Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/70a0f382c2ae7520c19abe93704c8d7cec83c637.roa
File:                     70a0f382c2ae7520c19abe93704c8d7cec83c637.roa (raw, json)
Hash identifier:          IQiIgGReUzxadAGgWucKUp0yhKUDHPdoTERufcwAbEk=
Subject key identifier:   3B:52:51:DF:21:24:4F:84:B8:CC:25:02:DD:7E:92:45:28:DF:E5:C1
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26D337
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/70a0f382c2ae7520c19abe93704c8d7cec83c637.roa
Signing time:             Fri 27 Oct 2023 16:38:43 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544439 (0x26d337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=70a0f382c2ae7520c19abe93704c8d7cec83c637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:fa:77:65:e3:b6:a5:a1:02:43:7e:d8:7d:
                    a9:af:25:54:14:cf:83:5a:78:b1:45:fe:67:d9:2e:
                    33:3a:09:df:8f:44:53:50:5f:73:42:27:db:c9:33:
                    f0:d5:c1:61:c9:ca:65:ee:c1:38:c2:af:90:6a:fc:
                    a8:cd:30:02:ee:3f:2e:21:7d:89:0e:21:bd:d6:0b:
                    4f:a0:34:5a:98:20:a0:ce:d4:54:7c:39:d8:e0:60:
                    ee:dc:6d:b1:4e:13:db:fb:21:a6:13:aa:57:89:45:
                    cd:42:05:5e:38:1e:4a:c0:d0:95:72:04:bf:7a:a4:
                    a6:81:68:d1:ca:e9:7f:8e:ca:c3:36:51:7e:0f:78:
                    43:3d:1c:11:f1:b1:08:0a:9c:40:1a:29:86:0e:db:
                    0f:2b:f4:fb:0c:c1:be:ce:fe:40:84:43:72:60:1b:
                    a8:f0:c8:3e:1d:c0:2d:bd:01:20:1c:55:6a:3a:da:
                    58:4c:8a:54:18:83:a0:54:d4:23:02:24:6b:b4:9c:
                    36:8b:5e:a2:89:9a:2b:bc:94:0c:e6:27:03:d5:c8:
                    90:27:f2:c0:10:99:1e:b5:9c:17:f3:97:c1:34:92:
                    2b:ca:05:b8:47:f0:18:7b:b2:a6:80:1a:a0:2a:f2:
                    3f:71:e7:15:b0:e6:1d:82:e2:dc:6a:2a:b3:c5:3c:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:51:DF:21:24:4F:84:B8:CC:25:02:DD:7E:92:45:28:DF:E5:C1
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/70a0f382c2ae7520c19abe93704c8d7cec83c637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:86:f7:1b:ca:7c:3f:ec:65:1e:19:69:dc:2a:a4:5a:49:
         5e:55:cc:94:80:6f:e6:b9:4f:a1:40:37:68:39:fb:99:ec:01:
         fe:5a:ad:af:7a:b6:20:f8:5d:3e:98:67:3c:3a:b5:89:c3:78:
         d5:84:6a:c1:34:0d:d0:8c:cb:34:36:fb:e9:53:65:51:44:4d:
         49:fe:3b:f3:77:1b:1e:e9:f5:70:e8:71:34:98:26:4c:e3:a7:
         c4:2d:60:d3:41:a8:93:c3:ce:7b:19:4d:1e:63:00:9a:50:64:
         a9:19:ff:d1:ce:71:85:31:86:a3:0c:21:76:20:3b:cf:76:14:
         bc:af:14:ff:8d:ee:ef:48:d2:8c:e7:19:bd:0a:02:1a:e4:22:
         62:4f:6d:b0:02:26:df:e0:34:08:d8:c3:cf:c8:58:de:4f:f5:
         a2:6b:e4:66:3c:30:17:e7:af:f9:ee:a3:6f:28:9f:c2:a0:00:
         5f:e8:f2:7d:e3:92:0c:a4:da:13:a5:a9:82:8b:e7:42:8f:e6:
         f6:28:5d:fb:96:a0:d3:9b:f1:a7:c7:84:88:06:d4:9e:a7:54:
         85:8e:9b:6b:dc:8e:08:34:f4:de:e7:09:15:cc:4b:8e:6a:3f:
         04:a0:fe:87:97:b2:f9:1e:80:e5:10:f2:21:aa:d5:e3:0c:04:
         5e:11:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org