Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/aea5831609e47ee22c75ae2855f9dc59bcc80de3.roa
File:                     aea5831609e47ee22c75ae2855f9dc59bcc80de3.roa (raw, json)
Hash identifier:          JgaFJ8uO62EjZDQV81HGNdzeKaFJsbXKIGbfUMN/mUI=
Subject key identifier:   BB:7A:74:50:2C:CC:F9:3B:66:43:10:D9:5B:A2:2E:80:65:C1:7A:CA
Certificate issuer:       /CN=75ca6b0d77865de43b29133289fdba29f69c958f
Certificate serial:       202FAD
Authority key identifier: 23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/aea5831609e47ee22c75ae2855f9dc59bcc80de3.roa
Signing time:             Wed 05 Apr 2023 16:23:54 +0000
ROA not before:           Mon 03 Apr 2023 15:36:51 +0000
ROA not after:            Sat 05 Apr 2025 15:36:51 +0000
asID:                     264831
IP address blocks:        181.114.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109357 (0x202fad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ca6b0d77865de43b29133289fdba29f69c958f
        Validity
            Not Before: Apr  3 15:36:51 2023 GMT
            Not After : Apr  5 15:36:51 2025 GMT
        Subject: CN=aea5831609e47ee22c75ae2855f9dc59bcc80de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:93:e3:be:b0:57:78:e7:04:c7:3b:62:e5:
                    de:9c:ed:27:b6:bd:72:cc:4a:95:69:89:4c:6f:c7:
                    5a:fe:a5:76:d8:65:88:1e:f7:9d:77:54:c0:01:16:
                    33:a0:4c:f0:db:f9:df:db:6e:de:76:e1:79:7c:79:
                    b6:ee:1e:29:65:f3:a8:19:b6:93:60:88:47:13:24:
                    ec:a8:f2:dd:33:a5:1a:62:6f:e2:35:f9:a7:65:20:
                    99:d8:82:6c:2f:d5:75:7c:88:9a:c0:40:1a:d7:b5:
                    f3:1f:54:8f:2c:74:3c:2b:07:4a:5b:54:38:1a:a8:
                    d7:31:a3:ea:e5:ac:69:64:17:01:ed:d7:36:96:7f:
                    5f:9b:2d:59:92:22:f1:c1:61:f5:70:4f:3c:80:4d:
                    38:fe:8b:6e:9e:34:71:5d:2c:f3:89:84:44:b1:56:
                    67:bc:37:ad:10:a8:f1:9f:5d:76:f5:fd:8c:0b:b7:
                    14:31:0e:b8:70:5a:d1:57:95:dc:4e:46:82:40:8a:
                    89:08:88:e1:03:40:27:cf:58:69:ca:f1:7a:8f:a3:
                    59:55:91:d0:f0:bd:50:f0:93:cc:d0:ea:70:51:57:
                    1f:87:6a:b0:c6:b7:73:1c:15:fd:b8:6a:d0:bb:4a:
                    ab:f1:69:6c:f8:ab:0f:75:4a:fe:41:94:74:55:ae:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:74:50:2C:CC:F9:3B:66:43:10:D9:5B:A2:2E:80:65:C1:7A:CA
            X509v3 Authority Key Identifier:
                keyid:23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/aea5831609e47ee22c75ae2855f9dc59bcc80de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/75ca6b0d77865de43b29133289fdba29f69c958f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:3f:17:9c:1e:f4:ee:f3:12:39:05:5a:c5:d2:21:fb:84:
         5b:72:17:86:9b:51:1b:86:a1:b6:bf:a7:5a:4e:83:56:d0:dd:
         70:14:f4:ec:32:be:7b:fa:eb:1e:4c:b2:ec:62:f8:fc:00:7f:
         16:8d:df:a0:4b:02:55:22:47:aa:86:20:08:29:70:c7:5c:7a:
         49:6f:8d:02:e0:88:0d:bb:20:8c:f9:49:99:b7:f1:0a:d2:6e:
         17:91:eb:32:22:5e:08:4d:22:0f:ce:19:23:00:e6:f6:bd:d8:
         76:2e:b8:ca:d8:91:c1:ab:72:3a:f2:d7:b4:7c:6f:89:f3:18:
         dd:1c:39:c9:73:2a:19:35:70:f3:91:6e:0a:28:77:bc:af:bf:
         ca:b7:11:9d:b3:e3:0e:f9:b8:cf:48:a3:79:7d:e5:4a:c0:d3:
         3e:0f:53:d1:9b:a9:6a:20:39:27:d3:ff:f4:2d:ec:65:79:3b:
         00:28:b0:3f:a5:c6:44:43:c6:96:4e:f6:93:ba:7d:a4:ba:2d:
         64:af:32:f1:bf:b4:a7:79:9b:b1:57:e5:79:c4:58:ea:26:de:
         cf:2a:4c:e9:2c:6c:62:cb:62:48:63:52:25:0f:61:e5:1e:0f:
         a9:89:c6:c4:7c:42:96:07:59:fd:5d:0f:6f:88:c1:0f:8a:38:
         7e:8c:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org