Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/49adca607a3b41fd62bfbc32d9f733fefca7fff2.roa
File:                     49adca607a3b41fd62bfbc32d9f733fefca7fff2.roa (raw, json)
Hash identifier:          bxfJMGpEdiJJjrfiZreq0oUk0xcKrFiVE/up+HAIRmA=
Subject key identifier:   9E:6F:74:65:A5:09:0E:7E:97:C4:DB:3E:7E:7D:B7:39:1F:28:85:BB
Certificate issuer:       /CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
Certificate serial:       0766
Authority key identifier: 74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/49adca607a3b41fd62bfbc32d9f733fefca7fff2.roa
Signing time:             Wed 19 Oct 2022 13:38:32 +0000
ROA not before:           Tue 18 Oct 2022 13:35:11 +0000
ROA not after:            Sat 19 Oct 2024 13:35:11 +0000
asID:                     271832
IP address blocks:        181.174.216.0/24 maxlen: 24
                          181.174.217.0/24 maxlen: 24
                          181.174.218.0/24 maxlen: 24
                          181.174.219.0/24 maxlen: 24
                          2803:e810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
        Validity
            Not Before: Oct 18 13:35:11 2022 GMT
            Not After : Oct 19 13:35:11 2024 GMT
        Subject: CN=49adca607a3b41fd62bfbc32d9f733fefca7fff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:21:fc:90:19:d2:e0:32:d8:b5:64:60:5d:
                    de:a1:f6:ef:73:5c:ea:9d:3f:38:00:a2:06:e7:3f:
                    00:00:cc:f6:9c:b6:07:d7:30:e6:c0:0b:23:a4:fa:
                    e2:69:0c:93:4d:19:9a:9a:85:f2:bd:c3:b5:08:fe:
                    f7:ab:4d:5d:f6:6e:78:aa:33:ef:37:0a:38:70:40:
                    8d:e8:62:4b:ac:7e:9a:6b:7c:8b:a8:db:fd:d8:ec:
                    ac:ec:f7:d0:d1:06:6f:79:64:eb:e7:2f:ea:6e:4b:
                    95:d4:4f:d9:04:11:ac:d8:ce:9b:4c:ac:cc:52:fd:
                    d9:b6:58:70:27:8d:c5:30:35:15:7b:3f:f3:90:a7:
                    42:64:65:25:41:c4:a9:78:58:65:5e:95:0d:06:87:
                    c5:2d:6b:8d:5e:14:35:73:ee:80:09:a0:08:7c:84:
                    19:de:a8:ef:42:0e:60:b9:07:9a:e5:a5:f6:a7:4a:
                    69:24:7f:d4:ba:4c:b1:0c:21:af:ba:c7:21:bc:02:
                    3d:ef:0c:c5:70:04:06:e0:9b:eb:a1:e2:68:9d:dc:
                    c2:33:f3:d0:31:09:cf:57:51:f3:de:5f:80:92:72:
                    e9:54:45:64:2b:db:f1:58:68:52:51:e0:33:70:de:
                    4e:c8:ec:4b:87:2b:77:51:46:d4:59:1f:45:11:ce:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:74:65:A5:09:0E:7E:97:C4:DB:3E:7E:7D:B7:39:1F:28:85:BB
            X509v3 Authority Key Identifier:
                keyid:74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/49adca607a3b41fd62bfbc32d9f733fefca7fff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/751a67f045f8f4106edcbcac4a291b68cb4fca20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:57:42:52:84:6e:b2:a4:cf:bf:6f:71:c8:88:77:f1:60:2e:
         95:94:1a:70:fd:ea:06:2f:ac:77:0b:5b:5a:e1:94:97:10:25:
         20:3a:57:3a:a2:4a:f8:02:25:e9:a7:74:26:f8:23:60:e7:ef:
         4a:c7:e7:f1:e3:fb:8a:38:9b:ee:8b:82:d4:51:ca:02:b2:84:
         1e:cf:6a:58:d2:e0:50:96:6a:09:1b:ba:72:56:78:41:bb:6d:
         e9:c6:cd:5b:52:78:85:f4:2f:50:11:a8:2f:06:06:de:88:52:
         fe:f5:ef:99:85:e1:66:b0:01:2b:02:80:34:35:39:13:74:f4:
         2a:25:92:83:d4:1f:83:3c:08:ce:e9:d3:71:c9:7a:dd:15:20:
         b2:43:ce:09:12:ae:0b:11:e5:80:e9:02:41:41:7f:a7:bc:ac:
         c9:67:a8:4c:66:56:4b:81:5b:17:26:92:75:3c:01:40:75:98:
         d0:3a:7b:70:6a:2c:66:1d:95:ca:44:3a:63:da:30:6c:a6:fa:
         1a:0a:58:65:7e:dc:32:84:c6:fe:1f:9b:19:8b:72:2d:a0:a1:
         58:22:e7:69:66:e0:d5:06:6a:86:10:ee:a0:ba:5d:8b:78:a9:
         70:35:64:f1:c9:b0:f0:35:41:83:2a:35:d3:88:1b:7a:87:8d:
         f5:c0:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org