Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/de94f13edd163420b71fc82ca5406c7c4ff291ed.roa
File:                     de94f13edd163420b71fc82ca5406c7c4ff291ed.roa (raw, json)
Hash identifier:          VysDVtmKBQY5Ber7lkhIgb23O4+j0t+SqNIp1ozAtsc=
Subject key identifier:   78:4A:F5:B0:F2:1C:8C:14:21:AB:3D:43:20:DD:76:5B:4E:35:6C:E2
Certificate issuer:       /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial:       1C1348
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/de94f13edd163420b71fc82ca5406c7c4ff291ed.roa
Signing time:             Thu 08 Jun 2023 02:51:31 +0000
ROA not before:           Wed 07 Jun 2023 02:51:31 +0000
ROA not after:            Sun 08 Jun 2025 02:51:31 +0000
asID:                     262253
IP address blocks:        181.224.226.0/24 maxlen: 24
                          181.224.227.0/24 maxlen: 24
                          181.224.228.0/24 maxlen: 24
                          181.224.229.0/24 maxlen: 24
                          181.224.236.0/24 maxlen: 24
                          181.224.237.0/24 maxlen: 24
                          181.224.238.0/24 maxlen: 24
                          181.224.239.0/24 maxlen: 24
                          181.224.240.0/24 maxlen: 24
                          181.224.241.0/24 maxlen: 24
                          181.224.242.0/24 maxlen: 24
                          181.224.243.0/24 maxlen: 24
                          181.224.244.0/24 maxlen: 24
                          181.224.245.0/24 maxlen: 24
                          181.224.246.0/24 maxlen: 24
                          181.224.247.0/24 maxlen: 24
                          181.224.248.0/24 maxlen: 24
                          181.224.249.0/24 maxlen: 24
                          181.224.250.0/24 maxlen: 24
                          181.224.251.0/24 maxlen: 24
                          181.224.252.0/24 maxlen: 24
                          181.224.253.0/24 maxlen: 24
                          181.224.254.0/24 maxlen: 24
                          181.224.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839944 (0x1c1348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
        Validity
            Not Before: Jun  7 02:51:31 2023 GMT
            Not After : Jun  8 02:51:31 2025 GMT
        Subject: CN=de94f13edd163420b71fc82ca5406c7c4ff291ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:ff:01:17:c0:4d:25:bc:6f:e6:39:bb:01:
                    4d:c3:0c:80:6d:b4:e4:07:50:b8:c0:d4:2f:bb:63:
                    eb:35:cf:3b:77:3b:28:3c:5a:56:45:a5:63:7e:b9:
                    96:09:c9:26:46:e7:25:4a:d1:c6:b4:f5:29:bb:ef:
                    c5:ff:d0:a6:b8:c8:86:9c:84:b8:6f:94:49:61:e7:
                    b1:a2:c2:44:98:c5:28:58:ce:a6:ee:71:a8:b1:cb:
                    bd:15:c6:a9:a3:e1:15:2c:08:27:08:b2:55:96:69:
                    c9:f5:99:8d:8f:23:3d:c0:31:e9:60:af:02:5b:e4:
                    cc:a1:23:23:13:16:14:66:fa:e6:6c:f9:25:ff:4a:
                    5a:14:06:db:59:e8:5b:74:3c:a2:0c:3b:f7:05:be:
                    fd:93:94:de:20:09:89:06:bf:1a:7b:15:19:12:a0:
                    ad:de:87:b5:0a:2d:06:94:50:10:ce:94:f0:23:ae:
                    8c:3e:eb:bc:d1:94:46:d6:3a:82:e9:9d:b1:75:f6:
                    f5:87:8f:84:48:4d:5d:ef:c8:d2:a6:a8:eb:07:37:
                    59:35:fb:85:30:df:77:f8:ae:60:2d:08:d7:da:ea:
                    31:a5:09:bd:33:6b:20:42:6d:85:0d:a3:32:eb:bf:
                    a5:01:7c:6e:d8:3e:4c:44:23:e8:7f:d7:e2:39:ff:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:F5:B0:F2:1C:8C:14:21:AB:3D:43:20:DD:76:5B:4E:35:6C:E2
            X509v3 Authority Key Identifier:
                keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/de94f13edd163420b71fc82ca5406c7c4ff291ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.226.0-181.224.229.255
                  181.224.236.0-181.224.255.255

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:0d:80:54:16:ec:46:24:4a:1e:b5:d9:ba:4c:4c:b4:18:
         fd:b2:07:ef:9e:0d:f4:e1:d9:ba:5d:31:33:58:1e:ed:e9:33:
         77:c3:f0:6f:2b:6e:c5:be:a4:b8:da:64:70:94:5c:73:2d:04:
         66:2a:5e:34:7a:3b:fb:c6:e4:bf:9e:a8:aa:0e:7b:00:41:4e:
         93:6c:86:44:11:72:9c:ae:18:ed:15:e1:fc:b5:68:2d:42:e5:
         ed:cc:b6:23:33:38:be:aa:98:06:b7:9b:88:df:53:72:04:78:
         de:eb:ef:9b:ba:b9:38:ae:72:87:94:1e:10:f5:3d:e4:16:8e:
         7a:15:e6:10:60:cd:62:43:94:b9:4e:7f:e6:89:4e:c2:b2:b8:
         2e:53:67:26:56:69:c4:59:91:eb:b4:5a:09:b2:00:44:c6:14:
         b5:2a:ad:ed:d0:20:91:a8:2a:51:ab:eb:69:23:9c:89:2c:51:
         0d:f2:ee:db:d5:f4:f1:f0:d4:66:24:0b:5b:7b:92:17:ff:ee:
         6f:a1:6e:57:86:4d:74:b7:64:fc:78:8e:11:c2:ce:fe:04:b8:
         54:c2:f7:2a:92:47:30:47:3e:e5:27:e2:84:8d:0c:c1:28:f8:
         bf:1e:2d:98:7d:d4:7b:c8:81:b2:5e:50:6a:5e:a6:c3:21:45:
         8e:7d:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org