Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/a15a476e376a8a211a50c93842685d9cc62f7926.roa
File:                     a15a476e376a8a211a50c93842685d9cc62f7926.roa (raw, json)
Hash identifier:          pbm2sSfZJq/qUu+NdZ0uc6/UsLkKew0U/CConp+1+hg=
Subject key identifier:   1F:F7:66:88:4B:D3:1F:EC:A3:95:6E:D7:EF:E1:CC:86:F5:BB:62:2F
Certificate issuer:       /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial:       24D655
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/a15a476e376a8a211a50c93842685d9cc62f7926.roa
Signing time:             Tue 17 Oct 2023 17:40:34 +0000
ROA not before:           Mon 16 Oct 2023 17:40:34 +0000
ROA not after:            Fri 17 Oct 2025 17:40:34 +0000
asID:                     262206
IP address blocks:        181.189.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414165 (0x24d655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
        Validity
            Not Before: Oct 16 17:40:34 2023 GMT
            Not After : Oct 17 17:40:34 2025 GMT
        Subject: CN=a15a476e376a8a211a50c93842685d9cc62f7926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:71:d8:6c:9e:60:a4:52:a5:00:df:7a:46:
                    11:ff:9d:0b:17:82:8d:57:0e:8c:dd:67:7f:96:88:
                    34:1f:47:19:b4:b3:40:e1:dc:82:90:c8:11:cb:72:
                    f8:e1:71:e7:a7:aa:95:f1:1b:e1:54:ef:86:b7:58:
                    d5:f2:4b:ba:80:24:c3:aa:e6:bd:f6:14:f7:11:44:
                    a3:9f:1e:e4:e8:6f:5c:f5:f5:f9:c9:8a:77:6f:d9:
                    1a:ab:7b:92:c8:3e:5f:6f:cc:8e:7a:04:f0:11:e1:
                    20:e4:c3:3a:b7:5a:a7:5f:f5:4f:bd:d3:21:44:79:
                    98:75:48:08:0c:60:c1:33:4a:eb:13:9a:00:8e:3b:
                    3f:84:bf:e6:4a:c9:94:13:4a:2d:f7:63:38:5a:2c:
                    2f:a4:da:66:09:80:2e:b8:74:35:52:a3:82:53:ae:
                    4b:41:9e:70:4d:0a:37:76:81:5a:56:9b:05:ad:f1:
                    b1:1b:a0:d8:97:4f:b1:c1:f2:51:39:7c:56:9e:7a:
                    6c:44:d0:9e:b8:3b:f8:4f:53:27:34:0e:0d:2b:16:
                    83:11:13:fd:a8:ea:84:d1:75:51:0b:3e:5c:d4:04:
                    87:fe:ee:42:d7:a8:7d:bc:6d:38:cf:b7:5f:61:03:
                    11:a5:dd:6b:fc:b0:e1:17:cd:0a:0d:e9:98:09:b6:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:66:88:4B:D3:1F:EC:A3:95:6E:D7:EF:E1:CC:86:F5:BB:62:2F
            X509v3 Authority Key Identifier:
                keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/a15a476e376a8a211a50c93842685d9cc62f7926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:a3:db:27:36:d3:ae:39:e4:6e:53:35:a0:23:69:c7:07:
         23:3f:1b:81:3c:2e:d4:4f:6f:50:d0:32:ce:b4:4f:47:ae:63:
         02:d8:5d:b0:c8:72:ad:1b:28:1f:2f:a8:4b:85:12:20:83:14:
         d5:5d:a3:b0:48:56:8a:0d:85:40:1b:39:05:9a:7a:43:f6:72:
         4c:fe:79:37:40:50:a6:d9:fe:1f:92:6f:71:9d:6e:d1:5f:c0:
         13:47:91:70:09:ab:fd:1e:39:cf:fd:bb:37:d6:97:0c:84:df:
         e9:47:bb:64:53:32:e6:0e:86:c1:d4:47:ba:ff:6b:20:c1:3b:
         5d:e7:62:c6:93:96:5c:ac:ae:70:ae:2d:e5:90:6e:14:15:eb:
         bf:d7:f7:04:aa:9f:42:b7:34:d2:7c:a2:c2:ea:65:a9:c1:e8:
         d3:44:c7:9a:6f:da:d9:28:3f:00:db:44:f6:a2:97:45:12:e2:
         84:c0:07:94:83:e5:cc:53:8f:48:c0:85:fa:29:e1:7e:60:e2:
         d1:2c:f2:88:e9:28:4c:74:21:fa:30:23:95:1e:76:89:77:9c:
         72:22:a2:c0:c7:59:44:d2:6b:3f:1c:c8:90:f2:3e:f6:bb:05:
         3e:ea:e0:a5:39:5d:2a:ac:e1:a8:38:52:0a:f5:28:ec:27:a5:
         be:25:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org