Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7ba6436182d68343466629092ab2d2ae5c951972.roa
File:                     7ba6436182d68343466629092ab2d2ae5c951972.roa (raw, json)
Hash identifier:          kSLETX/XIwVDV5CuC52rfkOhjUv6XQGXQoONRXWyBAU=
Subject key identifier:   98:CC:7E:46:9E:A5:13:0D:61:42:2D:46:0E:73:71:F3:D3:FC:3D:5F
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       102B64
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7ba6436182d68343466629092ab2d2ae5c951972.roa
Signing time:             Mon 29 Jan 2024 21:24:22 +0000
ROA not before:           Mon 29 Jan 2024 21:24:22 +0000
ROA not after:            Thu 29 Jan 2026 21:24:22 +0000
asID:                     17072
IP address blocks:        189.203.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059684 (0x102b64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Jan 29 21:24:22 2024 GMT
            Not After : Jan 29 21:24:22 2026 GMT
        Subject: CN=7ba6436182d68343466629092ab2d2ae5c951972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:c7:c3:1d:9d:ac:1e:08:44:51:5a:14:91:
                    68:53:05:08:10:33:1a:c9:81:78:bd:68:fb:f8:b8:
                    0e:82:95:ca:95:68:cc:3c:72:58:1f:24:c0:42:fd:
                    eb:b4:2c:f4:fc:24:fe:5f:99:1e:54:87:56:5c:cc:
                    23:26:ba:62:f8:e9:9b:13:91:32:0e:72:02:c2:c2:
                    5f:21:c9:65:77:a4:9e:8a:a9:51:e0:7d:53:0f:9d:
                    44:44:e7:17:04:95:03:c8:65:52:3e:99:44:32:da:
                    8b:7d:6e:ce:27:61:e6:7c:6d:f1:dc:8f:dd:6c:03:
                    52:1a:a2:d4:5a:7c:e8:63:bc:7a:5e:77:64:9c:b9:
                    fc:24:92:78:fc:13:b8:20:1a:64:e9:9d:25:ec:15:
                    71:13:8c:20:cc:60:99:92:ff:91:3c:3a:17:15:df:
                    36:a1:34:34:ca:b6:e8:35:e7:2a:b5:d8:bb:f6:cf:
                    62:f3:52:c3:56:69:85:10:21:e9:40:b6:5e:e7:df:
                    af:f3:cb:1e:ea:b6:eb:34:c0:92:e1:b6:af:b8:e8:
                    e6:aa:eb:69:9f:b4:86:7a:1c:40:77:0f:06:8f:75:
                    3a:b8:b3:f4:71:75:0a:e6:20:9c:e6:fc:23:64:73:
                    0c:f0:c6:07:e9:75:5b:e4:d0:9f:6b:f4:e1:f7:c0:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CC:7E:46:9E:A5:13:0D:61:42:2D:46:0E:73:71:F3:D3:FC:3D:5F
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/7ba6436182d68343466629092ab2d2ae5c951972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.203.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:1c:42:e6:17:d1:13:5a:54:1b:f4:5e:52:0c:45:a4:11:
         9d:d8:5a:71:07:5d:2c:82:c2:f9:05:d8:85:f0:39:6a:fc:e5:
         62:fd:84:1d:99:82:e9:1c:7e:ff:74:05:49:09:89:04:86:29:
         56:7a:9f:cb:91:99:b0:b9:39:5a:03:0f:94:93:65:3e:c6:5f:
         49:fd:8f:7b:87:17:e9:ec:f4:2c:67:dc:e1:cf:89:10:2b:47:
         e5:2a:96:97:e7:b3:81:c8:ad:41:d3:6b:4f:4f:e1:2c:4c:e4:
         4d:2d:13:96:b9:bd:5a:52:c3:ce:41:ec:a5:f9:95:11:24:c3:
         bc:56:af:3d:fc:5c:fb:21:57:8b:16:1c:3d:35:3e:22:40:15:
         7f:98:00:3d:8b:56:65:0e:a0:28:12:2b:c7:92:f4:97:d0:4c:
         83:11:5c:1a:5a:f5:88:28:ec:2f:d0:62:21:a7:86:1c:88:0d:
         3b:57:1e:16:84:c7:0f:2a:22:62:1e:e2:30:ee:df:0c:18:71:
         19:9e:9d:58:e9:f1:bc:62:b7:b9:48:28:47:8c:cf:66:2b:e6:
         9b:fb:e7:c4:1f:35:37:80:ce:72:47:df:3a:02:f5:88:fd:33:
         87:2c:b9:38:fe:70:7d:a5:a3:ab:92:72:7c:8e:6d:05:da:98:
         72:72:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org