Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/f091823e395ff85720c4eccd7186ddd20b4be5a6.roa
File:                     f091823e395ff85720c4eccd7186ddd20b4be5a6.roa (raw, json)
Hash identifier:          +WEkpneeuyTSWG/KmNytNveMSTpQcnezXQdCFZrKvbU=
Subject key identifier:   EC:7A:DC:EF:1B:E2:9C:7B:1B:F3:70:22:E3:7D:1B:D8:0C:4D:5C:9D
Certificate issuer:       /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial:       024B06
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/f091823e395ff85720c4eccd7186ddd20b4be5a6.roa
Signing time:             Fri 29 Jul 2022 14:32:03 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Mon 29 Jul 2024 03:00:00 +0000
asID:                     58349
IP address blocks:        181.233.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150278 (0x24b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2024 GMT
        Subject: CN=f091823e395ff85720c4eccd7186ddd20b4be5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:f4:73:8b:0a:9c:db:56:4c:09:8d:e0:d3:
                    f8:35:56:1c:6a:e5:d6:c2:e1:58:5c:fd:f8:51:71:
                    0d:1b:bb:23:13:20:4e:6c:64:28:4f:67:95:1e:10:
                    c5:7e:bf:f8:f5:df:c2:5b:5e:c8:0c:fb:7b:fc:9c:
                    9b:1c:b6:8c:79:cb:87:ae:b3:78:74:e7:25:b6:6a:
                    2a:41:bf:1e:15:1e:c2:c5:20:d9:c7:7d:86:fb:ab:
                    a7:57:5f:35:57:df:a6:cb:58:b5:3a:7d:26:ba:fd:
                    e1:0a:89:10:03:66:02:a6:f6:cc:d1:f4:21:b9:9e:
                    58:43:80:b1:47:ed:17:3f:98:2c:5d:e0:7c:4f:44:
                    1b:b4:3b:bb:37:56:d3:1f:00:f2:d4:66:36:91:0d:
                    a3:f9:2f:e8:a5:6c:30:48:76:6d:6c:3b:e6:5e:ba:
                    a1:07:cf:82:68:23:59:4c:36:a2:ac:1a:6f:3b:16:
                    ad:43:7c:bf:98:2d:75:d1:c5:56:b4:80:b8:8d:ed:
                    7c:19:5e:17:82:38:22:2a:ab:db:92:a7:11:1a:09:
                    85:f7:9a:ff:23:e9:c5:4f:0a:e0:a1:28:2c:4d:4c:
                    d6:fa:7a:96:b7:03:df:7e:0e:59:d2:17:2a:51:c3:
                    77:62:1d:8c:9d:72:82:6e:60:b5:b5:89:13:fb:dd:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:DC:EF:1B:E2:9C:7B:1B:F3:70:22:E3:7D:1B:D8:0C:4D:5C:9D
            X509v3 Authority Key Identifier:
                keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/f091823e395ff85720c4eccd7186ddd20b4be5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:bf:0f:8c:f9:4c:e2:15:2a:88:46:69:68:2b:6c:42:02:
         39:2b:3e:6c:29:ac:e4:cc:dd:60:c4:28:74:67:17:82:9e:5e:
         79:f4:25:74:42:26:a6:6a:14:02:a7:41:94:0b:76:93:de:2a:
         e1:cb:08:66:0c:bd:e2:5e:5f:ce:13:af:59:ae:29:fe:13:b1:
         d7:a5:0f:83:b5:7d:d3:db:9c:57:36:66:97:9a:00:da:7a:5b:
         08:1b:7e:04:8a:1f:8a:d2:b6:23:d2:b2:98:b5:89:3a:55:14:
         82:93:31:a0:91:90:d5:20:ee:a6:15:e1:b0:c2:e5:76:7b:ce:
         7c:05:e9:37:1c:4a:e5:ad:5c:9e:f4:1e:a2:bf:e5:b2:95:a5:
         f6:92:e3:30:fe:2a:7b:da:e5:82:a0:ba:75:12:c4:00:f4:aa:
         ba:95:07:7f:3f:e6:6a:e8:10:c4:e2:78:53:36:1f:21:66:7f:
         05:87:d6:5a:a2:a6:b3:3b:8b:71:54:95:bb:ce:90:c5:5a:3c:
         b2:ae:59:fa:4b:13:ca:c5:fa:68:1a:f4:f9:01:a2:55:c2:23:
         92:09:47:50:97:a6:c0:c3:fa:81:ce:1b:2a:5f:57:ae:6b:75:
         56:fc:75:d2:5c:28:68:6e:d9:9c:9c:09:7c:9b:cf:84:0a:e7:
         6c:f5:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org