Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/68c43175df70ebe35f4843636243d6cce84dbddb.roa
File:                     68c43175df70ebe35f4843636243d6cce84dbddb.roa (raw, json)
Hash identifier:          FTE09QbutZXka1IRt+MTE2YNf4r4bm6s4ixq1NAvMEM=
Subject key identifier:   53:52:74:56:70:99:22:35:C4:68:C9:08:62:07:49:D8:CA:E6:CE:E9
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DB9BC
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/68c43175df70ebe35f4843636243d6cce84dbddb.roa
Signing time:             Wed 24 Mar 2021 14:40:24 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     26613
IP address blocks:        181.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899516 (0xdb9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=68c43175df70ebe35f4843636243d6cce84dbddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:f7:4f:73:e9:db:f5:fe:c2:a6:30:6c:45:
                    3c:11:f2:77:44:ee:80:97:91:ab:e7:1d:d2:92:22:
                    b7:34:26:64:69:2d:00:15:ae:55:09:0a:bf:d4:23:
                    09:d4:64:ed:23:a4:d6:34:b6:f1:0b:53:cd:3e:28:
                    45:12:4d:aa:02:ed:75:9a:34:de:6c:72:97:ea:47:
                    85:08:d4:48:f2:89:91:da:c3:0a:47:86:39:be:ef:
                    6b:22:45:93:fd:5d:c0:d1:46:4c:07:84:7d:e0:df:
                    21:26:51:97:04:10:70:b4:28:27:63:db:2c:d8:ef:
                    1e:2e:f2:d3:11:a0:f3:28:c5:67:3b:10:c4:21:4c:
                    42:f8:79:a8:63:c8:1d:e3:ac:ce:a6:67:fc:fd:aa:
                    b3:c4:e4:3f:45:26:c5:8c:b1:96:a0:2b:57:a7:a1:
                    ab:7e:92:8c:d9:97:18:33:6b:d1:b5:3a:f6:44:39:
                    68:3f:ce:2f:a1:f2:b6:59:4c:ff:48:4d:49:0a:a0:
                    3b:28:49:9a:83:92:9f:5a:c7:59:b4:6f:e1:a0:1b:
                    9a:ac:26:8e:fb:11:6c:ad:64:49:a0:a4:b6:4c:66:
                    ef:47:41:29:85:bb:9b:19:bc:e9:3b:71:5c:18:f6:
                    24:66:e8:9e:ed:4f:68:58:bb:d3:58:ae:c2:28:fe:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:74:56:70:99:22:35:C4:68:C9:08:62:07:49:D8:CA:E6:CE:E9
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/68c43175df70ebe35f4843636243d6cce84dbddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:23:15:41:e5:94:67:f6:9d:39:25:32:f2:7a:e0:07:c4:9a:
         cc:0e:16:c9:2f:e5:0b:94:d4:8f:83:f2:06:75:d1:5c:89:87:
         5b:6e:58:9a:80:26:3e:d1:30:f9:46:61:60:e3:6d:7e:c8:9a:
         26:93:af:6b:34:73:b9:f0:d4:89:3d:17:11:49:11:56:23:89:
         10:2f:8e:bf:1f:f9:51:bc:ca:56:71:3d:be:8e:b3:99:a5:da:
         d9:83:a5:72:4f:e5:ca:43:51:83:b6:e8:19:ac:3a:eb:43:d4:
         3b:76:0b:e1:fb:18:4b:7c:28:15:e2:9c:48:98:df:69:a3:6c:
         25:05:8f:a6:0e:c4:61:4c:99:22:34:4d:4a:99:6f:c1:52:ca:
         14:08:64:75:27:85:81:16:b4:5c:c2:dc:0b:0c:87:aa:5b:b6:
         a6:b6:05:51:af:c2:98:6f:d5:7b:a0:7b:86:a3:62:8e:b0:98:
         df:8d:3c:62:84:11:15:ec:9f:c5:b7:1d:5c:c3:e4:ef:a9:b0:
         2a:97:40:37:1d:ce:21:cb:02:0a:b7:5b:c4:77:b3:46:24:d5:
         75:20:f7:f8:d9:09:be:74:04:4f:6e:e3:af:f8:2f:08:cd:dd:
         53:9e:24:70:f9:97:58:09:47:f5:31:d6:cf:e2:37:1a:bd:28:
         3c:cf:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org