Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8d772026e6cf5ddf5e7ab37c1e2aaa66c14c4fb3.roa
File:                     8d772026e6cf5ddf5e7ab37c1e2aaa66c14c4fb3.roa (raw, json)
Hash identifier:          oab3It3NL5HAziwZi9KkBp/UUuZV78h6WAJBRETZskU=
Subject key identifier:   67:CB:C8:25:D6:ED:F0:15:C2:47:61:9E:26:5E:5B:FD:74:CD:8A:5D
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       275E0F
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8d772026e6cf5ddf5e7ab37c1e2aaa66c14c4fb3.roa
Signing time:             Tue 13 Feb 2024 16:26:57 +0000
ROA not before:           Tue 13 Feb 2024 16:26:57 +0000
ROA not after:            Fri 13 Feb 2026 16:26:57 +0000
asID:                     27986
IP address blocks:        181.42.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579983 (0x275e0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 13 16:26:57 2024 GMT
            Not After : Feb 13 16:26:57 2026 GMT
        Subject: CN=8d772026e6cf5ddf5e7ab37c1e2aaa66c14c4fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:db:0c:66:ce:9b:00:54:8c:fe:a1:3d:74:
                    44:6e:1d:58:27:05:12:8a:36:33:48:93:f7:1d:9c:
                    33:18:e4:1e:a5:39:0b:50:ea:89:3a:01:c0:a3:20:
                    f2:b5:80:bc:4a:43:1c:7f:ba:5a:e3:ac:db:6a:47:
                    d2:1a:51:73:c7:04:8b:9d:66:32:4a:3f:58:0a:10:
                    ea:ed:81:85:d6:e3:a7:69:52:d0:85:94:83:fb:3c:
                    de:91:29:b6:14:d1:bc:94:da:73:2a:22:d3:29:17:
                    45:a8:44:89:fb:29:bc:3b:cc:87:e4:b0:d4:83:e6:
                    1a:79:3b:ff:78:be:1e:29:9e:a4:de:a6:43:62:db:
                    f5:56:8f:1f:dd:d4:ff:4c:29:a3:e3:e8:c1:5b:79:
                    ed:ce:8e:b2:f9:13:60:c8:99:30:fb:29:5b:aa:11:
                    dc:b9:88:56:0c:c0:95:f4:d2:1b:91:d7:a9:e0:3d:
                    f7:4b:0f:2b:ad:ad:47:c8:00:ec:49:ae:2c:e7:ff:
                    70:5e:bc:76:8d:f5:26:1a:21:b5:58:8c:5f:72:5d:
                    1a:be:f5:4a:c5:30:8f:9a:af:6a:64:6b:3c:f8:68:
                    3f:b5:bd:2c:2b:11:b1:f6:3e:d5:16:bd:4e:7d:09:
                    3b:ae:b3:73:41:72:10:f3:29:94:73:52:df:a6:b1:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CB:C8:25:D6:ED:F0:15:C2:47:61:9E:26:5E:5B:FD:74:CD:8A:5D
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/8d772026e6cf5ddf5e7ab37c1e2aaa66c14c4fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:56:ad:ea:ac:bb:f7:51:8b:c3:3b:19:52:20:01:bb:19:29:
         7e:50:2a:e6:7f:af:e1:44:42:c4:ae:66:b3:25:ff:0b:35:52:
         55:8a:06:ae:ad:53:20:99:e1:53:20:82:a4:cb:de:e5:79:51:
         3b:90:40:2b:f3:44:5f:3f:5a:58:40:5a:40:81:74:20:01:e1:
         55:0c:2d:2c:b1:e8:20:fa:c5:42:37:b8:fe:f6:92:ae:66:f4:
         cc:ab:8e:71:bd:ee:70:56:63:d9:78:31:00:2a:7c:3e:52:41:
         18:fe:9c:89:85:1b:d8:2b:21:72:31:74:c6:01:c7:b4:94:68:
         51:a8:da:82:bf:2e:d5:26:72:1d:9f:4a:8b:04:b5:98:30:46:
         1e:00:86:1b:62:cf:d6:0c:73:43:94:f0:c9:bf:2b:97:93:02:
         0f:67:d5:f4:c6:64:b6:4b:ec:97:e7:77:78:80:75:db:a0:7f:
         b7:03:ca:67:7c:e7:f1:e1:d2:1c:e3:5d:7a:9c:c8:b2:a6:37:
         06:64:97:2d:23:13:64:eb:30:5c:d9:4e:58:f1:9b:75:58:b1:
         e5:81:dd:b6:87:1e:2a:18:78:7a:54:ab:07:70:ee:42:17:3b:
         2e:44:3f:b1:9a:2e:fd:3b:47:6d:ab:3e:a5:27:8c:40:8d:97:
         85:db:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org