Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/6a849685b87b10315ebef797e3aec1ba0c81ad4f.roa
File:                     6a849685b87b10315ebef797e3aec1ba0c81ad4f.roa (raw, json)
Hash identifier:          8h01cLkCvDzWYtZLDuQCRHMEVMuuyEF5Yn3XqEa0wD8=
Subject key identifier:   0D:CC:BD:5D:A4:0B:84:FC:23:43:EB:AB:B7:BE:7C:0C:C2:F9:69:3F
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       207559
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/6a849685b87b10315ebef797e3aec1ba0c81ad4f.roa
Signing time:             Thu 08 Jun 2023 08:30:10 +0000
ROA not before:           Wed 07 Jun 2023 08:30:10 +0000
ROA not after:            Fri 06 Jun 2025 08:30:10 +0000
asID:                     265777
IP address blocks:        181.191.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127193 (0x207559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  7 08:30:10 2023 GMT
            Not After : Jun  6 08:30:10 2025 GMT
        Subject: CN=6a849685b87b10315ebef797e3aec1ba0c81ad4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:62:02:9a:ad:5c:74:b5:df:17:58:d7:04:
                    83:df:1f:73:db:46:02:3f:b1:f7:a1:15:e4:54:29:
                    45:2e:1a:92:2c:f8:89:2b:2e:7f:55:08:d6:9d:ab:
                    78:31:6e:ef:fe:39:aa:62:07:cf:74:97:5d:41:a0:
                    f6:20:75:aa:bd:44:50:df:e2:8f:f0:6d:d3:d0:7e:
                    de:e4:42:6a:18:e0:4f:4f:a4:fe:08:8b:48:66:e1:
                    09:d0:73:99:8e:4e:18:10:b5:f3:24:26:c1:38:b0:
                    98:66:95:db:c6:47:62:99:98:17:25:a9:fc:d0:e0:
                    8e:6e:5d:e7:08:cd:93:de:93:93:84:db:ee:76:cb:
                    34:42:66:77:c1:0f:a9:0c:8a:3f:6d:48:0a:a3:18:
                    bf:b7:e5:ab:4d:d5:4a:e5:a9:d3:65:d4:f9:b2:bd:
                    31:95:33:85:34:58:8a:65:e7:1d:d6:7d:ec:63:2f:
                    70:76:ff:ff:b1:49:91:ad:c9:1d:ba:6f:de:2c:9d:
                    35:22:37:0c:54:1e:a1:fa:eb:01:96:0b:95:8c:a9:
                    49:a5:22:a0:ac:e5:cf:53:7e:ae:80:6c:c2:9c:0d:
                    44:c4:66:d8:c5:4b:1f:3e:53:96:43:ef:56:7e:70:
                    a0:e7:bd:e7:0a:a0:c8:c7:2f:5f:93:2d:54:35:89:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:BD:5D:A4:0B:84:FC:23:43:EB:AB:B7:BE:7C:0C:C2:F9:69:3F
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/6a849685b87b10315ebef797e3aec1ba0c81ad4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:f5:05:08:c2:65:ee:01:d6:b5:5e:a7:54:cb:8a:7c:f3:
         b1:5b:b4:0e:0a:1d:b0:f2:7b:b7:e1:b2:05:8a:dd:30:bd:e6:
         1e:c2:60:02:53:12:48:77:20:5e:41:b8:da:60:ea:3e:eb:e8:
         aa:e1:e1:e2:a5:44:a2:b9:0f:51:67:bc:b2:e7:71:24:69:72:
         55:4f:8f:b1:f1:02:61:d9:6e:1c:00:ec:28:d0:5c:75:46:b3:
         ae:84:90:3b:b4:ae:f4:f3:9f:c2:23:55:e3:eb:2e:8f:20:32:
         e4:7a:63:e8:e1:1e:8f:a1:b3:9b:d7:5d:e1:09:c9:11:88:9f:
         97:84:48:38:30:86:29:24:fc:b7:74:4e:4a:b6:bf:56:ed:70:
         02:47:04:bf:37:1c:ef:88:b4:05:11:ea:24:e1:aa:70:c7:07:
         41:ca:44:50:a7:c0:61:d7:93:d0:89:19:3c:5e:6a:46:6a:da:
         67:ec:ad:1a:f1:e9:59:ae:f1:ed:9c:31:df:79:0d:ae:df:ea:
         40:ff:6e:1b:b7:fd:3e:50:c3:6f:df:ad:f9:94:a7:4a:e2:71:
         b1:33:55:4b:2a:e6:7a:97:7b:14:96:0c:56:7d:31:66:96:cd:
         bf:e2:de:28:cc:0e:b6:5b:20:d0:f4:0a:94:8f:00:0a:ac:ee:
         33:80:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org