Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/0b00b51e63eb1542fe260857fdf31933bb8f2bf5.roa
File:                     0b00b51e63eb1542fe260857fdf31933bb8f2bf5.roa (raw, json)
Hash identifier:          Vk1an3NRxlLqzd8//urwcC/VDkmG8O2QOfGFBR4E7qE=
Subject key identifier:   01:60:5C:21:AA:47:17:83:DE:9E:75:61:E2:04:4F:7C:EA:4B:41:58
Certificate issuer:       /CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
Certificate serial:       1A536C
Authority key identifier: 5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/0b00b51e63eb1542fe260857fdf31933bb8f2bf5.roa
Signing time:             Fri 24 Mar 2023 08:30:56 +0000
ROA not before:           Thu 23 Mar 2023 08:30:56 +0000
ROA not after:            Sat 22 Mar 2025 08:30:56 +0000
asID:                     265758
IP address blocks:        131.196.180.0/24 maxlen: 24
                          131.196.181.0/24 maxlen: 24
                          131.196.182.0/24 maxlen: 24
                          131.196.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725292 (0x1a536c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abe2ac2ba1ffec9d515a411e7a95b6d078dece7
        Validity
            Not Before: Mar 23 08:30:56 2023 GMT
            Not After : Mar 22 08:30:56 2025 GMT
        Subject: CN=0b00b51e63eb1542fe260857fdf31933bb8f2bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:67:8c:fb:c3:37:16:7d:68:3c:55:98:17:
                    e2:f4:f4:39:79:ca:ba:45:7b:65:1f:d9:6b:f0:4a:
                    8a:ce:87:73:a4:20:d7:28:96:40:7e:2e:bb:13:3b:
                    37:c4:83:95:d8:4c:5f:99:00:36:5a:d9:73:d5:aa:
                    87:74:3f:14:7d:80:f3:5d:5d:46:67:2c:ba:58:34:
                    64:84:a2:6e:af:6b:24:1e:4d:12:63:35:d3:38:e0:
                    d8:0b:07:56:48:b9:b9:8d:26:0b:e7:82:f9:28:3f:
                    36:fd:e1:35:1f:dd:45:c9:cf:a2:a3:02:16:b1:a5:
                    bd:41:39:e0:b4:ca:ae:97:93:cb:10:f2:ae:4f:fd:
                    ed:e4:e4:b3:1f:fb:a2:ed:8a:6b:e2:b3:5c:aa:4f:
                    fb:84:03:47:a8:81:74:69:03:06:69:88:c3:9f:56:
                    1c:7e:9f:40:37:79:ba:b6:fe:5c:b6:8f:53:fb:bd:
                    7a:3d:d9:f7:ad:a7:86:1d:a3:dd:4c:4e:0a:fb:e7:
                    2b:f4:4b:b8:b2:a4:35:5f:09:6c:03:c5:f0:0e:84:
                    fb:73:c4:c6:d5:09:2b:6f:94:89:7f:91:84:e1:c0:
                    d6:66:e3:fc:9c:7d:c3:92:f9:68:79:5d:38:94:fb:
                    58:b8:db:eb:df:e4:0b:7a:34:99:16:fa:8e:de:f8:
                    3d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:60:5C:21:AA:47:17:83:DE:9E:75:61:E2:04:4F:7C:EA:4B:41:58
            X509v3 Authority Key Identifier:
                keyid:5D:D7:DA:31:C4:60:C1:6F:F4:C1:F6:94:A0:E0:5F:BB:14:41:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/0b00b51e63eb1542fe260857fdf31933bb8f2bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d4776f5-a741-4bc6-ae13-1f48aeb96290/7abe2ac2ba1ffec9d515a411e7a95b6d078dece7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:51:c3:dc:09:13:4d:8c:e5:66:18:ca:60:47:4d:f4:50:80:
         7e:b8:b0:d2:8d:8e:13:52:9e:c2:01:60:33:69:19:98:76:a7:
         d6:4f:b5:cc:6a:6e:c2:5f:58:3e:f2:c8:85:03:1a:c4:41:75:
         ef:fd:17:9d:88:f8:29:7e:87:7b:12:8c:10:e4:93:2a:be:39:
         bb:2c:0c:47:b7:22:9a:40:f2:95:d0:e9:94:32:05:cd:da:18:
         2e:9a:1b:8c:d0:18:f9:55:1b:50:0c:0e:ad:a1:09:14:f3:bf:
         ac:01:97:00:0b:d8:e2:2c:9c:5d:71:14:70:b1:7d:d2:1f:62:
         ae:58:16:ff:b5:ef:86:53:15:21:8a:e1:b8:0f:e1:40:31:f9:
         1e:9f:b9:58:55:de:04:15:63:03:57:78:54:20:f9:f3:c0:03:
         72:04:f5:c8:f4:6c:45:a1:99:5e:66:a1:e5:c5:89:56:61:0e:
         34:a2:03:df:ec:fd:a6:4a:47:a2:21:47:5c:5b:35:78:cc:46:
         95:09:6b:c8:98:80:18:d1:ae:fd:92:2f:42:cf:99:1c:b8:5f:
         d3:9c:9b:8d:d5:2f:94:ba:c0:e9:d7:55:c2:4e:e6:c5:f4:b9:
         07:cb:30:79:bb:f7:e2:b4:c9:0c:73:6a:14:1e:bb:b8:8f:40:
         e6:7d:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org