Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/d66572e8b50649c5bc331708c6eb71e74ccf7a7a.roa
File:                     d66572e8b50649c5bc331708c6eb71e74ccf7a7a.roa (raw, json)
Hash identifier:          BeDtk7TSJ3WXVovJ3/P6QyK1fu/KDUc1KIyJEwuBBxM=
Subject key identifier:   2F:F3:AA:3E:D8:B7:47:7B:03:E4:EB:99:76:8F:8C:84:8B:EE:B9:04
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04C4B2
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/d66572e8b50649c5bc331708c6eb71e74ccf7a7a.roa
Signing time:             Thu 12 Oct 2023 13:38:21 +0000
ROA not before:           Wed 11 Oct 2023 13:38:20 +0000
ROA not after:            Sun 12 Oct 2025 13:38:20 +0000
asID:                     23416
IP address blocks:        181.118.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312498 (0x4c4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 11 13:38:20 2023 GMT
            Not After : Oct 12 13:38:20 2025 GMT
        Subject: CN=d66572e8b50649c5bc331708c6eb71e74ccf7a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:60:2a:5c:d7:ec:03:86:f8:95:28:3a:70:
                    52:65:31:33:8e:c4:8c:53:6e:d2:15:0a:53:36:e0:
                    80:08:bd:eb:66:29:8c:95:c3:68:57:f0:fe:70:3a:
                    47:4b:5a:fd:3d:dc:64:8f:e9:f4:b4:65:54:6a:c0:
                    88:da:71:e1:7e:d4:70:da:b5:c5:d2:0a:c0:e4:25:
                    cc:db:d5:b8:83:68:81:41:35:28:2a:d4:35:cb:df:
                    ae:09:37:1f:7d:29:8a:2e:87:bb:9f:a9:19:c7:b6:
                    b5:e6:af:4d:2d:df:e5:03:55:41:df:bf:cc:3e:80:
                    e7:43:19:1d:be:22:f9:21:92:a1:78:87:4f:f5:9a:
                    6e:a0:21:1f:08:34:cc:a1:60:ac:b2:d7:7b:67:d1:
                    d5:bc:17:c1:0e:17:3c:68:d3:28:92:ce:1b:e0:f9:
                    c7:4a:06:7c:16:55:f6:3a:07:39:be:af:0c:52:5b:
                    b7:43:1c:bd:3b:37:46:70:c8:4c:14:92:c0:a0:a5:
                    39:79:1a:ec:16:a9:b6:38:df:94:c0:4c:fb:1c:9d:
                    7a:88:e6:de:2f:e7:fa:2a:c6:c8:83:9c:f0:dd:dc:
                    c2:60:d6:0f:f1:9d:8d:f4:23:43:2e:b6:58:76:68:
                    6d:82:1b:e1:bc:02:c1:a6:06:72:f9:11:c9:99:da:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:AA:3E:D8:B7:47:7B:03:E4:EB:99:76:8F:8C:84:8B:EE:B9:04
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/d66572e8b50649c5bc331708c6eb71e74ccf7a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:9b:66:cf:99:84:3e:74:21:58:77:8a:f2:f9:8b:1f:7e:
         e5:ef:4e:31:61:e0:f1:58:6e:37:54:99:37:98:cd:08:02:05:
         77:ce:14:51:a8:42:96:e4:fc:72:b5:14:f2:40:b2:42:7d:2b:
         5b:97:65:75:fb:7c:64:ec:6d:ea:5b:5c:6f:5b:2f:d9:dd:b4:
         29:11:bf:4e:75:b3:ea:73:64:fe:6d:96:06:5a:68:02:6f:f0:
         73:b7:64:bf:bc:39:3e:be:b9:ed:46:0d:97:1c:50:0d:ac:37:
         9e:19:e2:fe:e0:4e:2d:b5:ca:2e:2e:be:4f:a2:d6:0b:ce:99:
         0e:92:0b:60:bf:bf:28:16:ed:be:7d:f2:62:54:93:59:c9:87:
         52:13:2d:26:3b:5a:ac:0e:5e:46:80:05:9a:f7:86:00:f1:b4:
         87:ce:32:fc:7f:97:d1:81:39:b4:6c:68:28:b8:d2:1a:29:2e:
         fe:f4:4f:c1:7c:3e:e3:32:82:7e:7d:c9:f9:0e:c7:39:1d:c9:
         db:98:95:87:87:cf:86:7f:10:db:fc:1d:7d:90:aa:85:67:1f:
         f5:ea:ac:f1:4f:89:b9:8f:2f:a9:28:c6:f2:fc:b6:cc:4e:ea:
         40:19:96:55:7c:1e:8e:f1:3a:51:a2:40:fa:40:56:32:f4:8b:
         1a:f2:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org