Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/878eadc1a77e9da6398e7d3abe21d298ad9f6c11.roa
File:                     878eadc1a77e9da6398e7d3abe21d298ad9f6c11.roa (raw, json)
Hash identifier:          aUpBNbuOK+Q6+sDsBkunm0wXXyl6RddKv4V6z4/KLwI=
Subject key identifier:   C3:63:66:AC:6D:04:37:50:C0:4F:3F:C9:CE:A2:27:43:7E:72:4A:68
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29A80F
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/878eadc1a77e9da6398e7d3abe21d298ad9f6c11.roa
Signing time:             Tue 06 Feb 2024 15:37:05 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     52331
IP address blocks:        181.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2729999 (0x29a80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=878eadc1a77e9da6398e7d3abe21d298ad9f6c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:b0:c4:2f:62:05:71:ce:ff:3c:46:e7:d0:
                    5e:58:a6:25:9f:5d:e1:47:fb:dd:14:7d:93:12:1c:
                    81:7c:4d:e7:ca:f1:ea:1b:7a:89:c2:6c:bd:08:75:
                    cb:de:ef:db:b8:f6:f3:a9:d5:21:f3:7a:1d:04:03:
                    33:a6:7b:34:9b:34:ee:9a:64:5c:bd:30:3a:6f:0c:
                    7f:3e:4b:2b:95:a1:35:0c:6f:9f:53:40:14:75:43:
                    31:8f:53:f2:ff:28:52:59:08:47:f0:17:06:6b:76:
                    d5:fa:0c:6b:4d:bc:e4:48:40:ec:ec:5f:f5:31:5b:
                    1c:83:58:45:d4:e4:27:02:45:02:64:1b:f7:50:9a:
                    a5:c4:03:ee:cc:c5:04:2c:4e:d2:dc:e8:ff:55:98:
                    9e:1b:35:dc:f4:d3:a9:5c:27:ea:ab:41:08:7f:6c:
                    6a:b2:fe:6d:45:62:d6:49:a1:bb:ba:24:69:1b:1d:
                    00:e3:fe:69:00:3d:11:08:74:11:2d:62:23:fb:de:
                    3f:de:bc:8e:36:1f:46:e9:f8:be:e9:53:fb:d8:79:
                    45:65:66:22:6b:62:5a:a5:42:7e:f1:fb:6c:93:d4:
                    b8:04:31:07:e1:63:98:b1:27:a7:6b:59:2b:ee:e3:
                    9b:16:87:ec:6b:4b:c7:78:5c:44:0b:ed:65:ae:0f:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:66:AC:6D:04:37:50:C0:4F:3F:C9:CE:A2:27:43:7E:72:4A:68
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/878eadc1a77e9da6398e7d3abe21d298ad9f6c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:29:b8:f0:58:c5:33:a4:c5:ae:d1:30:ec:d9:1c:9d:7b:
         53:32:34:c4:c7:f2:97:be:0b:95:e9:22:be:dc:60:26:ad:cf:
         b2:fe:6f:f7:21:77:cd:1c:b4:0d:4b:45:16:5c:3c:f7:2d:75:
         bc:36:28:2f:ca:5d:58:12:09:12:83:a9:24:d2:5c:6b:95:12:
         d7:d5:d4:f5:bc:ec:13:e4:4b:38:3a:cf:43:53:3f:88:14:67:
         55:0d:79:7c:36:e5:6b:a9:ec:f1:7d:98:ad:dd:58:3a:c3:dc:
         9d:d2:90:9e:68:a7:79:34:80:43:bb:a7:35:43:29:34:bb:fa:
         07:49:a4:67:4d:69:13:dc:1a:78:20:1c:6a:72:8c:4b:b9:02:
         4d:58:60:99:de:e9:22:f8:95:1f:76:35:ad:25:9d:77:7e:ef:
         fa:dd:47:45:0d:0c:91:3d:54:89:03:69:fa:00:7d:22:03:d6:
         77:7e:c2:2b:4d:59:fb:93:77:a8:e8:2d:0e:46:b2:1d:2e:e5:
         fd:02:e8:de:54:69:14:44:44:ca:03:08:d7:56:30:c1:fa:cc:
         a3:e5:54:1f:88:46:82:19:dd:84:e4:a1:be:0e:7c:de:d1:bd:
         ac:44:1e:a3:3c:fb:16:cb:05:82:1e:c1:d9:ea:80:f2:93:54:
         d6:6f:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org