Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96f079ba139f9a834d2d34b51b14c26004ecc7d7.roa
File:                     96f079ba139f9a834d2d34b51b14c26004ecc7d7.roa (raw, json)
Hash identifier:          HszArm5IkF2LdHKySRvY/PAFJ9312iI9lFBDi0psX18=
Subject key identifier:   32:FF:12:86:4B:BA:DD:9A:9F:2E:C1:24:4F:22:3A:92:40:CC:DB:8A
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2977C1
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96f079ba139f9a834d2d34b51b14c26004ecc7d7.roa
Signing time:             Tue 06 Feb 2024 15:36:50 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717633 (0x2977c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=96f079ba139f9a834d2d34b51b14c26004ecc7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:d4:68:fb:68:e8:47:df:ff:d6:33:49:63:
                    e3:0b:2e:3c:a6:53:1b:a7:26:d5:3e:49:7f:ce:63:
                    4d:31:78:21:f2:5a:38:a4:d4:b9:df:fe:57:d2:9b:
                    f0:36:a6:cd:83:ee:b8:36:f3:96:d4:8d:50:86:68:
                    69:1e:33:9f:f6:6e:6e:97:a4:e6:35:07:aa:ae:86:
                    57:a4:be:6e:22:50:21:01:ee:33:ef:31:f5:b7:8c:
                    2d:d6:8b:53:0a:c6:4d:a1:36:8d:14:a5:27:ee:f5:
                    75:0e:62:9c:46:06:7c:69:ec:2c:80:42:d4:93:8c:
                    81:6c:50:04:a4:4d:9e:e3:9f:eb:dd:90:3e:79:e5:
                    e3:6d:8b:95:fb:ab:c0:92:0a:21:a8:a0:d4:12:1d:
                    ea:ed:50:7b:ef:9c:7e:99:ec:69:43:12:78:ca:e0:
                    ae:01:38:67:f1:a9:0a:fe:2c:7d:fa:73:c2:07:d7:
                    6c:f8:e3:d1:9f:3b:f5:91:72:be:ed:26:0a:32:d4:
                    f5:ca:3b:6a:ee:43:81:0a:7d:11:56:1d:61:23:62:
                    99:21:95:69:6d:17:5c:dd:7c:2c:50:7e:66:53:3c:
                    7a:71:d8:94:72:fa:4d:47:3f:3a:fb:17:08:66:80:
                    de:c7:09:0c:c6:62:63:8f:bb:41:94:50:a0:b7:9d:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:12:86:4B:BA:DD:9A:9F:2E:C1:24:4F:22:3A:92:40:CC:DB:8A
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/96f079ba139f9a834d2d34b51b14c26004ecc7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:d9:50:b8:50:95:53:43:d1:e2:8c:8b:16:14:fe:ce:71:
         1d:57:b8:1e:e2:03:cb:2a:fb:88:9a:0a:72:65:4e:d9:7a:58:
         d1:fa:ea:29:b0:6d:c3:f1:76:13:15:c7:84:e0:39:00:e5:36:
         4a:0c:fc:b2:5f:84:77:d5:e8:92:dd:1f:b5:6c:1d:23:ce:aa:
         5b:ad:1e:80:45:2e:79:c7:95:b6:f2:66:5d:99:27:71:0f:c6:
         9e:3a:44:85:5f:1a:22:75:06:12:5b:0b:db:20:61:93:74:6d:
         5d:46:ea:da:41:ff:ee:65:ab:0d:90:5d:05:a1:ab:aa:16:82:
         b9:61:68:29:4d:a6:f0:e3:68:27:5a:e7:a0:4f:9b:25:c1:11:
         4c:d4:9a:c9:73:7a:88:ad:14:02:22:5f:b2:83:cd:2e:94:22:
         61:4b:67:50:da:2f:16:27:bf:44:88:18:7f:60:e9:f8:0a:30:
         c7:cf:1e:26:2e:1d:44:9d:36:36:f5:65:e5:54:bc:26:e0:84:
         31:5a:5d:5d:84:5d:fa:db:66:b8:25:17:c8:0a:51:be:f7:98:
         f5:a2:e8:f8:bb:d2:99:68:9e:68:f3:f0:39:44:05:fe:ce:2a:
         b8:b2:00:d7:04:57:5e:5f:2e:da:97:c6:c8:b0:86:c3:36:ec:
         7b:38:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org