Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/d852e1c45a16007879527ebb5bb4754c59b874ff.roa
File:                     d852e1c45a16007879527ebb5bb4754c59b874ff.roa (raw, json)
Hash identifier:          n6Zwppp48ccl/nM9bFQg+hvCHlG8cPfl0ItS8bqKdtc=
Subject key identifier:   B6:25:47:58:F3:DB:54:56:C6:62:81:49:B8:81:99:02:09:6E:B7:56
Certificate issuer:       /CN=22a98ce1632468f0df779f66157aaeea21fce7f4
Certificate serial:       02E7CD
Authority key identifier: 18:E5:45:FB:5E:B3:3F:E8:35:36:91:E8:1C:D4:3D:58:67:B6:43:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a98ce1632468f0df779f66157aaeea21fce7f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/d852e1c45a16007879527ebb5bb4754c59b874ff.roa
Signing time:             Mon 07 Aug 2023 13:55:50 +0000
ROA not before:           Sun 06 Aug 2023 13:55:50 +0000
ROA not after:            Thu 07 Aug 2025 13:55:50 +0000
asID:                     33576
IP address blocks:        181.177.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190413 (0x2e7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a98ce1632468f0df779f66157aaeea21fce7f4
        Validity
            Not Before: Aug  6 13:55:50 2023 GMT
            Not After : Aug  7 13:55:50 2025 GMT
        Subject: CN=d852e1c45a16007879527ebb5bb4754c59b874ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:d0:1d:89:f2:98:05:11:43:02:b2:70:00:
                    e0:60:e7:ff:a2:17:dc:59:f3:50:e7:c1:8f:78:77:
                    39:ce:f2:58:60:ce:2b:3a:93:29:92:58:91:b4:6c:
                    5e:4d:0c:7d:82:94:88:5f:f5:4b:2a:26:78:4c:9e:
                    c7:83:2c:1a:ed:3f:d3:41:ac:b1:ba:fb:43:be:bb:
                    78:d0:23:10:eb:0a:7a:24:4c:20:6b:e7:ee:0d:0a:
                    47:51:e0:15:1b:8d:eb:fe:ff:17:b1:b8:67:91:13:
                    0a:13:ce:28:58:bd:22:c0:29:51:90:5a:2b:95:2d:
                    33:78:80:0c:07:5a:6f:26:e5:0b:7e:1a:4e:8f:fc:
                    f1:f4:f5:a2:c2:f0:b4:95:c1:76:e8:c2:0f:54:20:
                    a7:d3:ec:fe:67:bf:35:68:af:fe:2c:f3:cb:7f:97:
                    eb:7e:99:08:cc:55:2e:4c:cf:2c:27:2d:61:4e:ed:
                    e8:76:b6:e2:ed:6e:65:da:f1:d7:9a:e4:1c:3a:91:
                    b1:93:39:8e:b9:00:df:b2:61:c0:aa:20:28:f9:22:
                    30:c3:51:c5:2a:af:6c:96:41:bf:0a:99:6c:3e:c3:
                    cc:cf:96:16:aa:56:34:66:8a:99:a8:ae:b0:7f:dc:
                    72:d9:74:84:f8:cf:a5:af:20:8a:ef:91:c8:9c:41:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:25:47:58:F3:DB:54:56:C6:62:81:49:B8:81:99:02:09:6E:B7:56
            X509v3 Authority Key Identifier:
                keyid:18:E5:45:FB:5E:B3:3F:E8:35:36:91:E8:1C:D4:3D:58:67:B6:43:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a98ce1632468f0df779f66157aaeea21fce7f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/d852e1c45a16007879527ebb5bb4754c59b874ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8eed032-63f4-4dac-ace5-2362fe09db61/22a98ce1632468f0df779f66157aaeea21fce7f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:e0:df:c4:2f:4f:d5:25:17:4e:57:a3:27:cd:3b:50:e2:
         66:8a:b2:1b:57:37:df:1d:ad:c2:44:38:e5:ed:e2:eb:ca:5b:
         df:6f:17:ab:1e:95:60:06:5e:0f:45:71:2b:49:c8:74:fb:1f:
         14:38:c3:03:80:fb:78:bc:41:25:9e:5d:e0:06:44:34:8d:8d:
         6a:86:0b:61:53:3b:59:3f:33:08:78:1d:08:3c:64:68:b6:52:
         10:87:ac:c2:03:63:a5:4b:ef:c6:85:23:70:45:0a:93:98:34:
         48:cf:07:e5:4c:53:e3:9f:e5:57:15:ec:e8:92:e9:93:3d:ca:
         99:f0:31:54:bc:99:87:af:f7:69:ed:12:e4:4f:64:8d:a7:87:
         5c:f1:02:82:93:4f:33:4d:4a:f1:bc:98:f3:ab:b7:47:c8:77:
         8d:27:19:f5:22:c2:36:92:00:ae:63:c5:bc:b1:40:cc:33:ae:
         f7:5e:a3:c7:48:51:3b:2a:f2:d1:1e:44:34:73:70:f9:b8:d5:
         4d:97:cd:7b:42:20:39:79:63:15:cc:c3:47:f6:a1:cd:dc:b2:
         a0:7a:a3:8f:6e:5a:53:20:7f:de:a1:25:d0:67:d8:30:65:81:
         71:4f:c2:88:ad:70:9c:af:40:9a:91:7a:6d:f4:e6:9a:39:08:
         03:07:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org