Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a70c3fb49012d9ef00987cd9f5923af6956733aa.roa
File:                     a70c3fb49012d9ef00987cd9f5923af6956733aa.roa (raw, json)
Hash identifier:          dd92jucQO3MGv5eHgqmcK8ye4Oz2QALvF/qzwf1TDiw=
Subject key identifier:   EE:14:D9:45:04:94:8E:FD:E5:3A:F1:27:8A:B1:0A:27:BB:55:8B:45
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26892F
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a70c3fb49012d9ef00987cd9f5923af6956733aa.roa
Signing time:             Fri 27 Oct 2023 16:37:59 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525487 (0x26892f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=a70c3fb49012d9ef00987cd9f5923af6956733aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:1f:24:7e:05:c6:d4:57:f5:ca:dd:1d:09:
                    6e:b3:20:4a:b9:46:ac:f4:34:58:01:7d:47:40:99:
                    56:8f:de:3e:cb:10:32:ce:ba:ee:db:dd:11:1d:39:
                    98:4f:27:0b:b6:ec:18:c4:c9:f1:38:59:34:5a:e9:
                    8c:34:b7:dd:e6:f9:3e:79:1d:2b:aa:4f:df:66:60:
                    a3:a1:fc:8d:9e:19:ac:e5:3a:1d:36:9f:63:fc:67:
                    d6:eb:3c:88:b0:7e:47:ed:c0:56:79:67:40:3d:e6:
                    c2:04:a3:f8:84:b2:2c:fb:40:0d:82:74:a8:bc:64:
                    0c:31:c5:ee:e7:4d:90:93:55:96:ad:3a:0b:56:9d:
                    b1:f6:f1:de:78:07:73:b8:39:d3:6d:96:cf:74:ea:
                    06:9c:3d:53:ea:63:8b:1c:0e:71:0d:38:da:32:3e:
                    fc:d6:7f:3d:18:61:ab:59:f7:11:cb:30:c8:66:ed:
                    76:8e:4e:bc:c4:c1:eb:b2:b9:75:b3:8d:6d:66:14:
                    f1:1f:8f:27:ce:43:cb:90:e9:32:bc:06:0f:94:26:
                    60:7d:ea:dc:ec:db:35:11:26:99:86:31:c1:25:d4:
                    97:00:51:e4:2b:8a:09:a7:31:7a:26:ba:43:26:3c:
                    65:08:d5:dc:88:08:e1:7c:ae:47:ab:a4:67:09:23:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:D9:45:04:94:8E:FD:E5:3A:F1:27:8A:B1:0A:27:BB:55:8B:45
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a70c3fb49012d9ef00987cd9f5923af6956733aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:6a:9e:f3:0f:1c:23:a8:0d:b1:26:e3:a3:aa:81:09:a6:
         58:b1:1f:1b:c9:99:db:5a:25:db:19:a9:89:77:12:f9:4b:65:
         13:56:91:ec:70:0e:57:dc:da:1c:e9:dc:7d:fd:73:57:5c:62:
         93:cc:58:d9:7e:06:80:45:6a:3b:34:7f:40:87:c1:c5:99:55:
         d5:fd:7a:66:29:a3:59:f7:04:d6:9f:bc:79:59:5c:4a:9d:6f:
         dc:48:30:02:15:c3:dd:56:f4:d4:0c:cc:a7:d8:91:d4:24:87:
         5e:e0:87:cf:48:8d:e3:0d:3c:34:bc:31:13:82:d4:29:37:5f:
         34:b3:b3:96:1c:35:cb:ab:05:45:f6:9f:7f:8c:4e:49:a8:be:
         5b:bc:7d:aa:41:be:53:87:30:85:c3:d9:15:dc:8d:06:35:5e:
         c7:01:00:38:b5:66:28:8a:ee:17:6e:83:b3:c2:22:3b:c8:09:
         45:8b:04:7c:f7:fe:53:61:42:18:0c:2b:79:ce:7d:69:69:28:
         da:c0:2b:ca:e5:e5:80:73:a9:34:b6:9a:66:9a:2d:a2:fb:ba:
         db:e9:1f:c2:d5:38:dd:e5:90:d0:5d:00:42:0b:36:84:22:ad:
         70:82:9e:4a:6c:f8:13:19:45:a2:fc:b0:ae:b9:3b:b8:f0:3d:
         9e:99:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org