Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d52cc9aeac915f885efd3e81e248c91a48aebe6e.roa
File:                     d52cc9aeac915f885efd3e81e248c91a48aebe6e.roa (raw, json)
Hash identifier:          GW0A4G5BlvnEWBekqcjP8XRF3UhLb11aOMAoLNaV63c=
Subject key identifier:   9D:6C:C0:95:E0:5C:F6:CC:79:B3:70:90:E8:E6:27:58:7A:0D:80:73
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       25FD2F
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d52cc9aeac915f885efd3e81e248c91a48aebe6e.roa
Signing time:             Tue 17 Oct 2023 19:52:43 +0000
ROA not before:           Mon 16 Oct 2023 19:52:43 +0000
ROA not after:            Fri 17 Oct 2025 19:52:43 +0000
asID:                     52468
IP address blocks:        181.188.215.0/24 maxlen: 24
                          181.188.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489647 (0x25fd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 16 19:52:43 2023 GMT
            Not After : Oct 17 19:52:43 2025 GMT
        Subject: CN=d52cc9aeac915f885efd3e81e248c91a48aebe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:1e:65:f1:d1:2b:17:cc:00:3b:ae:cf:eb:
                    9e:27:2c:82:e8:71:1d:9f:be:ae:46:fc:c1:14:4b:
                    71:12:dd:00:3c:7d:c1:60:0b:5b:d1:72:da:0d:e6:
                    37:ca:47:f8:cc:80:91:f3:46:2f:fc:48:20:ac:00:
                    cf:7e:b1:c8:46:a9:43:17:ef:f8:26:8a:06:f5:bb:
                    44:a8:69:95:f4:2f:1e:35:58:72:c6:b6:27:61:b2:
                    d8:0b:fe:b8:ed:a0:94:80:37:61:03:b0:a6:f3:f0:
                    0a:93:b3:2d:03:0d:8c:d1:57:c1:94:17:7e:22:c6:
                    77:86:e1:13:66:1e:f1:83:27:f6:53:8c:93:a3:11:
                    89:2b:fe:85:40:b0:ac:26:19:ef:fa:0e:97:84:20:
                    8a:ac:26:73:9e:85:14:2d:07:5a:26:7b:64:28:c9:
                    47:60:fc:66:01:0c:76:df:39:c0:f6:e7:9a:df:0b:
                    b4:0b:9b:1f:35:92:ea:11:14:cd:17:fc:a5:2e:53:
                    b6:f0:b4:ca:6d:38:56:78:fa:4b:97:80:c5:00:a3:
                    21:30:05:d2:4f:07:13:60:fc:75:28:be:ea:a0:9c:
                    77:d7:cd:d2:50:4d:e0:f2:36:cd:6f:3e:ad:c2:24:
                    be:6d:c5:f8:16:27:e5:7a:52:3d:9a:d3:d2:74:26:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:C0:95:E0:5C:F6:CC:79:B3:70:90:E8:E6:27:58:7A:0D:80:73
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d52cc9aeac915f885efd3e81e248c91a48aebe6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.215.0-181.188.216.255

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:49:a2:86:7d:27:d9:b6:87:0b:3a:dd:d9:b2:24:0f:23:
         9e:7e:f1:02:35:0b:9c:2a:15:0d:ac:54:0c:bc:c8:fc:6c:d3:
         02:18:22:99:0f:c8:78:f0:1d:fd:cb:a4:e9:67:ed:8a:0f:c5:
         08:96:a8:86:4e:c8:3e:09:fc:8f:f6:9a:0d:c1:9f:a9:bf:33:
         bc:a8:4a:98:83:5f:61:89:1e:d6:2d:21:7c:f0:03:83:f7:7d:
         1c:5f:84:97:40:c2:58:0d:cf:b2:a2:25:a0:30:0f:20:6d:b8:
         9c:97:da:7c:c4:49:c2:77:28:06:a2:f0:df:45:43:91:fe:d3:
         27:9b:eb:16:98:6b:26:f5:f4:b8:d7:84:37:ff:e9:55:05:99:
         99:de:15:f2:13:82:7e:e3:8f:be:bf:20:f1:d6:af:94:34:02:
         4b:f6:f3:a4:df:2f:b1:04:7f:c1:e1:ed:b7:4c:77:45:cc:fa:
         64:97:c8:e8:74:39:4f:3c:62:3f:a2:d7:d3:ec:3e:e6:78:50:
         d3:0f:94:31:83:7b:c6:cc:67:35:fc:cb:af:07:4b:d7:32:fb:
         4b:ed:f1:36:94:38:fa:69:d7:f5:23:a1:62:74:46:cf:7c:2f:
         fc:97:a9:87:32:d6:db:6c:c1:8d:91:dd:4b:d5:48:a5:b9:56:
         b8:a6:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org