Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b6150770dd79f37daf0e82dac65bbfb850c4a87d.roa
File:                     b6150770dd79f37daf0e82dac65bbfb850c4a87d.roa (raw, json)
Hash identifier:          ndb6n38vS79Z+qmxdu/WkMqRMaZPNqqYE3Bc+Q9D59c=
Subject key identifier:   E0:DE:00:CD:03:9A:A5:AF:D6:7C:E7:FD:C6:56:9C:A8:42:3E:6D:DD
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       037A06
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b6150770dd79f37daf0e82dac65bbfb850c4a87d.roa
Signing time:             Tue 11 Jul 2023 12:54:50 +0000
ROA not before:           Mon 10 Jul 2023 12:54:50 +0000
ROA not after:            Fri 11 Jul 2025 12:54:50 +0000
asID:                     52489
IP address blocks:        181.225.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227846 (0x37a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:54:50 2023 GMT
            Not After : Jul 11 12:54:50 2025 GMT
        Subject: CN=b6150770dd79f37daf0e82dac65bbfb850c4a87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:91:e8:ab:47:8d:18:51:b7:3f:0d:3e:59:
                    ce:4d:31:f0:d3:a5:51:0d:30:ba:45:72:4f:78:19:
                    6b:67:86:0f:e9:b7:f6:cf:22:9b:9a:c4:72:1f:7b:
                    b0:61:5a:ff:ca:2e:a8:5c:96:3d:c7:f8:c6:2c:9a:
                    d3:bb:89:39:ce:5a:9c:88:f6:bf:78:62:04:68:3c:
                    07:4c:65:3a:6c:39:a1:58:e6:35:9d:aa:6a:d9:bc:
                    c0:c6:27:2c:13:1f:f8:cb:20:fe:65:53:ac:d9:79:
                    1d:8a:fc:b1:96:9d:8c:47:0c:2f:98:04:d5:af:74:
                    6a:5d:5f:e0:04:b4:c8:a4:a0:78:4c:29:c9:88:3d:
                    79:64:b1:6e:43:6b:56:25:a6:55:c6:76:f0:87:2d:
                    12:2c:69:01:3b:4c:8f:f0:c0:d5:39:27:ee:72:79:
                    55:d5:04:ab:1e:83:3c:75:59:49:13:01:cb:2d:e1:
                    56:6b:44:9b:5f:b4:33:e4:f3:c6:55:2d:0d:45:55:
                    ed:a4:a4:cf:9c:c0:ec:7b:5d:cf:46:47:29:1d:15:
                    5a:09:1f:bf:80:7a:2f:59:22:98:fb:7d:41:ec:00:
                    e6:1f:74:bc:29:f3:41:a3:c2:05:d0:88:e8:eb:53:
                    d2:f4:60:5b:34:47:76:8b:d8:0f:e7:cf:1a:f5:7f:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:00:CD:03:9A:A5:AF:D6:7C:E7:FD:C6:56:9C:A8:42:3E:6D:DD
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/b6150770dd79f37daf0e82dac65bbfb850c4a87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:2b:e2:76:f2:00:9d:e3:cf:b7:f4:9a:04:8f:42:bf:41:
         44:47:b1:1c:84:da:b5:21:37:48:40:c6:17:0d:71:99:45:e6:
         e4:a6:42:7c:6e:51:04:24:2f:99:44:11:fa:24:85:14:48:2e:
         0e:73:7d:2e:09:50:6f:47:47:7e:bb:6f:11:fe:6a:8a:16:6e:
         0a:01:dd:11:44:8e:38:0d:8d:f7:a6:ac:1c:b9:80:8e:b7:bf:
         04:94:e2:12:23:cc:96:fe:1c:eb:e2:a5:1a:84:fd:c4:40:52:
         3b:67:8f:a9:d9:f6:51:db:1e:e3:d9:84:f6:b2:e4:46:12:42:
         7c:91:5d:d4:d0:9b:70:2d:4c:9e:e7:e9:f3:fa:2c:8d:4b:11:
         32:90:59:7d:a0:18:4b:6c:12:d2:a7:24:41:bf:2f:e5:35:61:
         bc:36:c0:08:48:f0:b2:30:2f:7d:a8:7d:a7:6a:49:f8:c0:29:
         f4:21:70:58:b6:99:0c:f9:61:2c:ff:14:5d:f2:7e:42:4b:bf:
         6d:fb:04:43:93:ac:ef:f7:75:47:3f:31:26:15:77:ea:02:8a:
         98:7b:ee:95:df:ce:91:51:e0:f3:ff:47:69:e8:37:24:17:5f:
         02:2d:10:ff:0f:39:7a:c8:60:51:c6:1c:bd:8e:39:84:4b:1a:
         d8:c0:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org