Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96eb1ae6163d2b6419d83e3524873815164e71c5.roa
File:                     96eb1ae6163d2b6419d83e3524873815164e71c5.roa (raw, json)
Hash identifier:          Uk2xuUkcNNUKbyvJJ9D4msrrySCj/vwijYXH/9d3a6s=
Subject key identifier:   F5:C6:B0:E8:7E:F3:16:D0:39:97:3E:B6:19:A1:E5:7B:4A:F7:C1:38
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DB45B
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96eb1ae6163d2b6419d83e3524873815164e71c5.roa
Signing time:             Wed 24 Mar 2021 14:40:24 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     27757
IP address blocks:        181.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898139 (0xdb45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=96eb1ae6163d2b6419d83e3524873815164e71c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:f9:55:f2:6e:f4:53:a1:82:d5:db:1c:34:
                    68:98:00:d1:44:96:7f:95:e1:3c:66:c5:24:4e:2b:
                    72:23:11:dc:c5:94:30:8f:28:98:c9:21:6d:55:fd:
                    f9:a9:19:f3:54:55:68:e7:6e:29:da:26:fd:59:dc:
                    e5:b5:f9:71:cc:79:12:14:f4:99:e7:30:b1:78:db:
                    0b:8a:29:c5:85:40:4b:1e:e6:9c:44:57:ba:1b:4e:
                    af:0d:9b:2b:58:8a:56:1e:e8:80:58:9e:3a:b0:e9:
                    9a:58:c0:8a:48:b5:10:5f:fa:7b:0f:26:db:ee:bb:
                    42:58:2c:5f:ce:f3:33:f1:63:94:fc:04:c7:9d:27:
                    cd:e1:f4:04:f1:a9:54:b5:59:33:7f:8b:90:d9:a8:
                    31:ef:37:c4:98:67:b1:b7:ea:fc:9d:05:75:e7:46:
                    89:cd:94:7c:75:9d:73:86:6c:4f:2f:ff:ee:fd:c2:
                    28:45:76:bb:13:44:ee:ba:0c:ca:b1:40:e9:1c:8f:
                    f2:a4:1d:32:54:ec:32:a7:b5:65:6f:6b:41:34:76:
                    34:e7:22:2f:c4:2d:1d:c3:ae:01:31:c3:df:bc:02:
                    dc:d5:11:0c:4e:bc:ef:43:5b:45:94:4a:d9:22:c3:
                    48:f6:fa:0e:c7:07:4e:b4:d1:50:06:aa:99:7c:f8:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C6:B0:E8:7E:F3:16:D0:39:97:3E:B6:19:A1:E5:7B:4A:F7:C1:38
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96eb1ae6163d2b6419d83e3524873815164e71c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d3:60:7e:49:f6:94:48:9d:47:a0:5b:63:40:56:56:c3:3a:
         8f:79:98:0f:45:a7:46:d0:25:70:b9:84:ff:32:ab:28:f3:c9:
         dc:13:c2:a4:1f:a1:0d:03:e1:08:34:d0:43:df:69:01:b7:30:
         ca:c1:8c:dc:c0:0a:a6:b5:62:a9:e4:4d:6c:93:f8:cb:bb:89:
         cb:82:17:7a:52:c1:d2:31:98:b5:a7:4d:c9:18:16:ce:66:96:
         ac:98:d6:59:41:80:f1:20:2b:40:25:43:7f:72:1b:1a:1d:31:
         f2:d9:74:f4:7e:42:f7:e6:ce:9b:62:52:fa:e5:b2:54:91:ab:
         88:63:a2:32:9d:51:97:8e:6e:d7:86:3d:db:7b:9f:33:35:3f:
         0c:84:d8:b0:08:e6:e7:9f:93:ac:47:70:8f:e3:0c:b2:e6:59:
         df:1a:ab:a6:e2:a9:8d:7b:ef:24:57:73:cb:59:3f:e9:97:ad:
         d0:63:3b:c0:0b:29:ec:75:3b:e7:6e:f6:89:4f:70:95:f9:11:
         47:6e:24:80:dc:eb:2c:61:14:9f:76:b9:d5:d0:05:c9:73:81:
         a6:83:52:23:ca:cb:b3:3f:5d:10:16:9c:f5:9f:2a:f8:cc:14:
         c4:3a:c9:2c:4f:70:20:22:28:ed:ed:be:52:fb:66:55:81:e5:
         2c:63:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org