Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/69b0c2833436d9d70ef64f252c80c7990bd981fe.roa
File:                     69b0c2833436d9d70ef64f252c80c7990bd981fe.roa (raw, json)
Hash identifier:          fDriYkurjKHbuM/sqlQpDhK1wG5BiJFuz05r2IdXLXQ=
Subject key identifier:   6A:23:12:01:A3:8B:CE:81:13:65:CF:70:6B:95:EB:87:9F:56:A3:27
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       259DF2
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/69b0c2833436d9d70ef64f252c80c7990bd981fe.roa
Signing time:             Wed 04 Oct 2023 05:32:41 +0000
ROA not before:           Tue 03 Oct 2023 05:32:40 +0000
ROA not after:            Sat 04 Oct 2025 06:32:40 +0000
asID:                     19114
IP address blocks:        181.188.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465266 (0x259df2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct  3 05:32:40 2023 GMT
            Not After : Oct  4 06:32:40 2025 GMT
        Subject: CN=69b0c2833436d9d70ef64f252c80c7990bd981fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:73:e5:e1:a0:c6:4a:fa:fd:6f:6d:84:b6:
                    f2:82:38:d2:a2:6f:5f:8e:b7:d6:6b:e4:57:01:01:
                    b3:7f:2d:79:81:7c:79:62:cc:a9:9d:79:a6:e7:7d:
                    96:8d:6d:1e:ae:6f:90:e9:6e:43:8a:fc:c8:86:51:
                    67:42:fe:a8:31:73:c8:4a:8a:ee:87:e8:81:44:1f:
                    3f:a8:b2:24:81:fa:a6:72:c2:9e:cb:0e:58:26:4e:
                    0b:96:2a:09:89:71:31:bf:1c:9c:0b:19:66:ce:69:
                    7f:29:d1:ef:96:ae:40:27:d7:12:10:10:be:31:c2:
                    76:4f:b9:c1:11:b9:81:ab:82:a3:71:ca:dc:f5:bb:
                    25:bc:4e:75:bd:ea:0b:19:63:70:59:f9:e5:d2:95:
                    7f:cb:b2:48:74:1e:6a:63:3a:99:d7:b1:f3:ce:32:
                    ba:98:dd:03:20:7f:43:7f:4a:c8:29:f8:a7:51:da:
                    46:5c:d5:42:c7:16:52:02:c9:e4:37:d3:ac:b3:e2:
                    80:71:aa:c9:67:0b:0a:32:be:b3:63:c1:71:36:e3:
                    1a:fd:89:5f:07:28:48:2f:a0:90:5f:95:3d:c7:d4:
                    d7:dc:ca:2f:f0:1d:81:0a:c1:96:63:76:87:61:23:
                    d8:11:2e:37:2c:6b:cc:39:4c:63:88:0b:ba:54:d9:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:12:01:A3:8B:CE:81:13:65:CF:70:6B:95:EB:87:9F:56:A3:27
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/69b0c2833436d9d70ef64f252c80c7990bd981fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:34:a6:0f:d5:99:13:f1:fa:89:c4:e8:77:1f:a9:1e:e9:6b:
         4a:bb:d1:0c:cf:01:19:a3:11:71:a4:7d:1d:84:1d:c7:0d:77:
         4f:7c:ff:c9:30:12:da:93:05:41:0a:a3:46:ea:ec:d0:c7:76:
         66:0c:62:3e:74:b8:29:b2:a6:09:1c:86:a8:3d:9f:57:87:fb:
         2a:2e:2b:3a:6b:22:c1:d0:51:aa:66:13:ae:c7:5a:d1:1f:49:
         79:6c:a2:43:03:09:45:0d:a0:08:fb:eb:54:ac:dc:8f:64:2d:
         ea:ad:4d:e8:a2:e3:47:cc:9e:03:a5:83:c1:20:67:7f:0f:57:
         b2:7e:69:71:05:0b:21:57:bf:21:9e:78:fb:8d:f1:00:77:dd:
         f0:0b:e8:93:8a:e2:3a:fa:09:ce:a6:fb:86:eb:9f:8d:e4:e0:
         51:5c:b5:7c:71:0f:aa:30:74:a4:b3:1e:0f:00:6c:62:8d:64:
         4d:76:43:2a:07:14:57:c0:8c:08:72:b0:c1:40:82:3b:c6:7a:
         83:8a:5b:27:0b:d9:68:94:15:f9:ae:69:d0:6c:ad:6f:ea:fb:
         e4:71:e9:bc:48:9b:38:79:db:60:58:ba:90:98:a7:06:74:a2:
         3d:5a:d5:f0:97:31:89:2a:a7:d4:59:c9:c2:32:58:20:15:14:
         e8:f3:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org