Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a989d9eddb98a73de7f681f44d1b825987ab9844.roa
File:                     a989d9eddb98a73de7f681f44d1b825987ab9844.roa (raw, json)
Hash identifier:          mt1qARDzGQ8GdYYyBHiOzWvOE1ntiBm1e50nEiigeUQ=
Subject key identifier:   07:39:B1:DD:CA:12:EB:AC:F6:7D:C7:5D:2E:76:CF:35:17:EA:75:EC
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A02B2
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a989d9eddb98a73de7f681f44d1b825987ab9844.roa
Signing time:             Tue 06 Feb 2024 15:37:50 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753202 (0x2a02b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=a989d9eddb98a73de7f681f44d1b825987ab9844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:83:46:01:ee:0d:a6:2e:b4:a5:7c:17:be:
                    a9:0b:85:53:ea:af:0b:e5:e5:1d:79:e9:aa:b4:fa:
                    7f:64:c8:31:19:92:4a:61:3a:25:7d:ae:04:69:b5:
                    af:21:eb:1c:22:d2:fe:d6:b6:2a:52:e3:5f:76:df:
                    df:0d:cd:7e:ab:ea:75:c8:d8:f9:bb:b7:05:f5:07:
                    aa:13:12:6f:a1:95:30:b5:7f:ce:fd:0d:4e:78:00:
                    31:24:5f:28:29:95:7d:a9:76:8e:6e:96:f1:8a:12:
                    e8:a0:4d:fc:58:c8:dc:28:05:7b:19:dd:12:a8:78:
                    bf:15:b7:84:74:73:05:eb:f1:e2:8e:fa:71:e3:11:
                    7f:91:0f:81:48:4c:f8:7f:88:10:77:48:2c:59:6e:
                    43:ad:1e:97:0e:a4:45:9c:62:15:1f:d2:bd:f4:9b:
                    18:2f:e1:75:59:a4:8c:29:b4:b1:1a:86:0f:23:a0:
                    5a:b5:0b:94:5e:cf:ae:53:1c:6a:65:3a:d0:2f:ab:
                    14:4f:88:be:e0:dd:67:be:d8:6a:86:b9:d4:e0:c0:
                    0e:ae:f9:07:a7:bd:09:bc:05:06:99:f3:6e:bd:ec:
                    6f:4f:70:09:d2:9a:34:13:ca:15:a2:4b:62:9d:fb:
                    cd:f3:e7:c4:99:60:79:ef:f7:ed:02:f2:4c:c5:75:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:B1:DD:CA:12:EB:AC:F6:7D:C7:5D:2E:76:CF:35:17:EA:75:EC
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a989d9eddb98a73de7f681f44d1b825987ab9844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:b5:6a:5c:07:1e:b4:76:32:4f:c5:71:f6:a3:81:64:61:
         c6:a7:f1:08:cd:0b:0c:a6:4a:ae:0e:72:08:df:c2:b1:0c:a5:
         97:86:9e:bd:f5:28:25:ec:19:d8:7c:73:fd:48:c5:a2:78:0d:
         ef:ba:15:0d:15:3f:fb:83:a8:75:f3:69:9e:96:71:6e:04:52:
         14:a4:a9:a7:b2:ab:36:91:20:ee:5c:41:65:7c:17:0e:28:cc:
         97:ad:b4:b3:a4:31:11:27:77:da:6d:9e:e3:ec:89:72:0b:40:
         3c:f1:83:56:0b:2c:b6:21:40:46:05:ab:e0:47:b1:31:ca:be:
         28:89:c0:30:6d:44:47:65:4e:8d:a1:02:75:a0:fa:d2:04:c4:
         28:37:35:d9:0e:69:c6:8c:d5:91:62:52:5c:b9:63:bb:fc:96:
         79:6b:f5:48:04:8e:ac:d6:af:7f:7f:d5:14:1b:83:a7:9b:42:
         c4:83:4f:45:f8:ba:f5:1d:03:1c:bb:92:33:9d:58:7d:c2:6b:
         3f:5b:bf:95:13:e5:e2:ec:dd:24:8b:5f:03:6f:98:01:9d:53:
         6b:7f:17:4a:d0:1f:62:0d:aa:35:ca:15:b1:e8:c2:83:50:0e:
         a9:b7:9f:bb:fa:aa:f7:0b:c7:1e:57:ef:89:35:f2:37:02:17:
         4d:66:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org