Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/785c3e0b729ca97342827e5e514e609f2c018ed7.roa
File:                     785c3e0b729ca97342827e5e514e609f2c018ed7.roa (raw, json)
Hash identifier:          f6Ayf+GHQ7subC46SKXv6S9G0hpoxCCv5SwyrjZMoF8=
Subject key identifier:   97:80:B3:D1:98:8A:81:CA:A0:3C:87:76:56:E0:9F:22:CD:E8:D7:57
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29F48D
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/785c3e0b729ca97342827e5e514e609f2c018ed7.roa
Signing time:             Tue 06 Feb 2024 15:37:44 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     52468
IP address blocks:        181.188.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749581 (0x29f48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=785c3e0b729ca97342827e5e514e609f2c018ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:2d:eb:e3:cc:a8:b7:01:d0:5e:bc:5a:b3:
                    40:d4:20:6e:6a:a1:7c:e0:46:b3:14:fd:de:ae:1a:
                    bb:9b:d4:53:69:80:7f:e4:4a:ff:f6:4f:61:29:4f:
                    45:f3:8b:e4:66:fd:4c:46:3c:78:a0:57:19:04:63:
                    24:5d:1b:b7:d0:b3:6a:64:80:ca:3d:19:d1:43:d9:
                    15:bf:4f:50:47:39:57:4e:62:74:e7:ed:02:8f:5f:
                    dd:3b:f8:e8:0f:a8:f5:5a:d1:bc:eb:35:9c:5d:4e:
                    3a:c0:56:88:84:bb:8b:3a:08:6d:fa:5b:31:c3:b5:
                    17:d2:af:8a:3f:1e:49:72:82:59:4f:fa:8d:35:64:
                    3a:74:60:4d:9c:29:21:72:ca:81:23:36:13:2b:25:
                    fe:88:93:43:84:9c:76:bf:78:de:9c:93:d6:7f:56:
                    f4:1b:35:ad:ab:ec:f3:7c:21:d9:94:db:92:33:9f:
                    b8:5d:f1:bc:84:14:48:b6:60:ff:f3:8c:a7:bb:c7:
                    d4:c3:1b:fa:fd:47:89:b2:95:43:19:f4:0d:c1:c3:
                    77:87:99:a7:75:5c:67:d1:44:31:a5:42:b0:82:3f:
                    65:67:86:97:94:09:d7:fa:2e:a2:c4:f7:5a:2e:95:
                    d2:3b:d7:56:f3:cc:bf:0f:83:20:00:50:06:f3:ad:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:B3:D1:98:8A:81:CA:A0:3C:87:76:56:E0:9F:22:CD:E8:D7:57
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/785c3e0b729ca97342827e5e514e609f2c018ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:34:4a:bf:9b:ea:c6:9c:cb:5d:0e:4c:15:d8:af:27:6f:2c:
         f2:d0:45:df:52:92:1d:8c:87:e5:00:94:7b:6a:6c:8c:54:0b:
         c3:9d:76:d2:06:64:96:26:75:1f:8c:c4:c1:03:39:fc:23:e0:
         fd:33:c6:c5:20:fc:d9:20:ac:e3:ba:55:13:d8:17:2c:46:d0:
         08:a7:07:ae:11:e3:9c:d7:cd:d6:a9:79:89:e2:92:fe:57:30:
         36:5b:1b:5d:6a:ea:60:b5:78:f0:31:31:54:ff:84:eb:dd:8a:
         98:df:3f:37:6b:21:0b:27:45:06:87:e1:ef:2e:aa:28:0f:f4:
         0a:cc:21:e4:f2:15:78:29:4d:bb:7e:d2:5c:9c:a0:e8:0b:32:
         ab:49:65:48:b6:56:9b:cc:f1:ad:37:15:48:30:7b:00:6d:47:
         7d:f2:1a:b2:ab:d1:f0:d0:3d:63:d7:de:f9:ab:95:7c:42:c5:
         e4:fe:85:e2:e0:bb:29:d6:fb:4a:5e:4e:46:4e:6e:3f:7a:3d:
         d0:81:bc:10:f0:9b:ee:4f:aa:66:4e:65:c9:36:8a:80:2c:31:
         0f:5e:a0:41:e5:84:12:c0:19:0d:9e:60:2c:a0:04:06:b6:1c:
         d9:2d:06:73:44:45:e8:f7:14:04:8e:41:7d:1e:57:ba:d5:f1:
         44:ce:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org