Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/b72ee1092f655f9b5d068c1b9554d1663a9c6fdb.roa
File:                     b72ee1092f655f9b5d068c1b9554d1663a9c6fdb.roa (raw, json)
Hash identifier:          0UOB9hrsd9qrlQTL3gijcbjcxPOLnmIXvW3VCrebdq0=
Subject key identifier:   DE:B6:06:46:87:1C:4A:B1:C5:A1:43:28:25:FE:9D:F3:8D:01:5D:16
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       22E3D3
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/b72ee1092f655f9b5d068c1b9554d1663a9c6fdb.roa
Signing time:             Tue 13 Jun 2023 17:08:17 +0000
ROA not before:           Mon 12 Jun 2023 17:08:17 +0000
ROA not after:            Fri 13 Jun 2025 17:08:17 +0000
asID:                     28097
IP address blocks:        181.188.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286547 (0x22e3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Jun 12 17:08:17 2023 GMT
            Not After : Jun 13 17:08:17 2025 GMT
        Subject: CN=b72ee1092f655f9b5d068c1b9554d1663a9c6fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:cd:8b:82:4d:8e:46:65:89:60:24:60:30:
                    24:01:9a:c6:4f:43:8f:76:72:26:d7:44:4d:19:4e:
                    00:fe:03:0c:30:57:be:f5:ed:a4:ea:72:40:c7:5d:
                    fe:0e:29:95:b4:c7:55:a0:90:c1:a3:ad:11:5e:08:
                    76:03:0b:88:06:4a:c9:89:a7:5b:7e:73:b9:58:5a:
                    20:2a:c4:de:df:02:ab:35:02:48:67:26:59:71:96:
                    6f:af:9c:c0:47:d2:7c:a9:2f:cb:b3:c0:40:9e:48:
                    a7:a4:2d:3e:22:17:b6:31:8e:70:5b:56:f2:08:8c:
                    9c:f0:09:bc:48:d2:00:b4:27:34:3e:64:59:d7:b4:
                    ec:a1:7f:9e:c1:56:8e:c7:a1:43:69:e0:fc:d1:60:
                    d5:58:e3:aa:dc:88:ec:d5:63:3b:3a:48:83:8b:9b:
                    f3:d8:bb:52:22:bb:9e:6f:4c:3e:1c:ef:2d:3c:94:
                    0e:3b:b6:3e:9f:20:13:aa:1d:a3:5c:e8:3e:f7:b2:
                    58:dd:5b:46:38:9a:5d:b0:a7:11:1b:5b:1c:5a:b8:
                    72:37:d0:87:72:7a:7e:74:e6:01:1a:56:4e:3c:1a:
                    83:ee:d3:48:a7:1d:80:14:50:a2:92:48:15:ff:23:
                    c7:bd:ee:bf:87:49:40:fd:b3:c8:02:d8:d9:9a:cd:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:06:46:87:1C:4A:B1:C5:A1:43:28:25:FE:9D:F3:8D:01:5D:16
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/b72ee1092f655f9b5d068c1b9554d1663a9c6fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:64:59:a9:bd:c5:55:64:a5:f6:88:b7:3f:a0:50:c4:c3:91:
         d5:5f:ed:88:43:c3:bb:81:01:14:07:b3:5a:05:17:ce:69:40:
         a5:04:58:ea:19:23:6d:c6:58:56:ef:3c:3e:58:75:bf:28:22:
         05:60:23:3b:70:1a:c9:f3:7c:79:3b:d5:e8:50:17:a0:1e:1d:
         cf:d0:66:78:48:ae:50:15:c8:77:9f:19:d0:5f:59:bf:df:77:
         ac:9f:ea:ae:24:aa:c6:fe:51:70:3c:09:ea:38:63:fd:63:f7:
         24:10:28:50:d1:af:51:1c:ab:83:5b:b7:7f:fc:70:fc:13:9d:
         c7:4b:47:40:b2:1a:d2:8c:0f:c7:73:6b:d9:c0:bb:6a:4e:bf:
         af:32:92:4a:c3:0a:08:1c:9b:3c:a3:a3:7e:7d:56:b6:9e:c0:
         39:3e:af:90:37:aa:51:7e:ef:0f:f0:8a:c5:42:1f:46:2a:4c:
         6e:1e:5b:c3:1f:b7:86:43:4d:0d:fc:ba:28:98:c0:da:03:0c:
         b2:d7:c8:78:77:ca:a9:50:c1:9b:87:d2:08:9a:49:fb:34:97:
         8c:bc:88:a9:d9:a5:a5:f1:a7:9c:d4:1b:24:b1:d7:18:07:03:
         9d:dd:b7:4f:7c:f5:4b:46:c1:bf:6a:15:ab:a3:74:03:32:09:
         49:74:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:04:38 2023 by rpki-client on console-fra.rpki-client.org