Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73fa76d3-3e9d-43e6-9b52-dc207367dcc4/6f4a2c00c8b575961be548778814511b0899b70c.roa
File:                     6f4a2c00c8b575961be548778814511b0899b70c.roa (raw, json)
Hash identifier:          jZpfLFxYnSyS9J6z3X02Mf80ckEcq7a0/g5nGsx+SKw=
Subject key identifier:   D9:40:35:0A:B0:C7:07:E5:12:50:3E:5D:04:50:84:12:03:0D:9C:58
Certificate issuer:       /CN=ebf8b7eb8bb5642ffab950ca9361c3bc39aaa193
Certificate serial:       12127F
Authority key identifier: 5C:E8:97:F5:09:73:92:11:AA:26:4B:77:AF:9A:B1:6E:3C:14:97:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf8b7eb8bb5642ffab950ca9361c3bc39aaa193.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73fa76d3-3e9d-43e6-9b52-dc207367dcc4/6f4a2c00c8b575961be548778814511b0899b70c.roa
Signing time:             Thu 25 Jan 2024 20:27:37 +0000
ROA not before:           Thu 25 Jan 2024 20:27:37 +0000
ROA not after:            Sun 25 Jan 2026 20:27:37 +0000
asID:                     13489
IP address blocks:        181.233.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184383 (0x12127f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf8b7eb8bb5642ffab950ca9361c3bc39aaa193
        Validity
            Not Before: Jan 25 20:27:37 2024 GMT
            Not After : Jan 25 20:27:37 2026 GMT
        Subject: CN=6f4a2c00c8b575961be548778814511b0899b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:b4:bb:35:e6:f2:cc:ef:e4:ae:55:f3:4b:
                    85:4f:40:2b:f3:15:a0:7b:3d:16:f2:1b:8e:16:2a:
                    5a:24:93:7f:47:58:92:a0:45:d5:17:3d:bb:3e:af:
                    58:a4:27:eb:b7:60:26:c5:fe:4c:b3:50:46:e7:69:
                    02:13:25:e5:f8:90:ed:b4:db:47:d0:6e:7f:fd:72:
                    58:22:d6:72:60:a8:d4:c7:fe:37:73:6b:a5:c6:6f:
                    03:9b:dd:95:6f:e5:4a:23:1c:d9:83:11:57:73:5d:
                    ab:6d:62:13:7c:9c:b8:f3:57:a2:d5:bb:9f:ce:a5:
                    2c:e9:f4:5b:c2:32:30:2e:a6:e8:c7:5f:39:30:67:
                    66:af:7b:46:44:b7:e8:54:87:d0:dc:df:8f:24:b0:
                    c8:b7:89:c0:b5:e0:df:46:f9:6e:f5:dc:96:e0:48:
                    90:94:d1:34:34:4c:5e:c8:a1:f8:1f:95:68:2c:aa:
                    f0:de:4d:93:99:91:8a:b5:3f:66:75:87:32:a0:64:
                    6d:de:9d:d0:33:71:42:09:5b:da:87:4d:9b:26:43:
                    f7:44:11:73:e3:ab:0f:fc:f6:1b:9e:ed:a4:71:b1:
                    0f:d6:d5:a1:37:fd:c1:d5:b6:76:b9:e6:12:b4:fe:
                    15:2a:06:13:bf:9b:ca:56:d7:f4:89:f9:f7:3a:f6:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:40:35:0A:B0:C7:07:E5:12:50:3E:5D:04:50:84:12:03:0D:9C:58
            X509v3 Authority Key Identifier:
                keyid:5C:E8:97:F5:09:73:92:11:AA:26:4B:77:AF:9A:B1:6E:3C:14:97:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebf8b7eb8bb5642ffab950ca9361c3bc39aaa193.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73fa76d3-3e9d-43e6-9b52-dc207367dcc4/6f4a2c00c8b575961be548778814511b0899b70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73fa76d3-3e9d-43e6-9b52-dc207367dcc4/ebf8b7eb8bb5642ffab950ca9361c3bc39aaa193.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:61:53:a7:0b:6a:ef:72:ce:98:ab:18:47:40:c3:a7:60:
         7f:16:0c:31:71:51:dc:1f:9e:d9:46:12:c8:e6:7f:9b:c5:4a:
         2b:3a:1a:78:c5:ef:eb:47:14:82:00:32:39:68:ca:57:0f:bb:
         24:f5:54:1e:d2:c2:b4:25:b2:ca:b5:eb:af:7c:75:72:3f:0a:
         83:26:34:96:3f:1f:b9:ef:87:04:25:bb:62:9c:b9:79:f3:04:
         e2:ae:47:88:9a:d7:c9:f4:c9:5e:b7:13:48:a5:6c:b4:48:17:
         4d:17:aa:48:75:c3:a0:7e:03:aa:04:cf:58:1b:1a:ff:12:9c:
         27:b9:d8:99:b1:d7:0d:10:ff:ed:88:d3:5f:48:f4:2a:e7:3c:
         82:a5:4a:11:c8:94:2e:95:46:5f:2d:06:28:6b:74:5f:30:59:
         6e:7f:e3:a3:a8:fd:ee:87:ed:25:c4:4f:08:c1:57:8f:5c:eb:
         61:29:d2:75:ce:47:73:0b:71:22:a9:8b:d5:6d:c1:98:fd:e8:
         70:3e:ac:c8:83:a0:62:41:a7:95:ae:0c:6f:08:b3:48:04:ac:
         38:4c:a4:bc:69:2b:48:b8:7e:a8:f1:7a:06:65:be:fa:19:de:
         6e:70:31:96:d4:2d:e1:46:ad:61:0e:fb:37:e2:19:94:e1:df:
         16:c9:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org