Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/29e567d77eeaae384b7125361eb95759c2b1d510.roa
File:                     29e567d77eeaae384b7125361eb95759c2b1d510.roa (raw, json)
Hash identifier:          r+JfMEUNDvzZ2+GaTEqswKna6i6bOkcIPFcTkU9fhYw=
Subject key identifier:   34:81:CC:01:9A:16:C9:3B:5C:E9:F4:9A:FC:7E:2A:02:FC:E8:04:8E
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       036F41
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/29e567d77eeaae384b7125361eb95759c2b1d510.roa
Signing time:             Tue 11 Jul 2023 12:51:17 +0000
ROA not before:           Mon 10 Jul 2023 12:51:17 +0000
ROA not after:            Fri 11 Jul 2025 12:51:17 +0000
asID:                     7418
IP address blocks:        181.160.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225089 (0x36f41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:51:17 2023 GMT
            Not After : Jul 11 12:51:17 2025 GMT
        Subject: CN=29e567d77eeaae384b7125361eb95759c2b1d510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:4e:f0:75:55:dd:0e:7c:74:7a:78:ca:78:
                    b0:50:db:01:d2:ed:16:95:2a:0b:8e:3e:ad:53:dc:
                    a5:ea:b1:ba:3b:37:72:c5:00:65:58:25:65:13:b7:
                    c2:ba:b3:bc:47:60:07:c4:95:9d:ab:fb:ba:25:e6:
                    93:cd:3f:0b:de:41:50:76:3d:2d:f9:b8:f0:77:f4:
                    c9:d2:f0:4a:6f:c9:dd:30:87:2a:52:52:24:b8:28:
                    9d:b7:df:48:3d:66:08:e4:6f:41:a1:df:37:75:19:
                    a1:5b:ed:20:53:96:00:d5:d7:dc:30:8c:4c:04:6a:
                    01:e6:b9:3e:e5:84:35:8d:bb:d7:51:51:0d:ea:e3:
                    18:d3:7b:6e:cc:96:25:ab:16:88:34:e3:cd:62:e1:
                    5d:d8:d1:e5:42:47:92:7d:83:8f:b4:06:67:9c:e7:
                    44:b9:c9:d6:c5:52:01:b4:f2:94:cf:d6:88:36:be:
                    6e:8e:2d:16:b3:d0:fa:b6:11:85:9b:65:ba:46:8d:
                    cc:76:f9:7a:3f:e7:80:ad:a0:dd:49:84:3e:fa:16:
                    f3:4d:60:c6:53:8b:0a:ec:60:d6:02:a7:7a:7a:32:
                    6e:43:84:d6:a9:5e:35:3e:0b:c6:b0:9c:cd:68:31:
                    4b:90:60:ca:e7:05:c9:91:af:01:a0:90:c0:34:04:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:CC:01:9A:16:C9:3B:5C:E9:F4:9A:FC:7E:2A:02:FC:E8:04:8E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/29e567d77eeaae384b7125361eb95759c2b1d510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         42:28:30:3e:d4:d2:e4:ed:08:6f:ec:eb:27:7f:a4:58:a4:fa:
         56:aa:8b:a3:d4:fb:88:9d:83:51:f4:5e:f1:d2:d9:19:91:3f:
         0f:4c:f1:dd:51:5b:29:09:cc:e2:f6:a8:0d:f7:e2:6f:d3:a1:
         44:b3:83:14:45:bc:4f:ff:1f:a0:1d:f2:f6:e4:99:b6:97:9f:
         d8:b4:d2:b1:18:7d:5a:7e:3f:f1:72:f5:2e:ad:ad:bd:76:3c:
         db:d2:2a:b3:c3:e0:8d:5c:8c:02:d3:49:3f:5a:5a:f7:3a:7b:
         f9:ca:1a:88:d6:af:bc:8f:51:0b:ee:d5:1f:38:7f:91:83:63:
         8d:72:d4:36:b4:7d:21:de:35:b9:17:58:e7:f2:8f:f2:aa:0e:
         8a:88:d1:a0:41:90:11:90:7b:c1:bf:53:95:e9:f9:c9:a1:00:
         83:ef:62:67:9c:ab:0d:79:7a:a4:11:cd:ec:f4:70:5a:e8:b7:
         ee:3e:08:63:af:7d:0e:d4:50:cb:6f:d8:7f:9b:9d:d4:96:6a:
         79:21:35:95:7f:fd:a1:9a:68:83:0b:46:8c:f5:45:42:58:b1:
         42:fa:6e:0e:5a:57:3c:10:6f:c8:fe:7a:7a:2e:f1:80:1d:ed:
         49:ad:cb:a9:bc:95:c0:e4:19:f5:ca:fe:6b:b7:54:73:70:70:
         af:05:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org