Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d9451b543f09ed445665875cc3731ba5cebf8de7.roa
File:                     d9451b543f09ed445665875cc3731ba5cebf8de7.roa (raw, json)
Hash identifier:          nWLx7uMCkieGjDLii0qDBu5slsLoNgUTzHdGdYdXa+I=
Subject key identifier:   FA:4D:00:F4:A0:C9:5C:8C:8D:08:AA:2F:36:A1:29:27:7F:13:69:96
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       059DC8
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d9451b543f09ed445665875cc3731ba5cebf8de7.roa
Signing time:             Thu 12 Oct 2023 13:33:07 +0000
ROA not before:           Wed 11 Oct 2023 13:33:07 +0000
ROA not after:            Sun 12 Oct 2025 13:33:07 +0000
asID:                     19196
IP address blocks:        181.212.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368072 (0x59dc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 11 13:33:07 2023 GMT
            Not After : Oct 12 13:33:07 2025 GMT
        Subject: CN=d9451b543f09ed445665875cc3731ba5cebf8de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:23:0e:c7:f2:38:db:fa:cb:c9:78:94:f7:
                    71:6f:92:c3:24:a6:fc:f4:05:3e:2c:92:50:36:7e:
                    aa:2e:f4:d7:8c:41:b5:47:46:1e:99:8c:35:09:97:
                    54:51:83:92:38:88:1f:1e:07:60:30:e6:72:c4:6c:
                    0d:48:10:eb:85:57:5f:80:b9:72:80:ab:18:bc:df:
                    b6:d1:8a:87:82:5f:e1:8c:53:11:52:38:85:fe:72:
                    85:dc:c5:3b:29:f9:97:15:6c:68:ca:57:c0:e6:f7:
                    0c:73:0c:37:03:9a:36:96:68:6c:b0:d4:4e:28:79:
                    01:0f:dc:6f:e2:ee:c0:f0:05:df:e5:e6:e8:4c:22:
                    d9:f8:28:9a:d9:ff:f7:e0:ed:34:2f:91:db:24:82:
                    d1:3f:ea:4e:20:ce:dd:25:29:fe:26:1d:0b:a7:25:
                    ff:38:b1:a9:cd:34:a7:32:31:f6:bc:82:b8:9f:bc:
                    6a:13:9b:03:34:b5:ea:81:c8:12:e5:bc:a8:af:b2:
                    fc:ff:4e:cc:26:cb:24:0e:63:9b:55:81:a6:bd:cb:
                    1f:69:31:53:c5:a3:0b:c7:9e:ae:5a:86:b4:65:30:
                    55:2d:6f:34:a1:91:56:29:1a:86:4b:f9:09:3e:7b:
                    81:2b:ae:81:2b:f0:38:ca:17:e0:90:73:31:0a:a0:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4D:00:F4:A0:C9:5C:8C:8D:08:AA:2F:36:A1:29:27:7F:13:69:96
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d9451b543f09ed445665875cc3731ba5cebf8de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.212.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:b3:44:71:d4:3a:74:1b:04:3f:bb:88:4b:56:27:1d:8c:
         9e:26:91:8a:49:8a:65:75:5f:b7:61:da:24:3d:64:c7:2d:68:
         65:62:2b:06:72:ef:65:32:13:8d:58:fd:26:97:8a:5a:b4:60:
         4b:72:70:38:11:3e:fc:5e:1a:7a:28:dc:af:f0:fd:aa:0c:ab:
         58:ae:7e:eb:8d:bc:74:31:d3:ff:ff:b2:13:d8:57:66:a5:11:
         fe:8a:5e:00:b9:6b:2c:6f:84:94:1b:25:4b:74:9a:14:cc:d7:
         b5:d8:ca:04:aa:f9:1c:6a:42:2e:89:67:9c:72:61:be:0f:2a:
         b9:2a:d5:f2:af:76:ae:f8:83:a9:36:6b:8a:7b:de:4f:3a:22:
         a3:db:38:00:fa:64:19:90:6b:92:3c:4e:8f:61:8a:33:03:3d:
         5a:54:79:fa:55:94:5e:c1:ac:03:e1:ae:7e:09:e3:79:0d:89:
         58:c3:80:d3:f7:05:c8:bb:fb:62:c7:cb:f3:2c:c6:91:32:f2:
         99:d4:1d:f5:45:5a:b8:b9:93:bf:9a:f5:ce:0a:3d:55:45:43:
         d7:51:54:c5:25:7b:b8:56:08:f9:06:7a:8c:31:c1:50:d8:95:
         a0:e4:64:c6:8a:7b:4b:c9:8e:0f:41:d3:e6:66:9a:32:81:79:
         18:89:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org