Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc.roa
File:                     ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc.roa (raw, json)
Hash identifier:          jC4cpUA2VIiu8URN4rzhxuyYADFYrROsd8WwbAlD70Y=
Subject key identifier:   B6:62:EB:6B:84:DE:C2:50:2B:C5:B9:DC:49:1E:11:6D:46:4A:03:97
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       0C4BEC
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc.roa
Signing time:             Fri 28 Jul 2023 00:00:19 +0000
ROA not before:           Thu 27 Jul 2023 00:00:19 +0000
ROA not after:            Mon 28 Jul 2025 00:00:19 +0000
asID:                     272062
IP address blocks:        181.232.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805868 (0xc4bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Jul 27 00:00:19 2023 GMT
            Not After : Jul 28 00:00:19 2025 GMT
        Subject: CN=ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:0b:77:32:79:89:e4:1e:4b:cd:45:72:06:
                    4a:bd:2e:d3:8b:fb:a7:08:69:52:11:fb:51:ff:05:
                    5e:5a:e8:3b:bc:18:33:35:d3:1a:f1:7f:d5:8e:06:
                    c5:b9:85:60:ba:75:0f:f4:a5:2d:87:7c:9c:16:8f:
                    55:16:d8:48:5d:4a:1d:74:ad:d7:0e:55:52:f2:d3:
                    d3:36:41:40:2a:c2:43:9d:52:f0:cc:6a:1c:8d:18:
                    ec:df:fa:d4:0e:ab:9b:31:07:27:ca:15:cc:e2:90:
                    72:cc:01:bc:39:09:fe:c6:9a:c2:45:1b:c2:a2:78:
                    74:3a:76:01:be:1e:c4:f7:da:bf:7c:65:93:12:5d:
                    b5:23:71:37:4a:b7:41:de:57:80:3e:34:ab:1b:3b:
                    9f:c2:bc:b0:7b:02:fd:23:e2:0b:3e:12:0a:e1:76:
                    2e:09:3b:1f:68:82:9c:a5:1c:e5:b2:47:6d:c1:99:
                    af:a5:2e:34:5d:4c:37:68:7b:34:08:75:85:ed:0e:
                    6a:1d:f2:15:ce:41:f6:e7:31:16:85:1d:a3:cb:8d:
                    b7:ce:11:98:83:47:0d:20:43:a1:d9:d3:6d:dc:ff:
                    42:8a:44:4e:e6:ab:b5:85:f5:d1:07:39:86:48:e0:
                    ce:99:4d:71:85:88:ab:40:a8:32:35:d3:4b:fa:e9:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:EB:6B:84:DE:C2:50:2B:C5:B9:DC:49:1E:11:6D:46:4A:03:97
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ff06c6635f391e22c0615b1ac2c3a7b0a53e0dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:80:cb:46:60:8f:53:82:f2:80:0d:85:74:db:c9:11:71:68:
         01:8f:b8:6d:85:99:f4:b1:d7:a8:ff:b8:aa:64:0f:25:2f:7c:
         4d:12:87:1d:da:55:d7:6c:f3:e4:b7:8f:45:84:fa:a7:2e:31:
         92:66:7c:34:11:de:6f:ba:65:f1:38:41:9e:48:5a:64:f6:ed:
         bc:78:6d:c8:91:86:7a:94:c0:db:4d:aa:9d:17:6b:f4:fd:06:
         3c:37:c1:8e:db:bf:72:84:1e:2f:99:6a:b6:63:d8:1d:a4:df:
         96:c0:bc:fe:5e:e0:2f:4d:33:10:be:de:ed:26:2a:66:d7:f1:
         27:44:57:62:a6:0e:6a:cc:ef:7c:d1:fa:65:55:d5:af:f4:2a:
         33:84:1a:ae:69:b4:b1:c2:7d:95:a4:01:49:7d:a1:f7:06:6a:
         e7:d3:77:55:4d:e0:cf:ba:66:f5:aa:c4:06:06:2d:f5:11:10:
         62:3f:2b:a0:ba:ae:57:2a:e1:99:65:74:43:7f:1f:80:10:91:
         37:db:b7:ba:21:c9:0d:48:1f:40:9e:93:a8:5f:be:37:64:4e:
         81:a9:81:9d:54:0e:f2:b5:99:0f:92:b0:d9:02:7c:87:e0:7b:
         4d:0c:6f:05:e9:b7:3f:51:03:1b:86:6d:68:04:f0:4e:94:e5:
         56:9f:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org