Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5ee37bed2afd6cb72262bf21f32b410d427b1d92.roa
File:                     5ee37bed2afd6cb72262bf21f32b410d427b1d92.roa (raw, json)
Hash identifier:          1q2kIEJGyCeZVseX94vm4xtKlRMGmwcgj1dHGfUxd+A=
Subject key identifier:   06:0D:B0:F9:24:74:A6:FF:63:57:67:28:55:1E:42:76:A1:55:15:F5
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       25A26C
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5ee37bed2afd6cb72262bf21f32b410d427b1d92.roa
Signing time:             Wed 04 Oct 2023 05:33:13 +0000
ROA not before:           Tue 03 Oct 2023 05:33:13 +0000
ROA not after:            Sat 04 Oct 2025 06:33:13 +0000
asID:                     19114
IP address blocks:        181.188.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466412 (0x25a26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct  3 05:33:13 2023 GMT
            Not After : Oct  4 06:33:13 2025 GMT
        Subject: CN=5ee37bed2afd6cb72262bf21f32b410d427b1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:f8:91:ed:b1:ba:91:c4:e8:29:71:28:70:
                    91:e9:14:e6:64:93:7c:7e:a4:e4:8f:8b:d2:af:5f:
                    78:9b:c0:ad:5c:0f:b0:ca:ea:51:73:38:ed:1b:fb:
                    72:39:a7:ca:99:9d:1c:1a:09:51:0e:88:0c:1e:4c:
                    d4:92:e0:3b:8a:b2:0c:1f:5a:4b:7b:b2:b5:8c:f6:
                    25:d0:d6:ac:ef:48:b6:43:b1:ac:51:9e:ac:33:48:
                    02:66:5a:c1:fb:01:96:9e:ed:f4:32:67:dd:f7:95:
                    56:7d:2c:4e:3d:c2:e2:81:cb:2b:0b:70:e4:31:d5:
                    38:8a:26:f9:2f:16:ae:33:25:1d:0a:0c:da:ec:0a:
                    c9:f9:96:4c:32:1e:32:ee:35:bb:82:f0:61:f0:11:
                    19:0a:0d:92:0d:c5:30:ac:c0:c0:6c:02:d7:48:40:
                    57:82:0d:61:fd:59:2d:95:cd:20:25:96:b8:da:57:
                    de:4d:c1:ea:16:58:9e:82:cb:2f:c9:e3:2a:30:6e:
                    c7:d1:d4:23:67:27:51:39:aa:6c:0f:31:90:88:77:
                    ec:71:11:ca:5f:6c:d1:84:92:f4:71:10:f5:df:13:
                    d2:f0:db:02:34:8c:63:00:e7:90:8d:96:70:7c:48:
                    63:9e:9a:ec:c2:f2:ca:30:94:a7:0f:99:1e:59:9d:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:B0:F9:24:74:A6:FF:63:57:67:28:55:1E:42:76:A1:55:15:F5
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5ee37bed2afd6cb72262bf21f32b410d427b1d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:dd:c0:19:2f:8e:79:e8:85:b3:8b:56:39:f8:e5:0c:78:
         45:5b:79:be:b7:07:66:c1:d8:f2:be:4b:5d:a6:77:ba:bb:72:
         9a:c0:22:6a:08:fb:3b:56:10:14:6c:ec:32:58:1b:c5:e5:4d:
         07:b8:21:c0:ee:ac:aa:b8:d7:b1:76:17:f6:b0:f5:05:db:59:
         4d:41:58:bb:e3:2c:a1:1d:d3:9e:70:62:9e:ae:59:40:81:23:
         1a:56:42:b6:76:91:c2:6b:5f:ab:2a:a6:63:ce:52:d1:74:04:
         4f:c0:8b:b5:1a:f6:dd:4c:41:1d:77:db:77:f0:12:2a:d9:fc:
         7a:47:95:e4:b4:57:8b:12:b2:6c:b7:f2:60:f7:cf:4c:9c:9a:
         0d:f2:e4:43:9b:f2:0a:25:fc:f2:2b:06:ff:f0:17:ff:c9:9c:
         98:58:bf:0d:13:c3:ad:a6:8e:fc:90:0c:31:0d:1c:e7:6c:cc:
         de:c8:5f:c6:d7:1f:b8:8f:0e:36:7f:a2:3a:38:77:61:12:12:
         36:95:b1:f1:3d:8c:21:ae:20:ed:c3:5d:3f:9d:9b:dd:a4:b6:
         9d:ca:86:c8:b9:2c:f8:36:74:85:bc:87:a5:13:c8:b9:ea:5b:
         51:d0:d0:6c:72:0f:ce:02:0f:e9:cb:6e:8c:e8:e5:b0:b2:d8:
         d3:08:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org