Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/06de3a42a1f4d9ffa3a964e2a33f820a3043e0aa.roa
File:                     06de3a42a1f4d9ffa3a964e2a33f820a3043e0aa.roa (raw, json)
Hash identifier:          wdry9P7spi2U5gCwqt0tVQDpC36qkdU2soUdmp0w/JE=
Subject key identifier:   4D:AC:48:4B:6B:F6:C5:F2:75:DA:B3:9E:1C:5F:9D:17:AD:28:8B:2B
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       230B4C
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/06de3a42a1f4d9ffa3a964e2a33f820a3043e0aa.roa
Signing time:             Mon 31 Jul 2023 21:21:47 +0000
ROA not before:           Sun 30 Jul 2023 21:21:43 +0000
ROA not after:            Thu 31 Jul 2025 21:21:43 +0000
asID:                     266747
IP address blocks:        181.118.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296652 (0x230b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Jul 30 21:21:43 2023 GMT
            Not After : Jul 31 21:21:43 2025 GMT
        Subject: CN=06de3a42a1f4d9ffa3a964e2a33f820a3043e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:6b:59:54:00:48:06:34:34:69:f8:fa:91:
                    f2:a0:e7:4f:78:b0:72:61:99:f9:dc:99:65:e2:d3:
                    5b:68:e4:59:06:b0:35:7c:df:ac:be:7e:2c:7f:06:
                    a2:99:1f:7c:3d:5e:88:ad:39:9d:b8:63:33:00:92:
                    23:0f:1c:27:44:25:a8:42:44:55:13:14:5e:8d:ea:
                    54:1e:3c:89:e4:bd:29:e8:80:b2:7d:80:52:82:62:
                    9d:a9:f3:36:bf:3d:e1:a7:17:1c:24:db:79:3f:7a:
                    6d:f6:ab:e1:e9:52:e2:be:f6:76:9b:ac:8e:79:5a:
                    06:a0:a1:81:61:9f:68:6b:4a:ad:62:f5:0a:2e:fc:
                    57:b8:63:f8:61:f6:9f:b9:35:44:ae:e6:24:24:da:
                    e0:c0:9b:16:f6:72:5a:7d:47:2d:cb:86:2b:4b:86:
                    ce:d6:0f:63:78:e4:7e:25:e9:ff:a5:d9:95:f4:42:
                    46:db:5b:d1:bb:82:a1:e5:91:13:74:6b:b4:56:70:
                    a1:40:c8:e5:75:6c:36:51:b9:90:63:df:34:1e:f8:
                    b0:3e:41:ca:69:d2:98:b4:8a:1a:8e:af:ce:f3:c1:
                    da:07:ef:64:da:d3:f4:df:e1:3c:ac:03:88:b5:eb:
                    b4:84:ce:1c:ed:10:0a:f9:81:38:5e:a0:03:34:07:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AC:48:4B:6B:F6:C5:F2:75:DA:B3:9E:1C:5F:9D:17:AD:28:8B:2B
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/06de3a42a1f4d9ffa3a964e2a33f820a3043e0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:86:d6:a7:b3:34:c7:3d:eb:bc:36:b2:ed:de:29:87:2b:fd:
         6e:7b:3a:a8:6d:eb:ad:3b:54:75:9f:24:4e:fb:db:64:20:ac:
         c2:79:23:05:65:15:18:a2:13:c3:51:e2:39:c7:e3:4e:00:a6:
         0d:89:5c:8d:22:f1:ee:dc:e0:f8:4b:de:e7:ca:a7:75:d3:aa:
         28:7a:04:59:47:f6:d1:65:ca:78:82:94:76:0a:e4:22:29:25:
         62:d6:3f:de:1b:57:ef:23:aa:91:bb:1f:4e:13:19:98:83:d0:
         90:db:44:8a:82:85:42:c9:80:8b:e1:72:40:c0:ce:64:f7:ad:
         55:97:bf:35:a9:ef:23:39:00:01:46:ef:bf:96:3e:e6:a4:70:
         19:e5:c3:7f:49:a6:db:98:7e:b1:5f:f0:86:be:04:c0:54:ce:
         c1:c9:63:0b:9d:a2:d1:1b:7a:b6:83:0b:cd:ac:6d:5e:82:16:
         d0:30:04:82:fe:dc:89:96:c7:cf:48:25:0c:dd:46:fb:ec:47:
         56:b5:49:7f:44:49:89:1c:37:39:42:e4:11:9f:0b:37:9c:78:
         ec:c6:04:6f:81:14:c9:9f:fa:d6:64:0f:b2:a2:35:b0:5c:73:
         66:69:81:57:78:6a:ad:0d:5f:0c:bd:a7:52:2f:87:68:70:69:
         2b:7d:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org