Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c513b02a968f25edcc757b6fb2aa259c63d0f6d9.roa
File:                     c513b02a968f25edcc757b6fb2aa259c63d0f6d9.roa (raw, json)
Hash identifier:          5VDMgk8oR7SNMJvEoAcptOyGS20F8OW0XyhTMRDdWho=
Subject key identifier:   16:A1:C8:16:47:38:B3:F5:EE:1F:86:E4:D0:42:49:16:58:6F:5C:98
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29B50F
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c513b02a968f25edcc757b6fb2aa259c63d0f6d9.roa
Signing time:             Tue 06 Feb 2024 15:37:10 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733327 (0x29b50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=c513b02a968f25edcc757b6fb2aa259c63d0f6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:5e:bd:c8:c9:c0:5a:19:15:00:e0:2e:0a:
                    79:23:7b:7a:91:02:bd:0a:a0:4d:36:63:23:e2:07:
                    fb:a2:1b:df:43:8b:34:73:57:da:02:43:dd:0a:79:
                    8e:78:60:9a:78:ce:54:2b:5c:e2:dd:7c:22:a9:ea:
                    01:3a:dc:ef:81:62:5c:a1:9f:9a:6b:ad:db:5e:d1:
                    98:a1:24:e2:b6:d6:4e:1d:c3:9f:c4:5b:1a:fc:30:
                    5b:5c:10:d0:d7:c3:1b:bb:b1:05:06:be:a5:85:8f:
                    41:a4:4c:f3:9c:56:13:ad:56:76:8c:d7:40:6a:9f:
                    2c:fa:54:45:0b:0d:4f:70:23:de:c3:fd:3e:9e:cf:
                    72:87:9b:66:5d:b2:7e:82:0f:c2:b8:a9:11:93:51:
                    46:7a:9d:eb:35:56:23:e9:cf:40:1a:8a:97:ee:9a:
                    99:71:12:45:55:b8:21:c4:d2:fa:b7:f5:c8:82:1a:
                    f8:b6:7d:a3:1f:eb:59:9a:e0:6b:6b:b8:99:e9:7b:
                    c9:12:53:ad:b7:42:7d:2e:bb:a5:78:20:b0:27:7e:
                    0c:7e:76:85:0f:c3:5b:c4:2c:45:fd:04:4e:08:2d:
                    3f:af:db:13:91:fd:5c:57:9d:f6:2e:d7:52:c6:2c:
                    03:73:44:93:a9:44:1b:6b:94:5d:04:fd:5a:30:33:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:C8:16:47:38:B3:F5:EE:1F:86:E4:D0:42:49:16:58:6F:5C:98
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c513b02a968f25edcc757b6fb2aa259c63d0f6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:37:00:4b:45:0d:a1:d6:f2:c9:f0:b8:41:86:4d:77:9b:6a:
         a7:f1:20:d0:d9:8a:9e:b7:c3:19:9a:a2:8e:49:5b:d6:dc:b8:
         0e:21:f5:3b:f9:6a:97:58:07:5c:f0:47:4b:b7:38:0d:3a:5b:
         1e:7f:56:b0:39:aa:2b:22:3e:ef:72:72:94:48:c4:b6:43:2b:
         e5:b9:f0:50:f2:38:30:18:fa:43:6a:4e:43:eb:e9:f3:18:00:
         c6:71:d6:9a:b3:ae:11:24:c5:b8:b3:26:ab:d6:7a:41:57:f1:
         0c:bb:ae:a4:43:37:4b:09:3b:6e:46:52:db:d2:95:f3:2b:b6:
         2e:79:1c:03:1a:01:f9:e6:7b:79:0e:66:33:ab:aa:41:9f:fe:
         57:9b:fe:83:94:f8:95:a2:f6:a2:5c:ed:09:5a:8d:3e:a1:1c:
         ea:ad:cc:14:6c:1b:7b:c7:86:98:06:c0:d2:30:4a:84:b5:c6:
         a5:b2:e3:41:7a:42:20:ab:c0:22:5c:e0:ed:c1:84:60:4b:ef:
         d4:62:9f:b3:8e:fb:79:79:f5:78:13:00:2e:4b:dd:88:a9:87:
         8f:2f:a3:92:60:bf:b9:18:bc:15:77:2a:ed:28:bc:a6:78:56:
         bd:ba:7c:0c:2c:02:04:9f:72:23:0c:5c:e4:df:41:20:f7:a9:
         d1:80:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org