Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7e737b6e02525cad72be6177c804091df7389c78.roa
File:                     7e737b6e02525cad72be6177c804091df7389c78.roa (raw, json)
Hash identifier:          7sy3MvnSeCU1Cnfqn4apiflG6B6QzRcanGz2D+2ppmU=
Subject key identifier:   7C:AC:C8:B8:27:2A:58:7D:E7:9F:41:8D:66:C9:D6:DC:55:71:12:7A
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       259AEA
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7e737b6e02525cad72be6177c804091df7389c78.roa
Signing time:             Wed 04 Oct 2023 05:31:02 +0000
ROA not before:           Tue 03 Oct 2023 05:31:02 +0000
ROA not after:            Sat 04 Oct 2025 06:31:02 +0000
asID:                     19114
IP address blocks:        181.188.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464490 (0x259aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct  3 05:31:02 2023 GMT
            Not After : Oct  4 06:31:02 2025 GMT
        Subject: CN=7e737b6e02525cad72be6177c804091df7389c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:19:33:f7:02:48:8e:ad:db:3d:51:48:c5:
                    0a:79:57:a6:0f:d1:76:4e:99:ae:e4:32:45:c6:41:
                    75:b8:d2:55:9b:31:94:04:ce:da:80:4c:94:96:5d:
                    1a:a7:6e:09:bd:4d:cf:e4:36:90:c2:2a:5d:b5:94:
                    e2:9c:ac:39:9f:4e:5f:65:d4:76:f0:4e:9f:e9:74:
                    6c:3e:34:7c:77:da:9e:de:f0:87:f6:ae:94:77:f2:
                    bc:29:61:8e:1d:c6:11:32:18:8a:7f:1c:9a:2a:6d:
                    24:5f:12:f8:e6:c8:7e:cd:fd:e1:de:bd:21:b9:03:
                    4b:57:23:1d:ac:ae:df:71:2c:f2:83:2a:06:1e:d6:
                    8f:ac:3f:a2:c4:f2:0a:5b:8c:0d:53:de:cc:28:40:
                    21:48:3d:5e:54:a5:4a:c0:5e:ca:40:25:93:5d:fb:
                    15:c2:b1:01:32:92:92:02:61:02:07:62:45:48:72:
                    c9:3e:d1:af:68:90:8f:df:13:32:11:81:4e:03:df:
                    7d:3d:8c:61:3c:6f:64:41:30:f0:89:3c:e2:c3:af:
                    60:60:10:78:f9:54:78:2a:c2:c1:0d:d0:b8:4e:c6:
                    61:89:95:9f:d2:ee:2a:84:47:7d:46:aa:69:00:e9:
                    d2:0e:26:13:05:10:6d:a9:ce:5a:54:bc:3e:9d:b5:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:C8:B8:27:2A:58:7D:E7:9F:41:8D:66:C9:D6:DC:55:71:12:7A
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/7e737b6e02525cad72be6177c804091df7389c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:86:77:79:7f:d8:ae:6b:e9:d1:0a:e8:3e:af:a5:9f:79:
         0d:01:3f:9d:24:12:77:c0:37:da:81:6a:0a:aa:2f:ff:96:2b:
         ac:c3:ea:88:e5:e7:9a:ba:bb:35:1e:2c:e2:fc:d3:02:a3:9d:
         16:d3:48:31:90:68:8c:85:d7:92:43:91:8b:ac:f2:cf:ac:d7:
         27:86:d6:aa:56:8d:46:d9:85:f5:88:d1:e7:39:89:21:ed:02:
         cc:df:d9:d6:c6:82:48:56:8e:23:d1:f0:fb:d8:1d:df:aa:01:
         67:f6:b1:b2:bd:32:c4:74:41:ab:57:68:9d:12:03:5a:cd:64:
         e0:42:97:0c:e6:04:27:4a:cf:b2:22:56:ea:53:e0:80:7e:27:
         b2:7c:5d:38:a9:80:70:8f:bb:b3:17:8a:ab:54:e4:79:4b:5f:
         cf:d8:ee:14:64:be:c4:3a:ea:ff:a2:b5:cd:16:dd:6a:37:d9:
         22:04:eb:23:9f:60:82:54:af:ee:8b:da:30:5f:4d:0e:a1:03:
         0b:7c:5c:15:07:44:e0:1e:7f:d7:82:39:43:bf:c6:2f:46:a9:
         dd:a8:70:11:67:b3:39:0f:25:7b:c0:9f:eb:94:68:b2:84:74:
         23:c1:52:54:bd:8b:cf:e3:ad:17:ec:55:65:b1:66:13:71:45:
         8e:c2:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org