Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/5f76aa1c55ba39a20ac12ec117d5d41e7ca62013.roa
File:                     5f76aa1c55ba39a20ac12ec117d5d41e7ca62013.roa (raw, json)
Hash identifier:          9qcVM1+0BCl5zSwOOtG/Cw0sh0y6Zhm4YT/cawU57vI=
Subject key identifier:   DE:24:57:CB:9A:0E:B0:AB:F5:F5:B2:7D:4C:19:A0:CE:C8:83:51:22
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       0C5559
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/5f76aa1c55ba39a20ac12ec117d5d41e7ca62013.roa
Signing time:             Fri 28 Jul 2023 00:01:16 +0000
ROA not before:           Thu 27 Jul 2023 00:01:16 +0000
ROA not after:            Mon 28 Jul 2025 00:01:16 +0000
asID:                     272062
IP address blocks:        181.232.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808281 (0xc5559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Jul 27 00:01:16 2023 GMT
            Not After : Jul 28 00:01:16 2025 GMT
        Subject: CN=5f76aa1c55ba39a20ac12ec117d5d41e7ca62013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:60:87:db:68:49:fb:16:c9:3f:40:c7:53:
                    26:f1:ab:91:fd:bc:65:20:d8:ea:56:6c:82:ee:6b:
                    fb:2c:25:c1:c5:a3:e7:ee:50:68:51:ee:be:1e:34:
                    b5:9d:28:59:1a:ef:7a:52:3c:9b:d4:cd:25:6f:32:
                    83:f2:7e:15:0f:a4:39:9b:75:ca:5d:82:e6:d0:4f:
                    e9:1f:66:03:be:b8:dd:4d:5b:a3:f6:be:37:32:54:
                    88:61:cd:98:77:49:95:a6:03:82:31:55:3d:3b:94:
                    d5:15:0e:51:89:37:55:fb:6e:36:3b:3c:fb:45:5f:
                    37:f9:37:76:12:19:40:e5:f5:45:ea:81:00:23:10:
                    e6:bb:85:fc:2b:7f:eb:4d:9b:ee:d8:83:6c:c1:79:
                    e9:72:4b:b4:06:56:84:47:fd:95:33:7f:57:53:a2:
                    f3:1f:98:d4:67:72:17:b3:1e:ee:58:39:fa:58:6c:
                    68:19:f3:41:84:83:84:3e:d2:48:dd:f5:fe:b1:37:
                    be:f1:ad:3f:8f:4a:76:b0:dd:aa:61:87:07:2e:14:
                    ed:e1:27:10:e7:fd:1c:35:c3:64:d5:bc:ba:c4:63:
                    23:1f:ce:28:89:94:d5:ac:b1:2d:39:93:6c:4f:8c:
                    2e:66:52:6e:73:05:e9:ec:dc:7b:a0:9c:59:b6:9b:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:57:CB:9A:0E:B0:AB:F5:F5:B2:7D:4C:19:A0:CE:C8:83:51:22
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/5f76aa1c55ba39a20ac12ec117d5d41e7ca62013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:40:a8:e5:c9:b8:6e:27:f0:5c:b2:26:de:16:49:db:d9:94:
         75:c9:21:52:d4:62:55:e1:e8:22:98:d4:d2:5a:2b:94:5b:c4:
         31:65:8b:97:ff:ea:07:31:00:90:e1:8b:25:98:60:91:58:25:
         e2:9b:73:13:06:c2:af:77:0a:e5:f5:74:37:f9:cf:de:d8:b9:
         6f:af:26:8e:ee:34:4a:00:5a:d0:9b:2e:ca:f6:e7:fd:0a:88:
         91:a8:1e:d5:20:42:e6:f5:29:41:85:fc:3e:02:32:a5:f6:fe:
         8f:40:cb:e5:5f:49:08:be:e4:c9:52:19:3c:c2:56:6d:53:8f:
         3a:2a:4a:18:1c:fd:53:c4:86:af:69:d7:49:2a:03:6e:c9:29:
         83:63:64:fd:6d:42:4d:2f:8c:7a:24:d1:e0:41:cb:85:9e:ac:
         95:5f:0b:06:be:7f:cd:9c:c7:59:eb:b6:1d:ca:1a:6d:01:c9:
         5f:fc:17:94:48:93:07:6f:52:d7:a1:fc:19:97:e5:72:09:45:
         d0:3a:04:d3:1c:d2:39:a6:5b:ab:11:c1:33:b8:36:6c:29:64:
         ab:99:e3:12:51:3d:f9:60:01:78:9f:5d:00:9d:24:c4:0b:f7:
         07:40:10:df:6f:2d:82:80:ee:c0:86:a7:65:e5:87:c9:53:87:
         dd:b3:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org