Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/a5df0d44af7a5e98897b7e7274332913e17fb7c3.roa
File:                     a5df0d44af7a5e98897b7e7274332913e17fb7c3.roa (raw, json)
Hash identifier:          1Gx6NivAxekYZKMsON7h1hB7LzBQalEUjK+WJzGbLuQ=
Subject key identifier:   36:D0:7D:F3:15:32:FA:82:FB:24:CF:E5:D9:47:74:2E:24:4A:61:FB
Certificate issuer:       /CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
Certificate serial:       14BC33
Authority key identifier: C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/a5df0d44af7a5e98897b7e7274332913e17fb7c3.roa
Signing time:             Wed 04 Oct 2023 00:15:19 +0000
ROA not before:           Tue 03 Oct 2023 00:15:19 +0000
ROA not after:            Sat 04 Oct 2025 01:15:19 +0000
asID:                     264619
IP address blocks:        181.191.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358899 (0x14bc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6abe556edb1aa4b4b3686da974eefb141a89fd
        Validity
            Not Before: Oct  3 00:15:19 2023 GMT
            Not After : Oct  4 01:15:19 2025 GMT
        Subject: CN=a5df0d44af7a5e98897b7e7274332913e17fb7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:e9:89:65:68:df:2b:b1:55:56:e4:26:3f:
                    f6:6b:87:78:9f:d8:7c:7b:34:bd:15:62:09:d9:e6:
                    85:20:58:23:18:ad:65:5d:d6:a4:51:0c:1b:49:b1:
                    9c:67:9f:c3:91:f3:6d:86:cd:36:18:86:24:26:0a:
                    1c:a6:aa:0f:78:dd:59:9f:b1:e9:e8:df:63:87:52:
                    d9:a3:93:35:6e:ed:0c:61:6c:cc:a4:87:0c:0a:c6:
                    05:ee:d4:e8:d3:6b:14:ec:fd:51:01:77:ef:4f:93:
                    24:15:47:b1:46:65:ea:98:f7:8e:56:9e:f8:a9:56:
                    ec:f1:a8:22:55:16:9f:6c:ec:d1:bf:02:35:f6:f8:
                    2b:25:02:45:55:f5:3a:ae:e6:c5:4b:6b:4d:e4:df:
                    df:48:fb:71:5b:c2:9a:d3:34:13:2d:8f:62:fe:1a:
                    5f:04:64:b0:44:22:58:f1:82:5a:f5:88:52:60:76:
                    88:84:86:46:1e:51:85:86:4a:cf:dd:41:9f:79:31:
                    f6:df:49:2d:e1:ea:9a:14:5a:5b:5c:cc:cb:10:1e:
                    0e:9b:0c:c2:cd:fd:8f:fb:54:9a:c1:df:6c:a1:4c:
                    0d:96:e2:30:3c:33:0b:ad:ac:8d:df:f5:e0:4f:2e:
                    f4:ed:80:61:a1:54:a0:2b:67:ef:05:b9:94:58:a4:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:7D:F3:15:32:FA:82:FB:24:CF:E5:D9:47:74:2E:24:4A:61:FB
            X509v3 Authority Key Identifier:
                keyid:C7:8B:89:89:72:E0:D4:52:FD:0E:C8:EE:96:16:95:E4:DE:BD:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6abe556edb1aa4b4b3686da974eefb141a89fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/a5df0d44af7a5e98897b7e7274332913e17fb7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9637b9a-1601-4649-988e-129242e8ed63/6c6abe556edb1aa4b4b3686da974eefb141a89fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:ee:4e:eb:c7:ca:71:9a:8e:cb:98:96:cf:72:19:67:d9:
         6e:da:78:48:f5:a7:da:45:5b:38:13:22:9c:13:4e:b6:97:43:
         d0:55:37:dc:e5:19:36:cd:8d:fc:18:56:6f:02:32:00:c6:f7:
         23:36:99:e2:fb:fd:9d:64:98:3b:3c:72:b2:ab:70:f5:98:1a:
         c4:b7:17:5c:fb:4c:0e:d7:b5:f4:d3:6c:fe:54:82:0d:c9:0a:
         32:06:f6:89:95:aa:75:b8:66:b8:b6:1e:7b:72:ff:af:86:ff:
         4e:db:1a:83:64:f5:23:d7:27:f5:23:b0:96:12:36:0a:80:a0:
         1d:af:78:0f:e3:37:1a:38:17:57:68:41:71:31:87:e0:d7:ff:
         b2:8d:77:3f:05:3b:c3:6a:69:55:74:f1:61:83:cf:24:bb:ba:
         21:29:19:31:eb:25:38:3f:1b:cf:0a:25:a7:c1:b7:78:f7:43:
         1c:5b:c8:e0:5b:98:bc:34:46:10:5c:83:a2:53:28:a2:a9:78:
         e2:72:cb:3a:8c:3f:ad:f0:f9:b3:48:03:1a:a9:6d:c5:b0:ea:
         44:f7:92:e8:da:21:63:10:9c:16:06:3a:80:08:56:78:7f:9e:
         58:d6:88:f9:ed:8c:de:b7:4d:b0:b4:bf:ca:93:fa:a9:41:69:
         ce:fa:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org