Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/be5e1405f38eb3f3793f5982257c49abfa677b36.roa
File:                     be5e1405f38eb3f3793f5982257c49abfa677b36.roa (raw, json)
Hash identifier:          yDhX3JwPR3hFPdaaN/viL3R6M6c5+LNFusnzrQtfygQ=
Subject key identifier:   7F:29:1B:CA:79:44:EC:0F:9B:81:B2:B5:D9:CB:95:9F:6C:03:33:CA
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       279A81
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/be5e1405f38eb3f3793f5982257c49abfa677b36.roa
Signing time:             Mon 20 Nov 2023 17:03:10 +0000
ROA not before:           Mon 20 Nov 2023 17:03:10 +0000
ROA not after:            Thu 20 Nov 2025 17:03:10 +0000
asID:                     7315
IP address blocks:        181.188.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2595457 (0x279a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Nov 20 17:03:10 2023 GMT
            Not After : Nov 20 17:03:10 2025 GMT
        Subject: CN=be5e1405f38eb3f3793f5982257c49abfa677b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:13:62:a8:f6:ad:fb:9d:e7:0f:f4:b6:e2:
                    e7:a2:e0:49:3c:12:09:be:59:81:81:e4:1f:ad:cc:
                    62:25:4e:7f:7a:e5:55:7a:1c:58:4b:e0:f3:d3:87:
                    8f:ea:5c:5a:34:00:e2:59:66:14:17:71:cd:fe:86:
                    de:e2:d6:9a:9a:20:b7:88:d3:0c:81:84:e3:2b:38:
                    c5:8d:ca:14:f5:e9:36:86:f6:a0:54:a6:ed:62:12:
                    df:20:c3:f4:61:bd:18:5e:5a:af:b7:d0:72:3b:17:
                    e4:0d:ca:0f:3f:2a:12:d3:a8:6b:ba:cc:58:25:42:
                    51:3a:b5:d1:26:1c:de:01:86:3c:99:d7:a2:58:87:
                    06:42:06:14:44:e9:ef:89:56:2f:cb:b5:16:78:ed:
                    71:df:79:be:02:9e:23:67:ed:e3:64:22:a7:eb:52:
                    4f:53:89:5e:10:6e:eb:63:da:b2:8c:bf:61:cf:2b:
                    cd:0c:f2:f2:00:68:65:d7:d8:88:d8:75:f4:56:51:
                    cb:4b:b9:60:67:e0:07:00:70:72:12:fa:0c:95:5c:
                    b1:08:77:88:85:91:f1:81:4b:47:92:cd:a7:3f:51:
                    8d:1d:ae:16:27:30:d0:94:7d:5e:e1:6b:6c:6d:8f:
                    8f:fa:7d:42:a5:a6:ab:50:0f:3c:b1:d4:9c:8b:f7:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:29:1B:CA:79:44:EC:0F:9B:81:B2:B5:D9:CB:95:9F:6C:03:33:CA
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/be5e1405f38eb3f3793f5982257c49abfa677b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:b9:8b:d0:ff:b3:5d:7c:db:8b:9e:c7:de:24:9d:b5:a4:
         56:29:1c:be:eb:8e:02:17:50:e4:1b:c0:b3:e6:34:59:61:ba:
         d4:80:d2:ef:4b:1c:5e:d6:97:cb:b6:9c:1f:a3:76:52:9a:47:
         d2:41:8e:2d:6f:f8:cb:25:70:98:44:fa:85:90:d2:bd:f2:7d:
         83:a0:e1:0c:de:90:ff:8c:58:79:84:5e:e1:99:99:db:2f:27:
         eb:a2:21:bb:d6:8e:da:76:29:4b:ee:e0:f9:6e:e0:a9:5f:2a:
         0a:54:41:de:35:ee:86:d0:16:83:26:01:45:fe:72:ad:e5:29:
         6d:10:61:72:22:b7:25:25:fa:c0:a3:6d:fe:3e:d6:79:de:01:
         f5:e7:77:54:5f:71:44:a3:80:15:ea:84:0e:74:fa:f8:cf:e3:
         1e:19:f4:38:ab:bf:8e:b4:d5:74:e4:7b:b7:93:1e:6d:da:8d:
         a1:c4:e1:53:c6:5b:10:36:6e:33:27:fb:ea:50:65:67:0d:c4:
         03:da:65:4f:dd:22:96:73:13:9c:2d:f9:cc:2f:22:e5:af:4a:
         71:56:d5:a3:f4:4c:eb:45:76:bc:2c:07:84:68:c2:18:40:48:
         34:12:f5:c8:74:cb:55:bb:87:f9:f3:b3:02:3b:9d:66:c3:c8:
         1b:6a:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org