Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/f09fba4a890c58992293dec944b98216e614f7a6.roa
File:                     f09fba4a890c58992293dec944b98216e614f7a6.roa (raw, json)
Hash identifier:          EtnLqU3I9vlq35GOvp9ay3fjJbBlvZmVoGK5DJ4bsTs=
Subject key identifier:   C8:CF:AD:B9:B4:FF:9C:2A:FF:3B:97:9A:58:84:58:CC:0A:F0:2F:65
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DC729
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/f09fba4a890c58992293dec944b98216e614f7a6.roa
Signing time:             Wed 24 Mar 2021 22:52:20 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264668
IP address blocks:        181.188.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902953 (0xdc729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=f09fba4a890c58992293dec944b98216e614f7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:81:84:3d:b6:96:d8:82:09:01:f8:23:0e:
                    e4:5d:46:b7:85:95:b4:fc:12:3b:61:d1:83:82:8a:
                    1b:08:a6:7f:02:4a:f9:ec:df:6c:46:cf:a9:c1:d9:
                    fe:cc:98:16:17:0b:ef:3e:86:38:c8:88:99:2c:28:
                    9f:04:34:67:1e:63:d1:d4:83:f7:66:4a:a5:fa:f8:
                    36:11:58:14:9d:bc:02:ad:bb:17:9b:a5:3c:9c:c9:
                    21:c8:f2:97:2b:2e:02:d2:67:4d:2c:d8:ee:4e:61:
                    96:5d:a8:11:de:aa:5f:ce:cf:18:5c:fb:fd:eb:42:
                    27:89:89:dd:b4:55:fc:1e:99:03:7c:51:8f:15:56:
                    a0:9f:2a:82:5c:d1:e2:18:23:ab:74:31:e4:73:2f:
                    85:0d:83:0b:83:c4:d8:64:78:7e:80:97:9e:c2:d9:
                    39:42:2b:29:67:8a:4e:2e:a5:f5:dd:5d:4f:67:f8:
                    16:cb:8d:c1:20:da:0a:d1:f8:1a:0a:8d:48:ab:67:
                    3b:d4:09:4c:b5:9e:2f:b5:1a:be:fc:52:92:e8:71:
                    60:dd:73:12:77:c1:2d:8a:c1:e4:a9:ee:a1:dd:bd:
                    f9:46:e0:2b:16:de:e2:22:88:60:55:7b:c9:a9:47:
                    b0:f4:87:24:7d:79:f0:06:cc:c9:ff:f7:77:19:59:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:AD:B9:B4:FF:9C:2A:FF:3B:97:9A:58:84:58:CC:0A:F0:2F:65
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/f09fba4a890c58992293dec944b98216e614f7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:15:0e:5f:ce:72:0a:fd:6e:c7:82:89:58:53:ff:6c:4a:ba:
         07:40:04:52:73:a8:39:c4:62:9f:41:76:a3:29:9c:29:f7:57:
         c5:85:ce:4e:09:c2:2f:c0:4b:0a:1c:1f:78:f5:7c:46:bd:5e:
         da:33:bb:bb:ff:c9:35:f7:ec:6b:e2:f9:cf:94:98:86:8d:fd:
         14:81:9a:a0:1d:b3:ec:b1:34:ea:f7:fe:0a:df:4b:dd:61:28:
         1b:c7:ac:a3:83:6d:b5:39:6d:a8:cc:78:2a:ed:14:4b:3d:e8:
         07:ba:31:9b:56:64:8f:2b:18:fb:86:54:bf:62:8d:17:7f:ab:
         17:de:ad:a4:7b:04:c9:0f:0c:bc:d8:e0:d0:31:3a:43:65:a1:
         0d:e1:70:06:49:e6:65:08:a3:8a:39:ba:c0:45:0b:30:33:fa:
         75:fd:6d:a0:b1:ca:8f:58:bc:bd:52:35:d4:26:7e:5a:6e:53:
         41:ea:b1:ad:c5:85:b4:58:a7:0d:54:1f:02:48:68:f2:b4:f9:
         86:2f:4a:29:3e:ba:ba:dc:be:b2:96:d0:20:67:bf:87:46:67:
         8c:46:d6:d4:fd:b4:61:91:2b:3f:9b:3c:df:53:fc:66:83:79:
         e7:78:00:5a:b5:7c:75:05:95:40:16:38:7c:41:cf:ff:05:68:
         b1:64:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org