Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/be514b323f6ddc31c21051682a8d90f45f697d03.roa
File:                     be514b323f6ddc31c21051682a8d90f45f697d03.roa (raw, json)
Hash identifier:          p2mpCRJnG+wtGOSYp69GM1RMHiD1FlFQtuDmkrCY5uQ=
Subject key identifier:   A6:82:94:58:C6:CF:D1:15:43:9A:E7:A6:BC:3E:B8:22:D9:99:BA:CC
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       2070E9
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/be514b323f6ddc31c21051682a8d90f45f697d03.roa
Signing time:             Thu 08 Jun 2023 08:30:09 +0000
ROA not before:           Wed 07 Jun 2023 08:30:09 +0000
ROA not after:            Fri 06 Jun 2025 08:30:09 +0000
asID:                     265777
IP address blocks:        181.191.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126057 (0x2070e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  7 08:30:09 2023 GMT
            Not After : Jun  6 08:30:09 2025 GMT
        Subject: CN=be514b323f6ddc31c21051682a8d90f45f697d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:20:a1:59:62:65:42:6e:65:a5:17:79:c0:
                    ed:e9:6f:f9:45:e9:e5:1b:5f:d9:ba:d4:da:5a:31:
                    81:30:ab:c6:06:af:76:06:08:ca:69:a5:d8:9e:a4:
                    78:a1:00:93:d3:82:59:22:9d:43:23:1d:8f:12:4e:
                    d0:e5:f9:f1:95:8f:c7:3d:db:02:31:14:da:ed:a6:
                    bd:42:37:e5:c6:47:d3:c4:c4:b3:9c:e0:95:ea:5b:
                    fb:45:57:82:f2:4a:2b:a4:33:b4:12:19:e2:26:ba:
                    f3:d3:dc:27:6c:af:34:f2:4b:5a:f2:bf:6b:22:88:
                    ac:d7:ba:2e:b4:b5:74:5f:49:ce:73:f0:d0:41:fe:
                    58:e6:0c:4f:06:ee:4c:91:58:f6:e0:7a:2a:48:88:
                    5d:b0:c0:29:aa:5a:b5:ab:e2:c5:bf:57:3d:fc:c1:
                    ac:cc:a6:09:53:a9:ed:d2:df:03:16:f6:97:d2:70:
                    86:fd:9c:4d:9e:27:63:9d:b4:f4:2a:a6:78:90:d9:
                    0a:9d:74:e7:43:b0:8b:a7:ea:29:36:ce:36:9f:16:
                    22:ce:30:09:b8:6d:d1:f9:44:6c:e5:99:1f:7b:e3:
                    70:cf:0c:6f:73:1c:97:1d:6e:1a:3e:34:94:5e:58:
                    88:4f:5b:7c:4d:09:d2:7a:e3:68:4f:d3:66:aa:17:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:94:58:C6:CF:D1:15:43:9A:E7:A6:BC:3E:B8:22:D9:99:BA:CC
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/be514b323f6ddc31c21051682a8d90f45f697d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:8e:8d:fc:de:46:1e:bc:1e:35:85:da:9d:f0:e0:14:52:
         ff:15:54:a5:dc:fa:5f:f4:62:f4:89:ce:df:81:ea:4d:d8:94:
         79:d0:da:5f:86:f2:57:17:75:91:dd:26:04:95:e5:bf:2a:9d:
         22:3e:00:6e:1a:7f:6e:44:49:c1:ce:22:78:c4:60:17:64:2c:
         09:e6:1a:fa:19:3d:51:42:87:61:62:1e:7c:61:ff:85:77:22:
         de:a7:f1:19:e3:40:25:60:c9:a5:aa:01:d0:59:90:f9:e4:e5:
         79:d0:17:ce:3e:75:52:ed:42:10:4d:f8:65:3e:b6:d6:4f:89:
         17:52:bf:e6:78:de:28:7b:a2:18:ab:ce:a6:72:ac:78:66:a9:
         77:88:53:6c:e1:ad:2d:c9:9d:a2:c3:20:ce:3d:bc:58:ed:d5:
         85:25:f8:e2:12:e2:28:bc:35:e0:9f:d1:06:84:45:c2:14:94:
         4d:16:ae:d6:57:29:79:cf:83:76:fa:ce:a0:6d:61:94:56:73:
         38:9b:92:7f:71:b4:ed:3b:dc:b2:45:fa:9e:13:9f:93:ef:d8:
         0f:90:b9:28:43:52:1d:ef:df:64:2d:c6:62:43:b7:7d:92:da:
         d9:d4:a6:7f:2c:2e:4a:37:52:8b:65:76:5c:fd:68:53:2f:f6:
         e7:e6:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org