Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa
File:                     ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa (raw, json)
Hash identifier:          rBB10d/vMpCY1o2RTH023bZ5ppcURfZnGjS8grHAvIk=
Subject key identifier:   9D:0F:51:67:D3:28:56:A9:CA:CA:FA:B3:8E:28:63:80:51:C5:3C:A1
Certificate issuer:       /CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Certificate serial:       1F9285
Authority key identifier: B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa
Signing time:             Fri 14 Apr 2023 08:30:01 +0000
ROA not before:           Thu 13 Apr 2023 08:30:00 +0000
ROA not after:            Sat 12 Apr 2025 08:30:00 +0000
asID:                     264764
IP address blocks:        181.114.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069125 (0x1f9285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a25370ef6240a33a5dee984da551ba55fa78abf
        Validity
            Not Before: Apr 13 08:30:00 2023 GMT
            Not After : Apr 12 08:30:00 2025 GMT
        Subject: CN=ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:2c:1e:4a:86:71:60:f7:57:f4:e2:db:eb:
                    bc:fc:bb:43:83:79:7d:8c:09:8d:5e:d7:33:e0:2d:
                    27:61:17:d0:bd:76:5b:ea:21:dd:3a:f5:87:8a:06:
                    e9:99:26:30:28:dc:c5:78:49:50:c1:33:43:32:3b:
                    86:fd:c7:8f:7a:0c:50:8a:71:a0:7a:6d:d0:16:a5:
                    46:c4:89:7f:19:fb:41:58:b9:60:70:71:69:9b:0f:
                    96:68:4a:5d:36:b5:2b:0b:e6:b3:e2:91:75:52:0a:
                    43:31:a7:f5:f4:e4:85:e7:26:02:28:26:30:f5:b2:
                    74:17:56:3a:a3:82:a2:80:c3:1c:8f:ac:6e:df:ad:
                    21:03:d1:38:81:88:7d:46:b8:1c:18:8b:92:4f:1b:
                    96:8f:54:30:05:95:4b:a1:6c:44:f2:9c:6b:b4:19:
                    e9:4d:62:f3:a2:f5:a3:70:5a:40:c0:c7:0a:eb:aa:
                    47:a6:ed:5e:e5:03:3f:63:88:ba:7d:bd:88:2d:3b:
                    6e:f5:37:43:f0:11:2f:ca:aa:b0:a8:93:be:ef:39:
                    09:35:4f:09:8f:1d:82:1d:23:a7:a5:cf:dd:01:91:
                    52:d2:50:e4:2a:f9:26:7a:ea:13:ae:c9:c4:48:3f:
                    76:67:ca:14:0a:3b:f2:15:ee:68:90:d9:bb:bb:ec:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:51:67:D3:28:56:A9:CA:CA:FA:B3:8E:28:63:80:51:C5:3C:A1
            X509v3 Authority Key Identifier:
                keyid:B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/8a25370ef6240a33a5dee984da551ba55fa78abf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:73:ea:01:51:a0:ea:a8:52:c6:25:cb:27:68:fc:58:27:64:
         02:87:78:a1:f9:ae:33:25:e0:7a:3b:47:99:d1:fb:3d:ae:02:
         7d:0b:6e:fd:9c:d1:35:d2:43:78:d0:8b:85:3c:94:4f:6f:f4:
         04:99:ec:c5:57:90:3e:11:78:18:32:2c:50:23:a4:5c:a6:c5:
         88:17:88:fe:65:14:1c:40:5d:71:55:81:87:a1:52:f9:f3:63:
         e5:f0:7a:c9:21:81:8e:8d:d9:9f:fc:40:a0:be:06:e3:5f:aa:
         81:25:4d:24:1e:5b:09:a9:04:cd:c1:22:ff:6a:98:22:1a:48:
         33:04:f1:d6:13:5c:57:c2:d1:82:21:59:fa:31:35:19:93:7f:
         14:7e:b3:15:1b:91:8d:83:2a:d5:f2:f7:2b:1a:81:81:f2:3a:
         12:38:70:9c:22:77:11:1a:a5:bf:ae:5c:38:3d:57:21:06:a5:
         38:1b:0f:55:cc:49:65:2a:cf:64:97:9a:ec:77:17:cc:44:c5:
         cc:cb:24:26:5a:54:06:29:53:b8:9e:49:e8:c2:ca:98:ec:9e:
         68:5e:f8:53:48:e9:02:3b:a0:bf:24:8b:b9:5a:53:91:8c:8a:
         2a:14:65:52:a9:b8:71:02:b8:e4:ad:98:5e:a9:72:29:ad:ca:
         b8:0f:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org