Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa
File:                     3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa (raw, json)
Hash identifier:          w4NP2OAxwxBh3vlzJP50RT3QkcCgyHJ62rEZhdHtV2U=
Subject key identifier:   5A:BC:54:2B:53:2E:AE:9A:38:28:86:8A:55:9A:D1:BB:C5:56:22:54
Certificate issuer:       /CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
Certificate serial:       546C68D4884F49FEA55A31175465AA42652E124A
Authority key identifier: 4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa
Signing time:             Tue 05 Mar 2024 18:03:43 +0000
ROA not before:           Tue 05 Mar 2024 17:58:43 +0000
ROA not after:            Tue 04 Mar 2025 18:03:43 +0000
asID:                     271832
IP address blocks:        181.174.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6c:68:d4:88:4f:49:fe:a5:5a:31:17:54:65:aa:42:65:2e:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
        Validity
            Not Before: Mar  5 17:58:43 2024 GMT
            Not After : Mar  4 18:03:43 2025 GMT
        Subject: CN=5ABC542B532EAE9A3828868A559AD1BBC5562254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:e7:73:02:1d:4b:84:ee:c4:a6:8c:90:3f:
                    bd:40:7a:43:9b:35:10:20:2f:e0:48:c0:bb:63:d8:
                    28:29:90:2c:92:5d:08:aa:05:2e:98:4d:28:d5:12:
                    72:da:20:4e:45:86:b7:88:69:d3:9c:64:a9:97:ef:
                    d5:c2:11:a0:cc:2e:29:d2:fb:69:7b:00:b8:06:49:
                    ec:6b:7a:9b:45:44:48:fa:74:48:f0:02:6c:b2:09:
                    06:4b:7a:3c:22:f5:90:f1:b7:21:79:9c:f3:13:90:
                    81:f9:f5:5d:a2:20:2c:69:d3:f5:7e:92:e5:ce:71:
                    cc:c1:3c:87:7e:23:ca:1b:bf:05:4e:f6:dd:89:4f:
                    c0:01:70:3e:e0:d5:2b:9d:be:0f:97:dd:ef:70:0c:
                    e7:21:78:25:c0:77:92:cb:1f:62:1c:cf:2b:c3:00:
                    a4:97:ed:03:0d:02:15:b2:06:b8:6f:5c:be:9a:80:
                    a1:b4:9f:5c:d6:8e:69:8e:d7:33:dd:e7:f2:20:5d:
                    48:08:7f:0a:c1:fb:a8:ad:b8:5a:d1:41:e1:c8:f2:
                    5a:7a:dc:ef:b7:b1:70:d6:42:06:9c:f5:48:5c:4e:
                    d2:58:c9:c2:d9:0a:79:0b:80:e6:45:cb:b1:75:88:
                    4f:86:4f:65:3f:0d:87:15:4e:9b:df:b3:36:42:c4:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:54:2B:53:2E:AE:9A:38:28:86:8A:55:9A:D1:BB:C5:56:22:54
            X509v3 Authority Key Identifier:
                keyid:4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:47:88:83:ed:14:c2:a0:b4:48:05:05:6e:e5:7f:2c:2f:dd:
         70:4a:c6:63:4c:8a:b0:e4:c5:23:59:d8:16:e8:ff:b7:dd:c0:
         28:bd:74:32:03:43:42:a7:8a:d3:32:c9:b0:c4:90:fb:d1:ff:
         5e:7e:71:75:a3:03:3f:13:ef:21:b5:75:ba:21:11:73:5a:3a:
         2e:78:ad:d6:77:42:27:7f:f3:c6:ed:70:89:99:6a:0b:83:52:
         79:cc:6d:89:15:d2:f1:11:e5:3f:d4:1e:fa:b3:c0:e4:5f:12:
         71:c2:4d:21:70:cd:a2:c7:cc:97:26:41:b3:36:18:c8:6b:b9:
         33:2c:6a:6c:22:d5:3d:1a:ee:59:9d:08:42:ce:b3:d5:87:1f:
         61:51:9c:f4:4d:ba:28:c6:75:e8:b1:3b:ae:8c:56:34:64:72:
         2f:fa:fd:00:82:e4:03:60:f7:ec:a0:95:d6:af:ea:f3:87:58:
         4c:26:99:db:76:a0:02:35:b1:f7:cc:4a:6f:f9:15:dd:96:1f:
         86:53:44:ca:28:fa:a6:85:ad:86:1c:fd:a5:60:78:1b:a9:b8:
         21:4b:be:92:b8:90:db:5d:a4:de:df:95:1e:49:3e:94:3e:55:
         62:ef:20:93:ad:00:f0:95:32:63:f4:d2:5f:44:41:5a:6b:82:
         11:8f:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org