Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/e643bddd421dbccf95432c0ae3f5e0625e7422f1.roa
File:                     e643bddd421dbccf95432c0ae3f5e0625e7422f1.roa (raw, json)
Hash identifier:          +BjvELS0AGcO8nsenkdtD5fZMiQScPVT1MEb6RHwyHY=
Subject key identifier:   3C:B7:C0:D8:CE:04:CA:C5:44:66:01:0E:51:43:10:6E:72:1D:62:4B
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       0C4F74
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/e643bddd421dbccf95432c0ae3f5e0625e7422f1.roa
Signing time:             Fri 28 Jul 2023 00:00:34 +0000
ROA not before:           Thu 27 Jul 2023 00:00:34 +0000
ROA not after:            Mon 28 Jul 2025 00:00:34 +0000
asID:                     272062
IP address blocks:        181.232.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806772 (0xc4f74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Jul 27 00:00:34 2023 GMT
            Not After : Jul 28 00:00:34 2025 GMT
        Subject: CN=e643bddd421dbccf95432c0ae3f5e0625e7422f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:81:65:25:08:3a:03:3b:94:e9:8f:9d:5a:
                    69:fb:30:d4:7c:ce:ba:64:6a:46:5a:aa:53:3b:16:
                    b5:a8:06:4e:4d:51:dd:9c:d9:80:82:64:a9:be:d8:
                    03:d4:b3:4b:67:96:2a:d5:2f:2a:ac:50:ce:6d:f1:
                    63:d2:af:6c:f1:b4:28:70:4a:07:e0:00:18:a1:7c:
                    d9:c7:ea:f9:90:68:bd:81:0c:1c:8c:ca:b8:2b:df:
                    5f:90:79:8e:51:b9:e5:a3:56:00:4f:9f:c0:0e:b1:
                    e5:ba:6d:19:76:26:f8:31:ac:80:8f:ff:48:a7:74:
                    84:3a:ed:97:a4:a2:cb:06:92:ac:64:62:a0:36:54:
                    2a:b9:3b:9f:ce:b7:16:a3:3a:6e:fd:44:06:11:04:
                    ff:ac:05:18:20:5f:ad:26:3f:f1:a3:47:d4:12:95:
                    fb:09:01:2b:15:e0:ff:82:9b:2a:fa:8a:e0:c4:22:
                    7a:bf:29:2b:57:26:ec:86:19:ac:ef:99:f7:bc:b2:
                    77:75:46:6a:11:6d:40:d8:e5:15:28:cd:2b:e4:34:
                    04:a4:5b:bb:6f:14:37:66:a7:ee:52:fa:d5:a5:e3:
                    9f:7d:fa:e2:09:c6:34:ec:fd:4d:f3:73:1b:5b:d0:
                    d4:6a:30:03:9d:1a:5e:34:20:49:28:90:b2:f9:ae:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:C0:D8:CE:04:CA:C5:44:66:01:0E:51:43:10:6E:72:1D:62:4B
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/e643bddd421dbccf95432c0ae3f5e0625e7422f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:31:3d:14:9e:ec:f4:9e:0c:67:25:d2:c6:33:0a:96:7b:
         0b:32:8d:56:17:8d:a0:a5:ff:a0:2a:81:0f:cd:5c:39:8b:0c:
         b5:86:8d:cf:ab:ac:54:5b:54:eb:ca:73:a9:58:77:43:a5:40:
         5f:da:6e:09:b9:be:89:f1:b6:28:6e:c8:d8:b5:ce:8e:2f:7c:
         4a:0b:87:16:7a:a5:7a:27:8b:62:eb:0a:00:d8:66:13:d6:e1:
         df:28:b1:d5:de:0f:11:98:de:b8:65:44:28:51:34:6b:6a:11:
         97:29:7f:95:b3:b1:eb:ad:47:b7:93:8e:17:8d:b0:93:35:82:
         be:a6:ba:9b:25:81:e9:b8:3e:a1:9f:28:e0:1d:40:56:de:5e:
         01:9d:63:46:ea:d0:bc:ca:76:98:3c:d9:fb:90:27:10:5c:5f:
         3e:fb:b8:c1:08:c1:27:bb:dd:5f:ef:64:d9:de:4f:58:4a:b7:
         d3:fd:5a:41:1b:fe:43:5a:20:97:52:c9:38:d8:98:c4:04:c5:
         35:9f:cd:9f:b5:37:91:b7:6b:11:b8:f0:11:6d:4f:46:1d:c0:
         1a:e3:dc:cf:d8:c1:c8:0c:07:8b:9f:e5:51:bc:e6:d7:ab:33:
         51:40:7d:2c:13:9f:c9:81:c3:b2:92:fe:b9:7d:42:31:15:31:
         6e:f4:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org