Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/ef4160ee9c08b6110b9d0c54cd233479f7eed965.roa
File:                     ef4160ee9c08b6110b9d0c54cd233479f7eed965.roa (raw, json)
Hash identifier:          i4oX2p4WfIxgkWN2DF3rOGk3KuR5XUZXnJ2UfWVQ/T8=
Subject key identifier:   E3:98:72:A4:67:B4:D0:00:C4:94:52:02:E8:E0:DC:C2:E2:06:72:1D
Certificate issuer:       /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial:       104FA9
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/ef4160ee9c08b6110b9d0c54cd233479f7eed965.roa
Signing time:             Tue 20 Feb 2024 22:48:52 +0000
ROA not before:           Tue 20 Feb 2024 22:48:52 +0000
ROA not after:            Fri 20 Feb 2026 22:48:52 +0000
asID:                     58349
IP address blocks:        181.233.124.0/24 maxlen: 24
                          181.233.125.0/24 maxlen: 24
                          181.233.126.0/24 maxlen: 24
                          181.233.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068969 (0x104fa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
        Validity
            Not Before: Feb 20 22:48:52 2024 GMT
            Not After : Feb 20 22:48:52 2026 GMT
        Subject: CN=ef4160ee9c08b6110b9d0c54cd233479f7eed965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:f1:0f:22:41:1f:7b:a1:74:b8:a0:93:41:
                    0c:af:4e:e5:4b:01:9b:04:eb:2a:0d:40:38:60:99:
                    50:bb:07:0d:41:05:3d:19:23:f6:5b:a2:07:5e:9f:
                    5a:ed:63:e2:db:d9:eb:60:64:f1:89:9f:4e:09:b0:
                    eb:96:8e:51:01:f5:dd:54:37:d0:21:ee:b6:2f:b1:
                    d2:1e:07:bf:de:b5:44:3c:2d:8a:80:82:61:bd:88:
                    84:99:7d:73:1b:06:21:46:88:d6:58:b7:9a:e7:de:
                    62:2b:3b:d2:f4:00:1b:03:f9:3e:25:73:6f:86:1b:
                    90:45:11:a9:17:4c:ea:08:ac:7f:b7:ec:73:38:f6:
                    e9:c2:84:bd:eb:17:33:af:bf:57:cb:23:da:6d:96:
                    a1:e7:a9:71:27:bd:c3:ab:de:bf:16:d5:80:3d:60:
                    73:de:2a:38:d2:4b:23:53:96:e7:4f:08:b9:e3:0d:
                    13:49:af:e0:f0:80:a0:00:ac:d6:9b:f5:30:7a:78:
                    4b:9e:b8:60:b1:3e:65:4f:86:7c:4c:a4:b8:42:94:
                    0d:39:88:45:97:94:b7:ea:2b:c4:2c:ba:00:ee:f9:
                    a7:db:a4:4e:a8:ac:ae:e5:29:f6:ea:c1:75:21:42:
                    8d:a2:30:77:73:fe:a2:e9:8d:70:90:06:4a:c3:16:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:72:A4:67:B4:D0:00:C4:94:52:02:E8:E0:DC:C2:E2:06:72:1D
            X509v3 Authority Key Identifier:
                keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/ef4160ee9c08b6110b9d0c54cd233479f7eed965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:61:56:f9:a7:16:01:41:47:88:ea:38:99:c9:b3:b8:8a:
         09:05:9c:a8:bb:ac:9b:da:aa:18:1e:c4:f5:3e:07:9d:fa:98:
         04:a7:ca:c6:52:58:d8:5a:f2:ff:a6:01:3d:05:0c:64:56:2c:
         4f:ae:44:1e:1e:ad:6d:03:b4:f6:92:b8:87:ad:d9:2a:e6:27:
         b0:52:45:d3:7d:ca:02:4e:44:cc:65:cf:01:5d:cf:06:9d:0b:
         32:0c:7b:e9:8a:92:44:c9:f7:ef:2a:53:59:55:6e:f4:a3:e8:
         b7:f1:ee:50:c0:25:64:69:03:8e:88:d9:77:a2:6d:e6:77:d9:
         e1:2e:b2:5e:22:66:57:53:02:3e:0d:e5:44:db:04:82:bf:b9:
         19:dd:50:a0:36:77:50:5f:37:20:45:2f:da:0d:34:6c:0b:9f:
         e8:d9:90:90:dc:8a:5e:55:83:33:53:be:dc:0c:66:d2:98:ee:
         43:73:e4:87:a3:b5:31:47:e7:f2:e9:d3:dc:25:08:96:be:cd:
         f4:96:9c:d7:a7:b4:c7:68:29:31:51:ea:24:51:3a:48:56:ca:
         64:9a:08:17:c1:45:72:56:48:40:05:69:e0:4c:de:f1:83:8e:
         eb:39:eb:b9:96:53:a9:07:52:ed:97:04:5f:0c:ed:ea:88:4b:
         7b:ca:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org