Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/efd254ad5fcfdd9b302b1ee9a8a0387231344d26.roa
File:                     efd254ad5fcfdd9b302b1ee9a8a0387231344d26.roa (raw, json)
Hash identifier:          tObVUHTLeL0f1sWnaR9T8V6yI90a82F+3/x0G/oW01k=
Subject key identifier:   8D:AD:3A:E2:88:B0:13:36:96:74:4F:B9:05:59:7E:3A:0C:2E:66:D7
Certificate issuer:       /CN=bfa311fa695991c4b5507c099d6fea84b510979a
Certificate serial:       0296A1
Authority key identifier: B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/efd254ad5fcfdd9b302b1ee9a8a0387231344d26.roa
Signing time:             Fri 28 Jul 2023 20:03:17 +0000
ROA not before:           Thu 27 Jul 2023 20:03:17 +0000
ROA not after:            Mon 28 Jul 2025 20:03:17 +0000
asID:                     272099
IP address blocks:        181.233.100.0/22 maxlen: 22
                          181.233.100.0/23 maxlen: 23
                          181.233.100.0/24 maxlen: 24
                          181.233.101.0/24 maxlen: 24
                          181.233.102.0/23 maxlen: 23
                          181.233.102.0/24 maxlen: 24
                          181.233.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169633 (0x296a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa311fa695991c4b5507c099d6fea84b510979a
        Validity
            Not Before: Jul 27 20:03:17 2023 GMT
            Not After : Jul 28 20:03:17 2025 GMT
        Subject: CN=efd254ad5fcfdd9b302b1ee9a8a0387231344d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:72:3b:86:43:9f:61:59:ee:4f:58:f8:99:
                    81:b5:28:49:fd:56:ae:d9:f9:5f:59:2b:83:71:43:
                    bb:42:eb:16:11:2f:da:5b:c6:ba:86:34:c2:fc:41:
                    cf:51:67:ba:40:6a:ec:16:d8:88:1e:39:38:bb:ce:
                    74:42:63:34:3d:e5:71:02:16:5c:7d:4b:ec:61:05:
                    52:04:68:80:fc:f7:4b:26:e5:e5:3a:91:dc:a6:c5:
                    c8:34:3b:f5:05:47:44:1f:d2:af:66:1f:91:02:ae:
                    d2:ba:a7:87:6a:d4:0c:65:5e:7f:43:38:22:e7:92:
                    4b:d5:ef:10:a0:87:e4:94:64:d6:49:a3:be:e0:11:
                    a0:77:e3:63:77:9f:01:7e:31:86:68:d8:b2:b5:0c:
                    31:64:81:12:11:ee:2e:68:cf:f9:f0:6e:0d:a4:c6:
                    f8:53:03:29:69:07:77:4b:a8:42:cf:5a:ca:ca:65:
                    eb:e2:d0:83:8e:4e:32:8e:91:cc:fa:cd:6b:15:47:
                    2c:fd:f4:1e:07:60:91:02:76:29:6d:32:d3:f1:21:
                    f7:91:24:8d:65:7f:46:a2:a7:ad:7b:86:1e:ea:78:
                    09:ed:c3:47:ad:12:ef:71:24:3c:49:ac:03:57:67:
                    80:08:23:d9:ae:cd:a0:be:a7:b8:8c:63:3d:ca:ed:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:3A:E2:88:B0:13:36:96:74:4F:B9:05:59:7E:3A:0C:2E:66:D7
            X509v3 Authority Key Identifier:
                keyid:B0:CF:F0:34:30:A9:65:96:A9:33:18:FF:D7:FE:EE:CD:8F:4A:ED:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa311fa695991c4b5507c099d6fea84b510979a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/efd254ad5fcfdd9b302b1ee9a8a0387231344d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/998d746f-7f8c-4863-9ba3-2c18a1be8990/bfa311fa695991c4b5507c099d6fea84b510979a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:49:10:6c:f7:5d:84:48:85:a2:82:58:28:0d:a0:b2:a0:
         fc:1e:6f:41:8d:73:67:80:30:3c:42:cc:65:b8:48:a3:22:40:
         bc:d3:48:9f:2d:a0:9e:ae:88:66:09:59:12:3a:c3:9d:2f:4f:
         79:59:c9:27:36:f2:ca:4b:35:03:41:c8:34:d7:a9:d1:95:5c:
         42:dc:97:d9:1a:44:7a:4c:d2:81:c0:d9:a0:d7:7c:18:b5:5a:
         34:2b:79:ac:72:85:79:93:81:be:7a:ff:2a:78:ee:4a:3e:5c:
         6f:0b:d8:8c:a3:6e:db:6d:96:79:44:da:c1:73:dd:f8:0b:cb:
         96:1f:75:63:a8:c2:95:1b:9b:95:de:72:35:94:af:30:dc:a1:
         0c:d6:f3:74:c5:71:ed:23:90:9e:3c:8e:95:e2:4d:18:1d:78:
         52:2b:a5:ff:64:e7:6f:08:6c:c2:b6:a6:15:8d:1b:e5:f7:42:
         c7:5f:fe:a8:95:83:71:63:3b:5d:87:33:2c:54:ee:17:4b:33:
         b5:71:e0:a1:ce:44:5d:18:5c:51:85:71:a1:12:5f:c9:46:5c:
         57:c7:8c:d9:18:3e:be:b2:12:a8:85:81:a7:0d:36:85:55:fc:
         f9:20:70:ee:8a:97:41:2d:02:13:e5:7a:e2:c4:57:6f:80:fe:
         4b:66:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org