Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/eb5edfcbd6e3e941350548c7764bd9211fb331ad.roa
File:                     eb5edfcbd6e3e941350548c7764bd9211fb331ad.roa (raw, json)
Hash identifier:          CT4H45OMnqSCbx0ncGbU0S99dkcr8J9+8e9bXxu5SEY=
Subject key identifier:   5E:62:A8:D6:EF:B3:95:DF:15:E7:5F:3C:A4:11:9E:5A:D0:24:02:98
Certificate issuer:       /CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
Certificate serial:       0E8898
Authority key identifier: A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/eb5edfcbd6e3e941350548c7764bd9211fb331ad.roa
Signing time:             Tue 21 Nov 2023 21:11:36 +0000
ROA not before:           Tue 21 Nov 2023 21:11:36 +0000
ROA not after:            Fri 21 Nov 2025 21:11:36 +0000
asID:                     61468
IP address blocks:        181.224.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952472 (0xe8898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
        Validity
            Not Before: Nov 21 21:11:36 2023 GMT
            Not After : Nov 21 21:11:36 2025 GMT
        Subject: CN=eb5edfcbd6e3e941350548c7764bd9211fb331ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:0d:24:e5:25:4f:a1:32:a2:1d:29:df:54:
                    f3:44:79:b9:b8:6b:89:13:11:64:01:cb:ef:43:96:
                    cd:53:55:7f:44:89:c0:63:87:2e:f7:3f:3a:8f:ed:
                    cf:23:fd:10:8e:59:6d:3e:22:e8:a7:b1:10:f8:1b:
                    2e:b9:fd:f5:33:17:93:cc:22:90:c4:85:11:3b:62:
                    32:04:96:36:f5:fb:52:92:40:ab:7b:31:e5:d4:fc:
                    d1:7b:dc:cc:97:97:02:cc:bb:77:b1:f5:66:62:d4:
                    ac:28:e9:1e:cb:0f:5f:f7:58:1c:4b:96:62:dd:32:
                    32:8a:71:4f:74:25:97:d3:4f:5d:78:b5:cd:11:72:
                    90:47:38:68:e6:ec:05:58:3a:1a:76:ba:c5:94:5c:
                    7d:56:ea:73:ea:87:3d:2f:49:d3:c4:9a:61:9d:0e:
                    da:fe:ef:41:9c:e8:2e:58:50:4f:1f:1c:28:14:49:
                    e8:3b:b0:7d:1d:79:f9:98:3e:e5:31:42:49:7a:df:
                    49:c0:3e:37:69:2f:d5:0f:f0:17:47:da:95:0e:e3:
                    79:c5:86:86:c9:19:38:11:99:1b:2d:c5:b4:1e:90:
                    9a:4b:8c:b5:b7:02:6d:18:0a:ab:d6:5f:24:04:74:
                    19:32:6a:33:5b:47:a1:e8:5f:c1:5d:bf:53:60:44:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:A8:D6:EF:B3:95:DF:15:E7:5F:3C:A4:11:9E:5A:D0:24:02:98
            X509v3 Authority Key Identifier:
                keyid:A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/eb5edfcbd6e3e941350548c7764bd9211fb331ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/87b7f548b0d643ffa768da76ef82c2b3680dff0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:bb:93:ba:de:b1:a2:df:a2:9b:c0:dc:dc:74:c4:fd:28:
         ab:9f:41:17:2e:8b:2e:78:ca:60:c4:d8:08:1a:35:7a:da:ec:
         63:e9:99:15:a8:1b:a2:2f:7b:66:b9:a8:3e:6d:1c:d0:29:8e:
         4a:ba:f9:76:28:fc:3b:6b:4e:68:87:0b:71:0d:4e:09:b1:1d:
         7d:65:bd:44:59:ee:be:08:d8:fe:6f:cc:57:0a:32:16:b9:df:
         05:ef:2d:95:59:79:11:8b:13:6f:79:b2:49:32:88:a9:73:70:
         78:3d:1c:60:a8:b3:8b:3e:43:32:ee:4d:47:95:6a:07:8b:62:
         36:0a:74:56:c5:0a:5f:d6:21:8d:02:33:a0:23:f6:fb:9b:57:
         5e:d5:60:44:98:3b:c6:7e:34:7c:f1:49:e6:9a:c8:58:e0:84:
         97:b5:81:0d:c7:68:7e:51:ab:aa:57:f1:54:ff:01:d5:0a:9f:
         63:86:de:de:30:62:27:bc:55:a3:a9:10:93:86:d2:7d:f9:90:
         1e:15:99:d4:63:0f:30:f7:25:45:5b:00:d3:16:1d:cc:23:fa:
         be:ae:b7:44:61:d3:50:29:d6:8c:78:b0:1c:9a:4f:a8:8f:74:
         2d:47:2d:39:e1:24:1f:6d:6d:a4:51:3f:48:41:df:4a:df:4b:
         99:28:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org