Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9aef940181dbde63200ec7d696395411a508e444.roa
File:                     9aef940181dbde63200ec7d696395411a508e444.roa (raw, json)
Hash identifier:          K5XL4S+efiZzCVW+bkui9osh6PvUKECU4MW12euNHVY=
Subject key identifier:   09:0D:EC:07:43:92:43:EE:F6:F9:E9:AF:D8:56:85:3C:02:3E:C7:90
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       05990F
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9aef940181dbde63200ec7d696395411a508e444.roa
Signing time:             Thu 12 Oct 2023 13:31:51 +0000
ROA not before:           Wed 11 Oct 2023 13:31:50 +0000
ROA not after:            Sun 12 Oct 2025 13:31:50 +0000
asID:                     16629
IP address blocks:        181.212.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366863 (0x5990f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 11 13:31:50 2023 GMT
            Not After : Oct 12 13:31:50 2025 GMT
        Subject: CN=9aef940181dbde63200ec7d696395411a508e444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:77:34:75:51:ce:9e:d8:45:48:ca:ba:7a:
                    81:29:ae:5b:7c:fc:06:5a:3f:e7:ce:e5:a2:7e:d8:
                    1e:e5:db:7e:54:8c:a4:fe:d3:7e:8d:11:6f:4b:29:
                    46:10:8d:1a:89:6f:25:1b:87:d1:6c:87:9c:c5:06:
                    37:78:b7:29:b6:84:63:12:da:18:77:78:77:c9:ce:
                    b8:cb:30:b8:0d:fb:f3:86:95:be:7c:2a:c3:18:b8:
                    d9:bc:8d:47:52:70:7e:8c:d4:ba:d9:d7:86:3b:2c:
                    84:55:20:0f:9f:da:07:1f:b4:6c:d8:e8:7a:37:6e:
                    13:79:bd:4c:f1:c1:b5:fb:58:46:be:df:fb:f4:bc:
                    3c:1e:a4:1d:53:75:21:cd:39:48:6e:70:65:7c:5e:
                    26:0e:66:c4:12:fc:8e:07:fc:c3:b0:0f:5d:9f:30:
                    0e:aa:03:bd:9b:a1:ba:c4:0e:54:6a:06:a9:1e:3f:
                    15:92:bb:f1:28:15:2a:2e:01:3c:19:9f:2b:96:19:
                    96:d5:03:95:0e:ee:c7:dc:85:2f:0e:b2:76:df:4a:
                    fa:ee:44:84:76:77:88:eb:c5:a3:9e:cc:ac:b6:31:
                    21:93:3e:56:88:27:78:fe:3a:f2:e2:34:b4:05:bf:
                    c1:59:f0:4d:2a:55:62:00:36:d9:ad:64:b4:d8:c3:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0D:EC:07:43:92:43:EE:F6:F9:E9:AF:D8:56:85:3C:02:3E:C7:90
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9aef940181dbde63200ec7d696395411a508e444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:5e:35:b7:11:b8:4d:0b:88:07:3e:a4:44:14:82:d9:9d:11:
         36:c4:31:42:6a:76:11:bc:b8:c1:a5:ea:13:80:3c:98:08:a0:
         73:4a:64:12:b0:7b:15:82:fd:e7:0b:ed:36:2a:8f:5d:f1:ca:
         4f:86:4d:af:05:df:c3:fc:96:39:cd:2a:c5:5c:70:e7:3e:b8:
         34:e1:34:2c:85:95:a5:f5:c7:12:65:8e:42:98:58:fd:bc:93:
         2e:c8:08:c3:08:54:3b:ec:2d:10:27:c3:e8:e4:9c:9f:80:5f:
         34:8a:a7:38:27:6c:3c:5e:2f:af:4e:6c:66:71:e5:21:e3:9f:
         96:53:d2:a8:f9:b5:e2:7b:a7:ec:f5:57:64:a2:c8:8d:9a:59:
         3e:ec:f1:d9:9b:09:67:5a:bb:0c:33:64:df:b9:d4:44:ef:71:
         ff:bb:db:86:38:e0:1b:28:3e:59:67:e6:9d:59:3a:91:81:7c:
         f7:2a:e7:83:0b:a7:2d:a2:19:62:9a:8b:35:92:7b:8b:40:23:
         70:62:5e:ca:9a:f2:f7:11:a3:05:a1:c9:88:23:48:1c:b6:47:
         07:03:79:06:06:7f:53:df:c1:b8:7e:f1:6e:15:10:de:b3:63:
         c5:cc:e1:d6:08:a1:1f:c3:71:2b:88:82:db:d9:8c:91:46:14:
         d4:12:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org