Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/dd56c3dad1f01a702e215dac7b74efa04b87a551.roa
File:                     dd56c3dad1f01a702e215dac7b74efa04b87a551.roa (raw, json)
Hash identifier:          rWoD6IvXC3yNmM8hrGv1vUpzpE7+Ki8ZslkRNYEdQJ0=
Subject key identifier:   D4:47:76:5E:54:5D:9D:0E:15:F0:D3:55:C2:0C:EA:0F:F2:68:C4:3D
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       2670EF
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/dd56c3dad1f01a702e215dac7b74efa04b87a551.roa
Signing time:             Fri 27 Oct 2023 16:37:46 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.192.0/18 maxlen: 18
                          181.188.192.0/20 maxlen: 20
                          181.188.192.0/24 maxlen: 24
                          181.188.200.0/24 maxlen: 24
                          181.188.201.0/24 maxlen: 24
                          181.188.224.0/24 maxlen: 24
                          181.188.232.0/24 maxlen: 24
                          181.188.240.0/24 maxlen: 24
                          181.188.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519279 (0x2670ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=dd56c3dad1f01a702e215dac7b74efa04b87a551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:c8:22:c9:62:bb:ff:79:ff:59:60:b0:5d:
                    72:ed:53:0e:f4:f2:85:b0:4b:27:8d:11:7e:0b:e4:
                    a4:2d:27:cb:eb:bc:8d:13:bb:fc:4a:91:b4:33:b6:
                    77:fa:23:9b:72:1b:2b:5b:1a:19:e3:f2:e7:44:53:
                    e7:97:77:ab:e3:53:61:b7:45:fb:be:8e:03:60:d7:
                    00:c1:59:31:71:e5:72:5d:7e:e4:28:ae:07:fb:38:
                    ba:3d:2c:60:b6:15:b7:f3:d1:12:04:a0:d4:66:a0:
                    76:55:a8:f9:4b:e2:84:44:fa:ca:e7:39:a2:82:8c:
                    8a:82:31:41:ab:cf:ec:ff:01:53:0b:26:b3:15:1f:
                    43:56:51:cc:9a:a9:b4:e1:26:89:84:bc:7d:57:f2:
                    40:50:7d:b1:32:d6:ea:23:e2:ea:65:f0:97:29:6d:
                    a6:e1:f8:19:54:48:3f:96:46:9e:e8:94:08:31:49:
                    58:44:62:33:56:49:cb:d9:c0:94:0d:3f:f9:d2:2f:
                    e3:71:a0:fb:3d:a4:b6:8e:08:6e:0e:55:fa:81:70:
                    9f:ef:d5:68:a7:33:e5:23:c9:95:0d:4c:cd:23:09:
                    0e:c3:d9:33:79:63:00:42:79:7c:73:e7:19:2e:bd:
                    8e:44:7f:0e:5b:b3:6a:28:6b:79:3a:44:28:cd:24:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:76:5E:54:5D:9D:0E:15:F0:D3:55:C2:0C:EA:0F:F2:68:C4:3D
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/dd56c3dad1f01a702e215dac7b74efa04b87a551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:23:49:32:e7:c2:5f:b7:2b:40:9d:b1:e8:f8:12:b1:65:48:
         66:d9:27:52:5c:88:39:a4:5b:1c:18:1d:07:59:1e:33:ad:f1:
         f4:63:1b:48:06:7b:9e:c1:3a:a3:06:1e:1f:71:ce:f1:95:8e:
         f2:0b:22:90:ed:ce:03:f6:cb:c9:aa:fe:1d:2f:8c:27:f0:fb:
         fe:74:2d:05:c5:a0:17:92:ed:68:3f:dd:3a:e5:36:19:dd:eb:
         88:b2:56:66:41:6e:ed:8c:56:cc:55:2f:a3:c6:21:65:60:bc:
         bb:ff:37:f9:ca:68:b5:d3:0d:4a:15:cb:3c:39:eb:9f:12:b5:
         23:a4:55:11:c7:a2:41:16:54:44:a1:44:68:88:1a:2c:70:a0:
         42:b8:e1:64:43:98:fc:26:1b:d9:a7:9a:87:b0:2b:4a:f2:4e:
         0e:07:ef:5c:b8:b3:00:fd:50:6c:42:0e:12:c2:59:f5:06:20:
         68:42:e8:43:75:e2:4b:7f:45:30:4b:61:8a:df:cd:f6:60:3f:
         16:22:0f:f8:4d:34:97:19:f1:d6:4b:da:7c:7c:31:83:dc:a8:
         78:ea:14:aa:62:cb:58:9a:09:a9:41:83:9d:56:4b:30:6f:6a:
         b3:f1:59:e1:81:4a:fe:21:15:5a:d7:09:3c:82:43:94:e1:c3:
         13:50:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org