Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/5fbf34b78caa4d60f8b576b89b50fff11f547b48.roa
File:                     5fbf34b78caa4d60f8b576b89b50fff11f547b48.roa (raw, json)
Hash identifier:          oBP26n9WBPBdEIWBTtAyQSRrib+5Vb/eZmrZKXdmuuU=
Subject key identifier:   96:38:0B:38:85:CB:0E:C4:1C:FA:96:12:DA:80:C1:67:27:82:FF:B5
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27707A
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/5fbf34b78caa4d60f8b576b89b50fff11f547b48.roa
Signing time:             Wed 14 Feb 2024 21:48:25 +0000
ROA not before:           Wed 14 Feb 2024 21:48:25 +0000
ROA not after:            Sat 14 Feb 2026 21:48:25 +0000
asID:                     27986
IP address blocks:        181.42.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584698 (0x27707a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 14 21:48:25 2024 GMT
            Not After : Feb 14 21:48:25 2026 GMT
        Subject: CN=5fbf34b78caa4d60f8b576b89b50fff11f547b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:f0:7e:d1:ad:01:78:f9:df:e5:b4:f5:0d:
                    3c:ac:43:90:23:e4:96:20:62:9b:50:4d:a7:3e:b5:
                    f1:3e:fe:ac:04:4e:8c:a1:fc:09:46:18:7e:f5:94:
                    f4:ba:1e:fc:ab:e4:24:92:f0:68:64:cb:c8:ff:7a:
                    ce:87:ab:cf:f2:b3:35:e9:70:20:c9:eb:f4:e2:6e:
                    01:24:f4:2c:8f:7d:d7:00:6a:30:f2:52:a9:34:c9:
                    fd:5a:23:1d:5b:77:a1:f6:96:47:81:39:ad:03:de:
                    b1:3e:2d:53:5f:56:32:be:dc:cc:1b:17:06:5b:0d:
                    67:c9:67:f6:48:a2:78:40:9c:ff:2c:96:45:56:da:
                    70:80:0a:31:dd:81:94:bb:79:86:44:88:e0:ee:98:
                    59:6c:0e:54:9e:a0:0a:4c:34:d2:55:05:e8:cb:84:
                    9c:5c:9c:d8:6e:dc:11:e9:e1:0a:79:19:e0:dc:79:
                    5f:8a:5c:43:e1:6e:75:7a:b4:69:20:df:8f:60:ee:
                    d2:c1:5d:fd:46:9f:7b:fe:6a:1a:27:d5:77:28:ea:
                    21:26:5d:23:e9:be:b8:bd:09:cc:8e:db:9e:1f:96:
                    2b:1c:74:e5:6a:6e:40:89:94:35:6d:d7:4c:9d:35:
                    ff:9a:2d:57:0e:fa:07:bb:0b:67:0d:40:9b:5d:f0:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:38:0B:38:85:CB:0E:C4:1C:FA:96:12:DA:80:C1:67:27:82:FF:B5
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/5fbf34b78caa4d60f8b576b89b50fff11f547b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:a4:2f:33:9f:62:17:43:7a:4c:df:e7:e7:91:0a:a4:d3:
         29:22:a7:3d:00:09:b6:79:1d:a8:4b:3f:73:a7:cf:17:d1:31:
         8c:b5:aa:a7:5e:9a:cc:af:95:e2:ec:17:2f:d4:c1:4d:5d:7a:
         e2:72:7d:6f:44:dc:c5:92:53:23:f2:9b:37:e8:37:11:71:fc:
         77:02:cc:a1:33:cf:12:95:ea:cc:fc:81:6d:be:26:84:aa:69:
         1c:09:48:2e:5a:56:21:53:0c:6a:84:25:07:ff:60:b3:24:c8:
         fe:48:36:da:87:39:9b:72:48:99:2f:70:9b:fa:b5:0a:fe:95:
         c0:1b:8d:a1:d6:ec:a5:6a:fd:e2:01:d7:04:eb:d5:0f:8f:d6:
         77:ac:88:a2:5d:fe:06:01:13:4c:57:31:d1:94:7d:34:16:3d:
         36:11:fb:85:7f:e1:58:ce:b2:36:df:0f:6b:da:ad:b3:3d:5e:
         07:57:30:a0:49:b0:ee:61:00:9c:66:03:d2:98:41:f0:c6:1d:
         87:91:73:35:f5:01:27:c4:98:d7:8d:4a:7c:8e:59:71:38:8f:
         63:86:1b:e6:00:d8:2a:b3:fc:49:a0:d9:3e:c1:12:14:36:bd:
         15:cc:04:d4:71:66:d1:3b:5a:0d:7d:b7:e4:07:11:41:fe:42:
         d1:fa:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org