Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/eae25b226edceb12b0b9650d953b72302d7badad.roa
File:                     eae25b226edceb12b0b9650d953b72302d7badad.roa (raw, json)
Hash identifier:          fKRl0rMdFRm5LOnm09FmCLE4n/PMKOZQU+AlDwlqDVQ=
Subject key identifier:   DE:A6:D6:76:78:29:CE:41:72:EB:3C:19:6D:29:90:49:12:75:F5:24
Certificate issuer:       /CN=75ca6b0d77865de43b29133289fdba29f69c958f
Certificate serial:       20158C
Authority key identifier: 23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/eae25b226edceb12b0b9650d953b72302d7badad.roa
Signing time:             Wed 05 Apr 2023 15:37:13 +0000
ROA not before:           Tue 04 Apr 2023 15:36:51 +0000
ROA not after:            Sat 05 Apr 2025 15:36:51 +0000
asID:                     264831
IP address blocks:        181.114.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102668 (0x20158c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ca6b0d77865de43b29133289fdba29f69c958f
        Validity
            Not Before: Apr  4 15:36:51 2023 GMT
            Not After : Apr  5 15:36:51 2025 GMT
        Subject: CN=eae25b226edceb12b0b9650d953b72302d7badad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:66:f3:83:ec:e5:71:84:90:69:8e:17:a6:
                    73:38:f8:72:9a:b6:c1:f7:2b:4a:22:ac:03:2d:73:
                    7f:ba:fa:21:bb:78:fd:bc:d8:4d:9d:aa:39:29:27:
                    df:42:91:9e:13:48:58:e9:26:93:d4:c3:ef:18:5c:
                    9a:72:ff:a3:86:81:32:47:21:98:cb:eb:aa:85:76:
                    a0:72:d7:e3:18:9b:74:e1:16:63:6d:d5:7a:f0:f7:
                    ca:43:50:53:83:ea:93:d4:26:3a:e3:83:9f:0e:83:
                    dc:47:43:59:07:c1:de:bb:3d:71:13:97:22:7a:02:
                    4b:5b:e5:ac:b1:ef:fd:05:8a:c2:dc:be:60:06:33:
                    47:ab:f2:fd:62:cd:53:68:f2:03:ef:b6:58:35:92:
                    d9:bc:28:bb:9b:2d:d0:a7:0e:e3:c2:ca:c6:04:8d:
                    10:37:a3:5b:83:91:c8:c3:f9:43:2b:4d:f4:38:b9:
                    cf:6b:95:df:4c:db:10:7a:7b:a1:40:c7:49:70:05:
                    61:a3:e6:01:fb:0d:ed:c7:1b:28:ea:4e:a7:5f:ea:
                    e6:00:c3:f9:2c:bd:1a:5b:52:65:50:cc:48:1c:cf:
                    27:55:61:4e:be:d3:bb:8b:a8:58:27:57:68:49:6f:
                    ee:39:e1:86:97:f8:fd:2f:72:f2:35:43:78:78:90:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:D6:76:78:29:CE:41:72:EB:3C:19:6D:29:90:49:12:75:F5:24
            X509v3 Authority Key Identifier:
                keyid:23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/eae25b226edceb12b0b9650d953b72302d7badad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/75ca6b0d77865de43b29133289fdba29f69c958f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:34:64:2b:16:68:33:25:67:21:b5:85:d0:8b:4d:21:d2:38:
         da:b1:cb:d7:9c:41:3d:85:aa:6e:dd:07:cb:6b:8e:77:59:c4:
         50:83:80:c8:93:8a:38:b4:8f:54:8f:76:86:94:24:b8:10:7c:
         82:15:62:7a:e5:c0:08:67:37:33:57:56:08:14:85:2d:f6:a6:
         d3:0e:19:aa:0b:ce:d6:5f:1b:4c:7e:62:39:31:98:da:7c:70:
         8a:c0:19:5d:17:73:91:17:94:5a:92:ce:db:9e:9d:34:71:bb:
         e0:20:fd:87:48:9b:f5:0d:8f:f0:28:0a:e9:69:29:0c:18:fd:
         cb:4c:cf:a2:45:f2:61:e1:82:69:99:27:13:dd:bf:8a:55:1a:
         db:1b:5e:08:f8:73:5b:92:da:f8:a7:1f:9e:81:79:8f:7d:2e:
         43:54:d0:26:aa:bf:32:99:fc:1a:2c:75:15:83:d6:6b:58:ed:
         18:93:19:a5:df:1b:c5:08:ae:6c:e6:92:10:71:d3:21:e9:65:
         47:37:64:06:b8:fb:2f:3f:45:fb:b7:33:07:23:c4:c5:e3:32:
         ff:27:75:ec:1a:ce:d0:09:72:5f:1f:c3:69:63:2f:41:78:76:
         ca:ed:32:7f:67:27:3a:cc:a9:b4:c7:22:e8:27:c0:43:31:f3:
         d6:9c:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org