Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/78b7cc1464ea0c1c4d846276731373544e11c5f4.roa
File:                     78b7cc1464ea0c1c4d846276731373544e11c5f4.roa (raw, json)
Hash identifier:          TyPSQNgbR3OQq+s58zICt+7E60CS7jiNEDRlvrMH9RQ=
Subject key identifier:   0C:24:D0:2A:B0:41:A8:8B:2C:B2:0C:23:B5:2F:29:61:6D:C4:C6:85
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1BDC05
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/78b7cc1464ea0c1c4d846276731373544e11c5f4.roa
Signing time:             Mon 26 Sep 2022 21:01:39 +0000
ROA not before:           Mon 26 Sep 2022 20:34:43 +0000
ROA not after:            Thu 26 Sep 2024 20:34:43 +0000
asID:                     3816
IP address blocks:        181.32.0.0/19 maxlen: 19
                          181.32.32.0/19 maxlen: 19
                          181.32.64.0/19 maxlen: 19
                          181.32.96.0/19 maxlen: 19
                          181.32.128.0/19 maxlen: 19
                          181.32.160.0/19 maxlen: 19
                          181.32.192.0/19 maxlen: 19
                          181.32.224.0/19 maxlen: 19
                          181.33.0.0/17 maxlen: 17
                          181.33.128.0/20 maxlen: 20
                          181.33.144.0/20 maxlen: 20
                          181.33.160.0/20 maxlen: 20
                          181.33.176.0/20 maxlen: 20
                          181.33.192.0/20 maxlen: 20
                          181.33.208.0/20 maxlen: 20
                          181.33.224.0/20 maxlen: 20
                          181.33.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825797 (0x1bdc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 20:34:43 2022 GMT
            Not After : Sep 26 20:34:43 2024 GMT
        Subject: CN=78b7cc1464ea0c1c4d846276731373544e11c5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:63:79:8d:f2:0c:a9:f7:3c:0d:f5:04:b6:
                    e4:9c:db:cd:fd:fa:fd:f2:7f:73:22:8c:5e:71:05:
                    df:1c:b4:66:ab:4d:9f:cf:e0:e1:b8:22:cd:6c:89:
                    1e:8c:d4:53:d3:8b:ad:02:0d:cb:fd:59:4b:44:31:
                    24:4f:6c:7c:84:4d:23:18:02:37:e0:52:ad:4f:27:
                    1b:f5:48:74:bc:09:34:7a:52:58:1b:e8:09:7d:40:
                    26:c4:ea:17:5f:f8:bd:a2:ea:68:24:d5:23:a5:ed:
                    0a:1c:c5:8e:11:ae:d2:8f:af:99:64:ea:5b:21:32:
                    d2:40:b0:dc:28:cc:40:5c:f6:f6:a6:7d:93:a2:02:
                    13:78:bd:41:fb:fe:08:93:c8:04:b9:12:f8:e1:7a:
                    84:f2:55:a8:60:c2:be:89:b4:3d:82:b2:1c:68:c0:
                    53:0c:16:0e:24:cd:e7:b6:50:50:dc:06:69:81:81:
                    f9:7a:96:43:be:fb:29:ac:63:43:a2:c1:db:0a:47:
                    13:66:17:7f:6b:d0:c1:ce:67:94:c0:2c:f3:29:67:
                    fc:b3:c0:63:78:d0:d6:54:21:29:f6:03:a9:d9:44:
                    cf:dc:1e:fd:e1:ee:dd:08:68:4c:78:0b:3c:01:47:
                    c0:13:39:ce:81:ad:be:e8:01:42:eb:dd:d5:e7:9d:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:24:D0:2A:B0:41:A8:8B:2C:B2:0C:23:B5:2F:29:61:6D:C4:C6:85
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/78b7cc1464ea0c1c4d846276731373544e11c5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.32.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:14:32:28:ff:57:a0:3c:2b:45:c0:e7:f5:09:41:f1:7f:
         15:66:e9:6f:38:8c:6a:eb:e1:c9:a5:6e:95:3a:67:29:3e:7a:
         50:47:6c:d1:6b:9e:2e:0b:13:5e:bc:e0:1f:81:21:9a:04:c8:
         24:b6:7b:01:9b:c7:9f:9f:57:6a:ba:1d:2d:aa:78:b1:9d:de:
         fd:dd:83:a3:e8:a6:fb:3a:cd:f8:fa:81:8a:c4:9d:fc:7c:ea:
         dc:7c:19:ce:4b:0f:61:4d:22:bf:a8:a3:e1:af:d2:13:84:52:
         b3:e8:ed:2f:b5:24:da:c3:04:53:70:dd:94:37:06:18:12:d1:
         b2:52:5c:cc:c1:29:e1:a9:dd:0b:d6:32:4d:95:33:6f:e3:24:
         c4:dc:a6:b6:c9:5f:78:55:06:13:a3:b3:35:9c:d6:b5:31:ab:
         be:af:57:9e:a2:a5:58:89:17:4a:1b:bb:c3:09:b5:7b:36:71:
         9b:dd:f2:dd:98:6c:4a:55:62:39:06:19:ac:b7:58:9f:5c:3f:
         a0:05:01:91:30:4f:bd:dc:ca:36:5c:25:b3:9a:a3:45:92:fd:
         90:5a:80:9b:fa:75:ff:ef:9c:28:66:59:d4:41:34:91:97:6a:
         de:14:2a:a0:aa:bc:8e:73:04:1b:20:4c:44:d2:3c:1b:ba:c9:
         b2:ed:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org