Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e68fc167dcb0adbbf8929964fba54c074cc8e1e.roa
File:                     5e68fc167dcb0adbbf8929964fba54c074cc8e1e.roa (raw, json)
Hash identifier:          9XJaFBB987UC8vkktT74s3xpBlw5ruuCGBtinoFfDUY=
Subject key identifier:   11:88:1B:C4:44:B5:D6:C3:DD:49:BD:7E:83:53:B0:C8:C8:1A:15:3C
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29E90B
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e68fc167dcb0adbbf8929964fba54c074cc8e1e.roa
Signing time:             Tue 06 Feb 2024 15:37:38 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746635 (0x29e90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=5e68fc167dcb0adbbf8929964fba54c074cc8e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:14:36:dc:da:59:2b:5f:4b:b4:2b:3e:d8:
                    8e:e2:14:e5:c5:2a:d7:63:c1:ef:ef:ea:07:e6:54:
                    99:d2:3c:af:0a:c6:f4:fe:08:0a:f4:c4:f9:a1:5a:
                    a5:47:df:e0:27:71:e6:70:49:26:90:74:0c:23:3f:
                    ea:4b:42:bc:6c:04:5f:0e:fb:7a:ff:4d:e1:43:a2:
                    0b:09:e4:20:2c:69:e7:89:39:df:1c:2c:33:6e:21:
                    26:57:25:4d:d1:cf:0f:1c:10:ed:c2:a4:68:e4:22:
                    85:c8:88:5b:55:67:31:8b:93:71:a2:3d:f8:fd:a8:
                    2d:9b:77:e1:0e:34:61:9f:ca:26:a3:3e:7f:ee:02:
                    1d:48:21:ce:98:a1:7e:bb:2e:71:1c:5a:96:72:2c:
                    51:b8:0a:5f:60:fb:16:ab:a6:46:88:d2:d9:46:3d:
                    03:55:be:3e:6c:31:46:01:50:a0:26:44:4f:7d:fc:
                    76:cf:75:bf:b0:0c:78:58:52:b0:95:fd:09:0b:4a:
                    54:dd:64:85:32:a9:f7:53:1e:41:66:a0:17:91:e4:
                    d4:f6:3c:d8:88:42:c6:e3:34:ab:66:4f:27:6e:00:
                    65:9f:ba:dd:4c:da:46:97:61:4f:c4:25:4c:d1:ee:
                    5e:bc:76:a7:59:9d:78:05:ef:32:30:3e:00:c8:3d:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:88:1B:C4:44:B5:D6:C3:DD:49:BD:7E:83:53:B0:C8:C8:1A:15:3C
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5e68fc167dcb0adbbf8929964fba54c074cc8e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:89:3d:ee:b5:ec:58:70:ae:c7:25:af:5b:70:46:73:a5:
         69:64:18:39:43:4b:e9:56:c8:41:6c:46:7f:54:25:dd:7b:6f:
         ea:66:c3:4e:56:f6:51:87:4f:27:de:b8:e8:29:00:60:92:ba:
         88:e8:ef:87:08:3b:f5:7e:e7:4f:12:09:18:55:d9:86:6a:57:
         18:4b:de:a7:79:b6:2d:50:b5:a7:8c:d4:e4:73:48:b1:d6:a6:
         11:36:e0:c0:a7:c6:c9:8a:1a:e3:f0:fb:3a:7f:2c:75:1d:15:
         4e:5c:95:60:ab:6d:b0:f3:0e:e8:e5:cb:08:d7:c3:14:cd:71:
         9b:1f:8f:f1:df:5c:8f:8f:2c:61:0f:b4:ed:fe:65:e4:86:b8:
         ac:f1:83:ac:b3:10:e4:11:7f:db:3b:bb:a4:ae:e4:ca:1a:ca:
         8e:45:f8:9b:1b:e2:b1:d8:b2:5f:a5:31:3f:88:7b:db:5e:94:
         14:92:b6:ab:18:bf:f8:80:42:64:5c:ce:0b:ca:30:1d:6b:da:
         1e:b8:e2:46:10:ed:40:e6:bb:3b:91:ed:2b:9c:fd:f1:60:71:
         9d:8e:92:e4:bb:5f:91:f8:0f:7f:b1:64:26:b3:04:88:64:0c:
         00:85:23:44:72:53:97:97:78:19:2d:5b:84:82:c6:09:37:e4:
         c4:08:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org