Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fa8fe985e22277e04d0cc0b6b3f9e73dc2c54773.roa
File:                     fa8fe985e22277e04d0cc0b6b3f9e73dc2c54773.roa (raw, json)
Hash identifier:          WF1GUkSyaQ4AmyaVcvTxQskBRy+JeVeZ2zd7NuS4dDM=
Subject key identifier:   2D:F9:A7:F8:F9:F5:0E:22:2D:F8:A4:6B:84:92:58:E4:51:65:53:AE
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A08D6
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fa8fe985e22277e04d0cc0b6b3f9e73dc2c54773.roa
Signing time:             Tue 06 Feb 2024 15:37:56 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2754774 (0x2a08d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=fa8fe985e22277e04d0cc0b6b3f9e73dc2c54773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:89:14:2d:2d:9f:f7:5e:fa:a1:50:aa:a6:
                    68:54:0e:d6:4e:de:1c:cd:c3:c9:f9:b0:c7:e5:10:
                    50:bf:a1:d3:a5:3c:d1:a1:29:fe:f8:3d:a4:0d:d3:
                    77:e3:4b:fc:d3:14:ce:ff:94:ae:d8:07:56:d6:26:
                    29:02:72:48:2a:fb:6f:34:8c:92:fd:d7:48:3f:a3:
                    dc:6d:54:e3:a2:a5:df:e6:f3:1a:c7:f9:ab:d0:92:
                    eb:4c:9d:27:7b:fe:db:3a:a4:9e:0a:83:81:6a:a7:
                    78:b1:c6:49:aa:15:9e:01:d5:7c:25:85:4f:8f:ed:
                    23:ce:bf:13:56:f9:7a:d4:99:86:6f:02:e2:1f:6f:
                    b6:50:30:f3:21:15:6d:2d:fd:e2:94:95:a4:eb:74:
                    cf:ee:cb:88:b5:d7:e3:21:80:f2:ad:44:c2:b8:80:
                    49:04:47:9c:2c:e7:04:fa:77:90:38:66:dc:83:86:
                    48:51:d9:7b:d4:07:04:d9:0e:32:50:25:8e:66:dd:
                    67:f0:34:97:86:eb:4a:25:19:59:e8:e0:e2:44:49:
                    1e:37:cf:3d:24:01:d1:d5:2f:c7:eb:8d:09:2b:b5:
                    00:b9:81:a1:57:2c:50:eb:cb:85:e5:78:81:5f:37:
                    ad:4b:9a:cc:aa:53:ea:ea:67:cb:e6:bf:76:13:6a:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F9:A7:F8:F9:F5:0E:22:2D:F8:A4:6B:84:92:58:E4:51:65:53:AE
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/fa8fe985e22277e04d0cc0b6b3f9e73dc2c54773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:79:39:da:9b:7e:96:9b:07:c7:f4:70:ed:74:79:11:b1:61:
         28:3d:51:98:ca:ba:83:d8:75:92:92:f6:fa:2a:8e:79:50:86:
         b9:bd:b6:f0:48:aa:e2:4e:a2:3c:94:46:83:0d:a3:f0:3f:16:
         8c:41:de:5f:50:05:eb:ce:11:33:25:e6:2d:ea:29:49:7a:dd:
         50:b2:d1:03:c8:f8:b1:ea:dc:1a:50:99:d2:ab:e2:22:49:db:
         71:7d:6f:29:1c:42:b0:73:8e:96:51:77:74:05:01:c4:82:53:
         37:56:6c:ee:56:13:c2:bb:1b:3c:1d:c7:21:58:3b:ef:d2:20:
         57:1d:a2:1b:47:aa:f4:3f:8f:a7:31:90:5b:9a:6c:c5:34:e4:
         6a:1b:7a:cf:95:e4:0d:be:2f:2b:2e:48:54:da:06:6c:5f:c8:
         94:85:99:de:68:c7:89:a1:74:99:46:f7:9a:4f:af:c2:3e:9a:
         b9:d6:f3:9a:49:a6:3c:c2:02:25:70:4b:2d:e9:43:5a:cf:5d:
         9c:e5:6e:4d:86:e3:ee:d1:7d:90:0f:62:18:bb:32:81:63:bf:
         07:7f:40:9d:fa:ba:54:b5:b8:db:a4:c7:8b:79:fe:06:0b:53:
         5e:0b:c0:63:2f:8b:4d:82:87:07:03:f0:90:5f:3e:ae:dd:2c:
         63:61:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org