Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2904b760b36db76f5ebf98c74688875ba7c81743.roa
File:                     2904b760b36db76f5ebf98c74688875ba7c81743.roa (raw, json)
Hash identifier:          /f4hzyPFNAzrtBh32HMZ7eYWosxXN9AxWZyAAEbBfU4=
Subject key identifier:   10:32:C9:59:F4:1D:C2:E5:99:D1:C2:08:B6:E4:DE:B6:24:68:A1:54
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05E684
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2904b760b36db76f5ebf98c74688875ba7c81743.roa
Signing time:             Tue 11 Jul 2023 17:12:47 +0000
ROA not before:           Mon 10 Jul 2023 17:12:47 +0000
ROA not after:            Fri 11 Jul 2025 17:12:47 +0000
asID:                     7418
IP address blocks:        181.201.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386692 (0x5e684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Jul 10 17:12:47 2023 GMT
            Not After : Jul 11 17:12:47 2025 GMT
        Subject: CN=2904b760b36db76f5ebf98c74688875ba7c81743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:ff:3d:ac:a0:7e:29:fe:db:1f:c6:9b:f2:
                    9f:55:e7:d0:d7:e8:92:f4:ec:09:88:0a:05:59:c2:
                    fa:3e:4a:a6:5c:93:7b:a8:76:5e:39:d5:72:0c:89:
                    ff:9f:45:ed:49:23:48:8f:74:67:3f:bc:61:b6:a1:
                    8e:09:ea:f4:48:70:db:13:6e:4b:59:7e:cf:a6:03:
                    e0:d9:d6:6f:db:7f:e1:f4:5e:fc:26:2d:d4:3a:2e:
                    25:fa:a8:a7:fc:a8:0c:e4:0c:77:ff:02:4f:60:84:
                    fe:1d:5a:a1:09:2c:2e:a2:e7:cd:91:15:7f:ea:7b:
                    8d:de:40:22:1a:95:e1:2a:c6:19:d5:5c:09:3d:be:
                    6f:51:72:ea:62:1e:a8:90:02:fb:14:1f:b5:70:62:
                    10:e9:08:d4:f4:b1:41:f8:bc:5a:47:0f:fe:a0:61:
                    bb:56:b4:03:99:6d:83:00:1a:48:cf:11:2a:87:7b:
                    b7:fc:55:90:3e:57:3e:17:d4:d1:30:ac:0a:a5:b9:
                    57:7a:58:9d:45:f8:b4:e3:e3:99:df:5e:1a:33:46:
                    b8:bb:f9:ea:a7:22:a6:1b:ff:bd:03:af:04:ce:b6:
                    3a:8e:0b:c5:90:3f:c3:96:3f:93:0c:6f:8e:97:65:
                    ab:de:d2:6e:0c:af:ef:5e:c7:d3:78:81:c2:74:b8:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:C9:59:F4:1D:C2:E5:99:D1:C2:08:B6:E4:DE:B6:24:68:A1:54
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/2904b760b36db76f5ebf98c74688875ba7c81743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:aa:11:67:74:cd:69:61:a2:58:1e:8c:0e:6a:d5:36:c2:4a:
         64:3a:ce:89:f3:d0:8d:8e:d5:a9:5b:46:0e:bd:ff:35:09:7c:
         d8:f4:cd:d7:f7:e5:b8:9c:c8:64:b2:91:1c:22:62:ed:86:d1:
         ee:ac:ba:8c:ce:0a:82:1f:f7:3c:12:90:d0:76:e3:3b:ec:ca:
         ad:0a:95:e1:14:d4:a8:21:ad:3a:b7:23:e3:d2:ff:b7:fc:f0:
         37:53:a4:e8:19:75:5f:20:05:84:89:cd:83:f7:6a:a7:d2:3f:
         9d:31:0e:77:52:a7:0f:be:5c:14:4d:cd:8d:bb:d3:c5:6a:b5:
         de:d6:98:4b:2b:e5:6d:c5:8e:c7:6a:ef:00:30:c0:9d:26:40:
         99:cc:79:05:8e:4c:df:18:84:06:97:52:11:47:d5:a4:6b:a0:
         83:f1:fc:74:6f:32:9a:5b:ee:f3:91:b7:11:34:97:ad:69:24:
         4f:ee:f3:77:52:68:5b:1b:29:1e:13:9d:f7:3c:e2:7d:af:72:
         c4:de:91:05:22:9e:31:18:00:57:02:ed:17:40:e9:5a:a6:32:
         da:55:f4:08:7a:4a:18:7b:52:f1:82:15:ac:79:19:e5:ec:8c:
         35:46:65:52:cd:1e:69:6b:c2:02:aa:48:27:f8:0d:63:05:de:
         f4:a6:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org