Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/6b238b1fdc7f8bcc2043d2556d5e2580b0092a67.roa
File:                     6b238b1fdc7f8bcc2043d2556d5e2580b0092a67.roa (raw, json)
Hash identifier:          Zm2BI4jXYcRu7296/6jYxq19hqO3d6nnqEIhib/akN0=
Subject key identifier:   DC:6E:2C:EA:CB:CD:AF:56:13:01:3E:18:D9:6A:EA:40:41:29:ED:E6
Certificate issuer:       /CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
Certificate serial:       2716FB
Authority key identifier: 7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/6b238b1fdc7f8bcc2043d2556d5e2580b0092a67.roa
Signing time:             Fri 12 Jan 2024 15:14:35 +0000
ROA not before:           Fri 12 Jan 2024 15:14:35 +0000
ROA not after:            Mon 12 Jan 2026 15:14:35 +0000
asID:                     265819
IP address blocks:        181.209.88.0/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561787 (0x2716fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5265fc51b7f5a9f0ec142aa30846e06015ca4ff
        Validity
            Not Before: Jan 12 15:14:35 2024 GMT
            Not After : Jan 12 15:14:35 2026 GMT
        Subject: CN=6b238b1fdc7f8bcc2043d2556d5e2580b0092a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:73:66:68:95:93:5f:f8:ad:7a:13:2b:62:
                    ef:4c:71:7e:fe:1b:52:64:ca:45:68:8e:f9:5d:3f:
                    43:f3:b7:98:6b:58:18:55:1a:21:f5:94:48:24:6e:
                    b4:c0:98:90:be:4c:27:4a:96:49:b9:79:b7:7e:bc:
                    31:bf:04:fe:0e:be:1c:dd:68:30:f1:94:ec:d5:ad:
                    1a:25:2b:9a:c0:72:12:41:c6:0f:e1:a9:11:c8:07:
                    19:23:88:2a:bc:46:bc:ce:34:3a:40:b6:86:38:04:
                    48:a0:38:65:79:0f:6b:cd:f4:98:71:07:b4:f4:49:
                    c6:5f:a1:25:c5:8e:5f:4e:62:6f:49:55:0f:22:b4:
                    9f:8e:7e:8e:b6:70:69:d4:58:f1:d9:1b:b0:e8:16:
                    15:18:b2:75:91:d0:3c:a0:bf:fe:b6:2a:ff:6c:63:
                    9d:6b:20:34:06:a7:44:2f:9c:61:9e:5c:e8:8b:24:
                    67:37:67:a3:39:5d:6b:f2:d6:62:30:90:04:a8:f1:
                    bf:6f:55:e4:d7:07:13:ec:93:18:bd:0a:db:4f:19:
                    cf:95:e2:dc:c0:98:77:f7:85:36:69:26:fb:bf:91:
                    ce:6a:a1:e8:9f:b7:c9:f5:c1:df:01:f3:02:f5:a6:
                    ee:ef:41:e6:59:98:26:0b:f7:60:8b:9c:91:05:66:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:2C:EA:CB:CD:AF:56:13:01:3E:18:D9:6A:EA:40:41:29:ED:E6
            X509v3 Authority Key Identifier:
                keyid:7B:81:30:97:3D:07:EE:38:1D:BC:1C:6C:C9:D0:90:B0:10:92:A6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/6b238b1fdc7f8bcc2043d2556d5e2580b0092a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e06244f4-1f59-4182-8105-8d770ece2856/a5265fc51b7f5a9f0ec142aa30846e06015ca4ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.88.0/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:5b:3c:7f:7f:44:ec:fe:79:bd:71:16:4b:95:ee:7a:a1:
         87:73:c0:0e:78:22:b9:4e:40:cf:07:54:9e:6b:85:05:9b:a1:
         6d:d3:5a:3d:5a:23:b8:90:c0:cf:de:93:24:59:aa:bc:16:ff:
         58:6d:b9:07:da:cd:44:c1:c4:de:1c:10:5b:40:8d:58:63:22:
         1d:a7:bd:2c:c1:42:68:f1:ae:d2:0b:9e:b4:17:59:27:cf:e3:
         4e:c7:80:4c:46:d2:7a:5c:67:21:79:00:59:4a:7f:fc:fa:33:
         22:bf:08:04:1f:84:88:05:54:89:05:3f:9d:f6:fa:c1:ff:8d:
         0c:35:7c:22:18:9b:5c:46:d4:b0:68:8b:d8:64:dd:1d:a2:90:
         c4:cc:33:03:fc:f9:a7:db:49:e0:b8:24:17:34:8a:bb:4a:9a:
         a2:95:72:ad:e2:b2:a3:e1:d0:9a:14:c2:a6:73:c2:43:24:57:
         c4:9a:fc:eb:27:f8:14:8b:37:9e:85:33:df:39:77:57:68:27:
         56:72:01:f2:a9:58:71:7c:7d:bd:bf:9b:23:f2:74:73:4e:c7:
         0f:fc:01:87:1c:fb:87:e1:b1:9a:f2:51:36:5d:b8:7f:15:6a:
         c0:ad:5b:f6:a9:3a:46:18:f1:b0:33:8d:4a:2d:90:2b:17:84:
         80:77:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org