Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/d158af0abe5986a102e6df164e0d9b7e1238aa03.roa
File:                     d158af0abe5986a102e6df164e0d9b7e1238aa03.roa (raw, json)
Hash identifier:          UrVb5pexRCTaavbVdWswN+vL8QfV9VF/Pv9DTb5npSU=
Subject key identifier:   1D:5E:65:F9:BC:03:03:FD:B5:3D:FF:3A:9E:9D:E9:53:AF:33:19:59
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       1ABA24
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/d158af0abe5986a102e6df164e0d9b7e1238aa03.roa
Signing time:             Mon 24 Oct 2022 12:11:41 +0000
ROA not before:           Tue 08 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     265777
IP address blocks:        181.191.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751588 (0x1aba24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  8 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=d158af0abe5986a102e6df164e0d9b7e1238aa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:47:ec:a3:da:de:7d:66:70:19:cc:55:04:
                    9a:30:77:59:97:01:ae:99:86:6b:dc:9f:b3:de:b0:
                    4a:51:50:02:ec:22:f9:04:33:99:fa:96:f0:2b:a7:
                    7d:c7:f9:b7:7c:4b:39:40:f3:d3:c8:ec:97:7c:bf:
                    b0:ff:98:c6:14:e8:94:ca:b7:ae:5b:74:02:3b:fb:
                    d3:1e:6e:9a:e9:42:d3:07:d6:36:62:80:c7:e1:22:
                    86:1d:c7:5a:a6:b6:0a:2b:6e:f9:fd:b3:df:32:67:
                    9d:f5:ad:5f:22:81:4d:94:60:0a:0d:33:87:01:f3:
                    6e:e8:01:b6:89:17:fc:7a:7a:61:d9:b5:16:51:f6:
                    de:ef:10:0e:26:fe:d4:a8:34:0f:a0:bd:34:19:09:
                    1c:f4:69:3c:1b:c0:21:b2:4c:1f:77:39:27:70:8d:
                    e6:53:b9:d7:37:04:e7:17:23:df:a6:15:24:58:36:
                    45:8f:e7:94:d9:a6:40:5a:0e:85:78:c3:11:e4:48:
                    af:34:8b:3a:44:37:ba:58:28:db:88:96:62:11:e9:
                    e4:e8:4a:ce:5e:d1:21:2d:58:13:69:70:dd:bf:29:
                    7a:69:72:e5:56:dc:d3:e3:f9:2a:1f:1d:10:75:e4:
                    37:98:a2:6b:c5:58:6f:7d:9f:60:51:99:6b:02:ef:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:65:F9:BC:03:03:FD:B5:3D:FF:3A:9E:9D:E9:53:AF:33:19:59
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/d158af0abe5986a102e6df164e0d9b7e1238aa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:c5:3e:f7:a9:44:9f:9a:43:b9:8d:8e:75:14:08:b8:80:
         7e:b4:a9:8f:e4:c9:75:a1:5f:55:cc:ab:b8:06:cb:8e:c4:da:
         c6:20:47:fb:20:e1:5a:95:0f:a0:ad:06:96:22:d8:4d:87:ad:
         33:cb:51:17:ca:7b:6b:8b:06:0a:41:06:d5:ed:fe:9c:0e:a8:
         a2:e8:ec:8d:c3:46:a8:f6:db:b3:fd:91:d5:48:3e:ae:6c:7e:
         93:53:9c:90:d2:46:7d:01:09:0c:25:10:02:ff:ed:5f:4c:63:
         7f:23:55:53:b2:00:d3:62:03:19:48:b0:8d:93:98:27:66:fa:
         c3:d0:7a:0f:01:e3:a6:c2:48:e3:cd:8a:a9:16:0d:35:64:6c:
         32:20:06:00:3d:a5:86:8a:11:27:d4:61:26:51:6f:91:cc:a5:
         af:be:ab:58:37:79:ac:28:ce:22:b4:5f:3b:c0:45:54:83:d1:
         24:ae:d2:67:e5:ef:95:0e:53:dd:b9:04:59:35:12:48:c9:65:
         65:07:3f:f4:c4:09:f3:14:ef:0e:45:0f:4b:c7:42:f3:56:0c:
         46:5f:95:fe:5a:13:29:1b:7e:b3:42:f3:ff:96:2b:61:78:ff:
         5e:5f:32:6c:8a:9a:ee:77:a3:32:ab:5f:c8:d6:3a:40:6f:c8:
         6f:07:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org