Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/344a27f59fd785f56aaef2d30ddb7c5aa4d7e3ab.roa
File:                     344a27f59fd785f56aaef2d30ddb7c5aa4d7e3ab.roa (raw, json)
Hash identifier:          x+ArrCV3ffM+myNQ/kB5q7W2McCAegJHI5rMM178QZs=
Subject key identifier:   98:DF:1C:D9:6B:E2:57:B5:36:16:7F:C3:1F:92:30:9A:87:F2:A5:25
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       034724
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/344a27f59fd785f56aaef2d30ddb7c5aa4d7e3ab.roa
Signing time:             Tue 11 Jul 2023 12:45:04 +0000
ROA not before:           Mon 10 Jul 2023 12:45:04 +0000
ROA not after:            Fri 11 Jul 2025 12:45:04 +0000
asID:                     16629
IP address blocks:        181.162.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214820 (0x34724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:45:04 2023 GMT
            Not After : Jul 11 12:45:04 2025 GMT
        Subject: CN=344a27f59fd785f56aaef2d30ddb7c5aa4d7e3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:d3:48:65:f6:31:a1:13:36:b1:32:e0:68:
                    70:35:e1:61:de:64:60:f4:c1:98:fc:0d:2e:50:f7:
                    55:02:12:70:f3:ec:ea:81:81:92:78:b6:30:52:bc:
                    e8:23:03:d7:4d:51:12:c4:11:90:fe:27:46:cc:cb:
                    08:46:76:cb:1d:e4:eb:9d:b7:2f:bf:0e:ac:29:f4:
                    08:9b:43:e9:c4:0e:cc:78:02:36:7e:37:ec:2d:49:
                    65:4f:8b:67:5d:b8:3c:50:26:72:c0:1b:6c:04:cf:
                    19:9a:22:a9:79:9f:9c:36:65:c5:25:c0:70:66:f9:
                    03:9a:31:ee:ec:43:2f:06:3b:e1:c6:23:37:dc:6c:
                    ec:73:a4:ff:b9:41:d4:87:b0:e7:72:ac:54:17:4d:
                    85:98:cf:82:1f:fa:3d:9d:5a:5e:2d:f7:aa:b8:08:
                    85:ed:d2:d7:df:aa:17:5c:b6:fb:54:5a:ad:6f:7b:
                    20:09:a0:c2:93:18:b8:63:86:53:bb:48:3c:f8:63:
                    35:f1:a0:06:0d:99:5e:46:f1:e6:f1:04:9f:b8:80:
                    c7:21:f3:b8:a9:d6:10:75:6e:b3:f1:9a:07:08:84:
                    33:ee:0a:a4:1d:0d:d2:7a:39:27:fd:5f:eb:b8:99:
                    27:dd:ba:11:42:62:3b:bb:dc:d1:5d:bb:15:54:7c:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DF:1C:D9:6B:E2:57:B5:36:16:7F:C3:1F:92:30:9A:87:F2:A5:25
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/344a27f59fd785f56aaef2d30ddb7c5aa4d7e3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         66:97:66:e6:6d:0e:07:0a:d2:90:7d:73:03:e2:0e:7d:87:93:
         08:08:5d:e3:8b:72:c9:f3:f8:fe:19:ee:2e:8d:d9:45:cf:3d:
         58:10:de:99:21:5b:2c:23:77:18:fb:db:ed:1b:2e:51:f2:59:
         07:e5:76:6d:43:d9:93:12:40:b8:ef:12:d2:d2:9a:71:88:c2:
         2c:d3:1a:75:dc:74:ff:82:18:8c:b3:89:12:76:e6:9b:b3:22:
         00:26:c0:c7:b0:2d:63:5a:cc:08:f4:af:f4:31:03:67:56:92:
         35:65:d7:58:fc:8a:43:7d:9b:55:fe:89:81:a2:35:34:17:2f:
         dd:0b:96:08:bb:d5:04:6b:41:05:7b:58:8a:49:ed:f1:ab:51:
         21:40:65:c8:d8:a8:8f:05:15:ac:3b:1b:72:e6:a4:15:07:82:
         59:e3:18:74:45:b8:ae:f0:ba:15:ba:74:9f:a4:2b:91:d2:d4:
         c3:89:bd:14:38:c3:78:d2:66:10:0d:81:e6:70:f0:8e:af:ae:
         26:bd:5a:b2:f1:db:a3:54:c5:d2:18:68:20:8f:08:0c:06:cd:
         17:40:13:57:f2:36:4f:58:e5:57:97:60:4b:9f:bf:c9:ac:ae:
         ff:d8:2e:5b:91:c8:75:af:75:a8:99:cd:f8:a1:31:62:5f:53:
         83:88:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org