Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/632e555f5034ef1ffde5e7a6a74be3faa18368ab.roa
File:                     632e555f5034ef1ffde5e7a6a74be3faa18368ab.roa (raw, json)
Hash identifier:          qJGrx66iS5xiMK/GB17Ls7zg5kqnB/GKYgbTOHImkqc=
Subject key identifier:   87:61:4A:5C:12:D6:A8:BB:0E:C1:32:2B:C2:EF:BF:98:FB:A2:8F:22
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29FB89
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/632e555f5034ef1ffde5e7a6a74be3faa18368ab.roa
Signing time:             Tue 06 Feb 2024 15:37:47 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     271936
IP address blocks:        181.188.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2751369 (0x29fb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=632e555f5034ef1ffde5e7a6a74be3faa18368ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:10:6a:fe:67:00:82:3b:b7:3a:14:45:c4:
                    75:70:16:ae:56:c6:86:09:52:aa:78:cc:cf:67:27:
                    77:61:78:20:3f:7b:be:c9:38:71:ac:49:39:d0:c5:
                    65:fa:c9:8a:62:2f:0a:1e:46:cd:1b:1e:bc:75:22:
                    c6:b2:92:a8:1a:f7:c8:a2:7f:10:a0:8f:90:94:7b:
                    5d:f0:4d:3c:c3:06:4f:74:3c:9b:9d:18:53:5d:4e:
                    95:2a:8c:f7:19:51:bb:ff:1a:b3:d9:e2:8c:d2:27:
                    4a:7c:ec:28:f2:6e:c4:e8:ca:0a:06:e7:c3:5c:c9:
                    6d:bc:61:d6:a9:5f:cf:0a:ec:6b:15:0a:f3:2a:ad:
                    b7:5e:35:9d:1b:cd:6f:11:7a:7e:9a:01:7e:e0:b2:
                    8e:26:3e:dd:fd:a0:96:97:ab:b7:4a:bd:17:8b:ca:
                    c7:78:87:f5:6b:ad:34:24:51:2d:fa:dc:02:95:5f:
                    80:1b:93:74:6d:07:bf:3a:d8:7e:4c:fe:94:b2:59:
                    fe:c2:5a:ed:ee:e5:d4:e7:a7:4a:58:c6:0e:12:38:
                    a4:a0:f9:85:f2:19:59:3c:c3:6b:ff:04:b6:75:47:
                    45:e5:4e:dd:59:4e:ff:5e:78:a2:28:c3:48:01:29:
                    f1:f4:2e:c0:18:c3:78:72:9c:50:4c:9a:c0:b0:b4:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:4A:5C:12:D6:A8:BB:0E:C1:32:2B:C2:EF:BF:98:FB:A2:8F:22
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/632e555f5034ef1ffde5e7a6a74be3faa18368ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:59:75:a3:c6:23:2c:43:3b:aa:ed:04:f7:78:98:26:a8:
         10:ba:f7:a6:44:98:c5:ac:72:3d:05:c7:ae:bc:6d:a9:bf:69:
         34:e5:d6:af:b4:32:5e:86:5f:ce:ce:3f:37:ba:2e:ae:9b:a5:
         6e:5e:a7:7c:14:8b:88:c6:32:5f:fa:80:99:ad:0b:87:82:00:
         9f:04:5a:9a:15:e5:b4:e1:b3:ef:92:90:5b:4a:72:48:98:8e:
         fa:90:f1:de:3f:aa:df:79:10:e2:75:9e:26:77:21:75:7e:f7:
         19:3c:6f:98:b5:19:8e:47:89:66:46:59:45:89:3a:1f:f6:42:
         c7:78:c5:a4:7a:d9:d6:15:2f:11:19:0b:66:5c:0d:3f:6b:1d:
         56:ff:7d:85:61:92:5d:fe:56:6f:89:38:81:41:79:b9:a2:9f:
         3d:54:a0:5a:14:22:86:29:d6:e1:63:e9:2e:ca:d1:83:61:09:
         e7:31:13:55:f0:3d:fe:b7:8e:0c:45:3c:50:ec:30:e7:3e:e2:
         e1:f4:92:98:b5:b0:2c:eb:b6:fe:3d:1c:38:cc:55:03:d2:76:
         31:0d:d3:bf:26:1c:3e:ae:32:8e:61:f5:1e:e2:f2:1d:e8:13:
         9b:b4:d2:ae:fc:22:8d:fa:65:e8:38:57:5e:77:99:e1:d8:88:
         e0:73:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org