Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/b3f52c2e944df5974e8f081e974dd8e29ddebec6.roa
File:                     b3f52c2e944df5974e8f081e974dd8e29ddebec6.roa (raw, json)
Hash identifier:          Lllz+94Npbx1QrSH0/b5MBFjHY9ayCC5sD9gUZdlIYA=
Subject key identifier:   0A:6C:C0:97:DF:5A:6B:EA:2C:61:8C:8F:4F:C4:E8:F4:3D:6F:37:5D
Certificate issuer:       /CN=75ca6b0d77865de43b29133289fdba29f69c958f
Certificate serial:       203330
Authority key identifier: 23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/b3f52c2e944df5974e8f081e974dd8e29ddebec6.roa
Signing time:             Wed 05 Apr 2023 16:24:23 +0000
ROA not before:           Mon 03 Apr 2023 15:37:14 +0000
ROA not after:            Sat 05 Apr 2025 15:37:14 +0000
asID:                     264831
IP address blocks:        181.114.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110256 (0x203330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ca6b0d77865de43b29133289fdba29f69c958f
        Validity
            Not Before: Apr  3 15:37:14 2023 GMT
            Not After : Apr  5 15:37:14 2025 GMT
        Subject: CN=b3f52c2e944df5974e8f081e974dd8e29ddebec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:cb:24:f8:bc:00:65:a4:a1:19:97:51:50:
                    64:ba:7a:b4:63:f0:b4:45:ff:b1:f3:ca:24:fa:9a:
                    e4:2b:1a:d0:20:af:6e:c4:52:92:a5:7f:8a:47:bf:
                    45:84:9e:a8:e4:60:d4:0d:01:c0:98:c2:b2:6e:b7:
                    b0:25:d6:00:fa:bd:38:09:84:7e:26:e3:2c:69:9c:
                    0b:24:be:62:d6:38:92:89:79:14:08:3b:f6:ec:b3:
                    1f:2b:7f:39:87:18:b2:44:3e:2d:df:be:13:ce:34:
                    f8:82:cf:c4:90:a9:3c:fa:63:04:d3:5b:ac:2e:b3:
                    44:53:b1:85:5d:7e:28:a9:96:d9:43:2b:1b:ff:5c:
                    53:5b:91:98:f0:16:ee:05:2b:82:9a:11:e9:3f:9e:
                    65:a7:7c:50:1b:f0:e8:ce:d3:54:2a:89:73:86:5f:
                    19:a8:f6:45:40:33:76:21:d4:ca:2f:91:60:16:95:
                    bb:0d:24:41:a1:35:0a:bb:b0:de:52:75:d7:fc:fe:
                    ce:3a:3f:bd:ff:45:24:89:c5:5a:56:81:cf:0d:f5:
                    49:12:63:b5:fc:04:c4:f5:be:b8:22:7e:b3:46:9d:
                    24:24:2d:9b:c2:7d:4f:8a:40:9e:cc:e4:9e:45:b6:
                    6e:10:bb:d6:04:e0:f8:79:95:00:19:ef:24:b6:c2:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:C0:97:DF:5A:6B:EA:2C:61:8C:8F:4F:C4:E8:F4:3D:6F:37:5D
            X509v3 Authority Key Identifier:
                keyid:23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/b3f52c2e944df5974e8f081e974dd8e29ddebec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/75ca6b0d77865de43b29133289fdba29f69c958f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:1a:07:31:ab:58:f0:db:1b:37:06:29:be:a8:ed:55:4c:ae:
         70:9a:5f:b3:52:60:f0:98:97:15:b2:59:45:b0:10:04:a3:b3:
         ff:aa:b4:72:56:50:a8:82:d2:54:e6:9b:db:8d:c4:47:f4:70:
         30:46:e0:84:2a:f8:2c:6e:ed:0e:8b:2a:42:f4:ff:ec:53:f1:
         69:c4:0d:64:ce:73:50:f3:e4:b9:36:b4:38:96:0c:8b:b2:70:
         b8:20:c4:ae:9f:44:8a:7d:ca:91:74:74:c5:67:af:6c:07:2f:
         5a:24:00:20:a5:6d:15:aa:67:15:71:ce:82:67:f6:12:4e:b3:
         41:01:48:17:40:d4:61:8f:73:ba:9a:9d:05:e4:8f:be:3d:7a:
         2b:f9:42:56:ff:9f:6e:ff:ba:a0:50:99:8d:bf:29:49:d7:78:
         fa:e4:ad:01:37:15:93:29:00:4f:8b:a4:98:64:0a:32:f7:e8:
         4c:bd:a1:b6:25:59:0d:48:ec:e2:5e:3a:ae:46:28:6a:ae:d0:
         f9:88:6a:b6:73:b6:43:56:f7:b2:e7:64:20:03:19:a3:da:f0:
         76:8c:82:ba:ef:ea:ac:f4:4e:e6:5a:72:d8:91:51:79:63:f9:
         22:68:27:92:da:7d:cf:9f:8a:91:ea:b5:73:c5:a6:d7:f1:8e:
         de:8e:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org