Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/835aecaae2a1b4d0fcd467a014e80b602516aa2c.roa
File:                     835aecaae2a1b4d0fcd467a014e80b602516aa2c.roa (raw, json)
Hash identifier:          7woqrV3fit7u5m499tHfXQBbD6jSL7CFtL1HpJ4OCtY=
Subject key identifier:   7B:21:0A:67:A1:F3:83:C6:86:6E:4C:84:C0:F4:47:94:47:65:47:F5
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       2069B9
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/835aecaae2a1b4d0fcd467a014e80b602516aa2c.roa
Signing time:             Thu 08 Jun 2023 08:30:06 +0000
ROA not before:           Wed 07 Jun 2023 08:30:06 +0000
ROA not after:            Fri 06 Jun 2025 08:30:06 +0000
asID:                     265777
IP address blocks:        181.191.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124217 (0x2069b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  7 08:30:06 2023 GMT
            Not After : Jun  6 08:30:06 2025 GMT
        Subject: CN=835aecaae2a1b4d0fcd467a014e80b602516aa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:99:68:f1:df:0a:b3:04:58:55:1e:fc:ab:
                    fc:bd:d6:37:88:12:18:66:d1:00:19:5d:bc:ef:50:
                    2c:64:2b:5d:e9:cd:5e:53:83:0a:4a:4f:a1:48:7d:
                    4e:6b:4b:e4:d4:bb:e0:63:0d:d7:35:29:ed:81:9e:
                    e1:ad:5d:af:31:6d:b8:cc:9a:b0:f1:d6:93:1f:68:
                    e4:b7:bb:01:ef:07:cc:34:8d:57:9c:6d:c1:19:98:
                    7f:46:1a:2a:51:86:9a:79:8c:4c:89:d2:b9:50:6c:
                    e6:4b:a5:7b:de:49:ef:e6:8b:7c:26:c4:b7:0e:44:
                    fe:9e:0f:fe:60:3a:5b:7c:08:2e:13:45:e0:e8:77:
                    7d:29:97:e8:09:2d:16:66:7b:80:31:d0:94:4f:a1:
                    c4:91:96:23:66:83:06:c8:71:77:c0:54:ce:c9:f6:
                    44:de:24:89:b9:cd:80:14:2b:45:8e:92:aa:e4:5f:
                    02:4b:62:86:4a:db:b0:0a:87:31:de:e7:d3:68:bd:
                    6a:5d:30:6f:a7:10:3f:08:37:82:43:39:8f:fb:0d:
                    e7:e8:d3:48:c3:2e:01:86:c9:0f:65:21:c3:24:ec:
                    e2:5f:6d:a4:5a:07:9e:b0:95:d2:c6:9a:a6:64:e2:
                    61:f9:64:f6:1d:1d:49:45:91:07:bb:7f:88:5f:99:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:21:0A:67:A1:F3:83:C6:86:6E:4C:84:C0:F4:47:94:47:65:47:F5
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/835aecaae2a1b4d0fcd467a014e80b602516aa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:7e:ac:6a:08:0e:f7:c9:a8:b1:9d:50:a2:39:f6:81:09:
         a7:1c:88:15:18:ef:dc:4e:b9:0c:9b:14:63:1f:69:95:11:86:
         a6:f1:1e:75:52:2c:28:05:c7:e3:19:8d:0f:d8:e7:8c:81:b8:
         5d:02:38:03:cf:bd:19:25:a8:0b:aa:55:72:46:73:b6:1b:f5:
         7c:79:0c:e7:7c:58:3e:b3:61:d3:5a:20:cd:d8:01:c6:26:c9:
         80:90:9e:3c:16:2c:84:2d:9d:84:34:66:a1:0b:db:2c:83:1f:
         73:27:80:11:0f:b1:04:d1:80:93:d2:83:0b:71:7f:2a:bb:78:
         16:c6:63:49:b9:25:53:ba:f2:1b:a2:84:c5:ed:79:56:a1:27:
         d2:08:bc:af:85:49:f9:81:fa:3b:de:1b:6d:8f:a1:0b:1b:92:
         c4:4b:3e:25:9c:e2:e2:99:5d:15:b3:06:e7:c2:4a:0b:aa:42:
         87:8e:60:84:0b:fa:e8:05:0d:de:8c:6a:49:c7:50:79:02:8a:
         19:3c:5d:1d:69:fa:2e:8e:83:30:b9:59:d3:70:41:cd:eb:d1:
         73:6d:d1:28:19:fc:f9:39:00:77:bb:59:94:57:93:2b:d7:57:
         3e:c5:9e:23:b8:06:66:ba:b6:74:41:ed:17:17:77:db:88:3b:
         74:de:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org