Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/69ac04f7c776a736e3542ff8b16a2125cd1614ec.roa
File:                     69ac04f7c776a736e3542ff8b16a2125cd1614ec.roa (raw, json)
Hash identifier:          ITRvdoe+GF1a378GEFAfxaA3yyTDcYK2c0G1Vq1mkTc=
Subject key identifier:   AB:8D:4E:71:06:36:17:0C:3A:A9:74:98:AA:0A:1D:D8:15:B4:00:14
Certificate issuer:       /CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Certificate serial:       20B1B8
Authority key identifier: BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/69ac04f7c776a736e3542ff8b16a2125cd1614ec.roa
Signing time:             Fri 21 Apr 2023 15:09:03 +0000
ROA not before:           Thu 20 Apr 2023 15:09:03 +0000
ROA not after:            Mon 21 Apr 2025 15:09:03 +0000
asID:                     263170
IP address blocks:        181.114.56.0/24 maxlen: 24
                          181.114.57.0/24 maxlen: 24
                          181.114.58.0/24 maxlen: 24
                          181.114.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142648 (0x20b1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
        Validity
            Not Before: Apr 20 15:09:03 2023 GMT
            Not After : Apr 21 15:09:03 2025 GMT
        Subject: CN=69ac04f7c776a736e3542ff8b16a2125cd1614ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:bc:0a:51:9a:36:2f:24:0e:56:33:56:81:
                    e2:a3:60:39:95:4b:9d:d0:82:50:71:77:d7:fe:3d:
                    5d:f8:08:bb:be:f2:18:94:23:93:87:83:c0:53:e0:
                    d1:b8:0a:3c:49:ea:7f:c4:0a:40:c7:93:4b:99:20:
                    31:9c:c7:27:4f:52:cf:fe:de:b5:1f:ac:27:19:89:
                    1d:83:55:36:00:e2:72:52:50:96:54:c8:a7:1a:f6:
                    99:2e:88:60:22:f7:49:cb:f7:c6:4d:85:23:3f:05:
                    8e:2b:3b:5d:39:dd:c1:0b:e9:fe:fe:08:0a:46:ab:
                    1f:15:cf:04:62:f9:d6:c7:f5:2e:ed:71:99:45:e2:
                    ac:01:7b:62:b7:a6:a1:bd:f4:a2:d7:3a:92:7c:6f:
                    e9:b1:03:cc:a0:39:25:6f:ad:f7:d9:6c:3e:e3:ea:
                    95:6f:2f:8a:74:6d:65:83:3b:67:67:44:64:ec:f1:
                    7f:9f:3e:22:27:64:34:ec:b5:30:3a:1e:cf:65:82:
                    56:9a:d6:c8:1e:04:12:eb:9e:ff:42:42:26:f9:e7:
                    3d:55:0a:23:9d:fc:92:1e:3f:5e:5b:d1:99:81:26:
                    57:23:3a:13:9f:19:33:ca:b5:96:0a:ad:bd:be:a0:
                    19:24:85:1d:08:10:b0:e8:96:02:0e:df:7d:03:1a:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8D:4E:71:06:36:17:0C:3A:A9:74:98:AA:0A:1D:D8:15:B4:00:14
            X509v3 Authority Key Identifier:
                keyid:BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/69ac04f7c776a736e3542ff8b16a2125cd1614ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/978e7d88424415725f3aaf2277c4a6e9a5313d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:8f:e0:85:85:c2:1d:41:e2:af:a8:8f:81:35:ed:4d:48:
         71:f5:54:0d:0b:0f:f5:73:23:8b:e5:b6:ca:f9:ab:e2:88:00:
         5a:eb:72:a8:b1:32:b5:e3:1c:0e:b6:fd:b4:ab:1a:0c:7e:95:
         2e:8e:31:9f:df:59:06:cf:4a:2f:58:1b:18:b5:ec:e0:f6:f4:
         69:a2:24:60:dc:9f:6a:06:85:8b:e5:30:89:9b:60:f5:cc:b4:
         3b:de:91:71:42:6c:6f:f6:12:e6:d0:f3:90:27:a0:71:61:50:
         74:e8:ff:e7:73:e3:d3:93:00:5a:79:02:76:75:ad:08:d5:8e:
         dc:94:34:d2:80:bc:5a:3e:c8:af:07:d4:91:4b:60:1c:9a:2e:
         57:58:87:59:9c:20:79:ba:17:02:f9:55:3a:95:ec:02:28:e6:
         9f:90:03:bc:27:b1:40:70:33:bd:47:9d:4c:83:e4:ba:92:8a:
         a1:57:6e:fe:44:6b:c1:86:17:fa:af:fd:e4:f8:a9:62:c0:57:
         79:1d:c5:6b:6f:5e:07:a7:53:60:07:30:49:50:90:07:dc:ab:
         85:ba:aa:3e:09:57:7b:7c:0b:b2:ad:71:5e:c2:58:db:fd:b4:
         b1:4f:98:10:0c:5a:21:c5:41:20:e1:f6:fe:b8:a7:85:ea:97:
         4a:e0:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org