b5f636e9c14f1b8ea8ea7dbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:65:d2:6f:6a:ee:22:ff:b8:72:65:5b:ed:
                    80:02:aa:9b:d0:c3:88:0e:ce:6f:ec:94:6f:1c:c1:
                    a6:ad:fe:f6:bb:15:74:54:00:54:02:79:fa:1b:1b:
                    48:c1:a5:d1:cd:77:c6:d7:a0:49:ec:df:47:f5:dc:
                    ff:e1:7e:d7:a9:08:c1:32:d2:b4:38:90:56:1c:bb:
                    69:fc:5b:b0:51:85:c4:53:8e:58:c8:a2:73:35:80:
                    5a:20:6e:94:6b:5d:b6:69:67:39:0a:3f:c8:cd:95:
                    a9:ea:dd:8d:ee:0e:22:dc:c0:5f:1f:ca:38:17:a9:
                    93:a9:41:b4:66:86:85:f3:8c:bf:00:7c:43:8b:32:
                    de:35:ca:26:4d:1c:ad:38:94:b9:f7:07:96:50:cf:
                    9c:10:5c:41:29:15:78:fa:18:da:5d:d3:df:cc:29:
                    ee:02:23:59:d2:97:e0:73:ba:77:aa:86:10:1d:e8:
                    b6:15:48:e2:a9:93:9a:19:74:6a:0d:87:78:87:64:
                    cf:e8:84:e1:5d:54:84:7f:c3:76:e8:d5:fe:6f:5d:
                    ea:c6:46:4a:c9:63:72:95:0a:2e:20:2d:5a:28:81:
                    fa:98:e5:9b:f4:59:e5:cf:ca:07:26:1c:95:67:7e:
                    77:15:d6:db:69:2c:ba:e8:74:da:3d:b6:93:e2:6c:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FF:79:A2:A4:43:18:FF:6C:F3:E8:C5:BE:A4:4A:9E:B5:AF:B3:0C
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e1d6536b6d5ec8b5f636e9c14f1b8ea8ea7dbf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23
                  181.188.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:74:38:b7:2a:69:5b:3d:fb:9c:78:44:46:45:49:41:96:
         65:76:1a:a8:9c:2b:9b:75:8f:01:44:4e:74:a6:cb:1b:e5:3c:
         e4:71:71:74:ec:bc:98:18:74:d0:65:bf:f2:c6:2e:f0:1c:62:
         e7:f0:4d:6d:20:3f:85:0a:50:e9:55:87:6a:36:be:d5:38:96:
         74:b7:79:cb:49:39:d9:7b:7d:9a:49:b0:18:03:34:a9:71:ff:
         65:0c:de:a5:46:76:22:9d:52:31:1d:cd:d2:1c:c6:77:aa:2b:
         c7:ab:c5:b7:76:2d:25:76:f0:e7:ff:6a:32:e2:15:7a:7b:b8:
         1d:39:29:03:0f:55:01:bd:e8:b0:ee:70:a6:48:b2:d4:14:f9:
         fc:bd:76:6a:d9:fd:b5:01:23:f8:13:b2:1f:ba:0e:02:26:1a:
         95:f8:51:9d:61:a3:2e:06:44:16:2d:54:26:b9:cf:b4:46:b4:
         ae:6a:29:22:d5:81:8c:c9:98:7a:38:ba:1d:29:98:0f:31:c3:
         35:6c:8c:3a:4b:c0:ac:48:9c:7a:0b:dc:c7:86:4c:c0:12:e9:
         f7:ab:8d:d8:d2:e1:c8:25:ef:73:d7:35:cf:26:7c:db:92:9e:
         cf:0f:e2:71:7f:2e:e4:e6:f2:bc:f5:1b:87:ef:1a:12:d1:7e:
         74:d3:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org