Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/b99de0d41117ed8e3bf2cc3d4dcc39c24b5c780f.roa
File:                     b99de0d41117ed8e3bf2cc3d4dcc39c24b5c780f.roa (raw, json)
Hash identifier:          AGh2vpVw0Cw8bvIplJzN6bGG6CH5JuYxXEowI0gW+XY=
Subject key identifier:   7A:5E:58:85:4F:51:85:E3:7B:20:4A:2B:25:0C:5C:14:99:A5:71:2F
Certificate issuer:       /CN=869f7d019a2cd350762d2696e9f2033d079fd988
Certificate serial:       1F062F
Authority key identifier: 65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/869f7d019a2cd350762d2696e9f2033d079fd988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/b99de0d41117ed8e3bf2cc3d4dcc39c24b5c780f.roa
Signing time:             Fri 17 Feb 2023 09:49:54 +0000
ROA not before:           Tue 28 Sep 2021 16:12:28 +0000
ROA not after:            Tue 29 Sep 2026 16:12:28 +0000
asID:                     265760
IP address blocks:        181.224.164.0/22 maxlen: 24
                          2803:9300::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033199 (0x1f062f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869f7d019a2cd350762d2696e9f2033d079fd988
        Validity
            Not Before: Sep 28 16:12:28 2021 GMT
            Not After : Sep 29 16:12:28 2026 GMT
        Subject: CN=b99de0d41117ed8e3bf2cc3d4dcc39c24b5c780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:1d:88:5b:22:f2:e7:47:1c:b2:ff:ba:aa:
                    6c:f7:2d:b5:e6:76:22:05:17:41:f9:67:68:d4:56:
                    ac:91:97:d5:fd:35:43:14:9d:10:d6:ce:f4:a0:31:
                    ca:19:80:0b:35:ff:40:0b:65:07:93:41:83:22:80:
                    79:5c:9e:a6:e1:6b:fb:43:fa:3c:4e:12:7e:8c:60:
                    29:e9:71:ab:24:2d:af:a5:da:d4:cc:5f:78:5a:bd:
                    41:4d:6c:95:2c:6f:f2:e0:5a:7b:47:91:5e:b5:6f:
                    ae:d1:0e:e5:9d:1b:75:cc:17:db:3b:34:0e:59:1c:
                    3c:27:c8:b1:13:1f:47:f4:00:5d:78:fc:78:5e:fc:
                    d1:b6:ff:b6:fc:7a:97:78:ec:b2:a5:55:4d:c0:13:
                    e9:8b:06:93:ff:6b:05:e3:48:b0:32:56:9b:9e:f7:
                    9b:bf:50:0a:8d:36:86:10:3f:0c:03:06:b2:2a:6e:
                    4f:01:b5:df:3f:e5:e7:e5:04:ee:de:2f:be:7d:84:
                    2d:e5:01:6b:06:61:a3:19:5a:5c:ce:b9:5a:4f:b0:
                    81:34:a5:a3:50:31:8d:91:43:98:60:e4:65:20:64:
                    f2:24:1d:09:cd:37:99:e2:3a:e2:3b:b5:74:e3:f7:
                    18:ea:f8:ea:a4:95:ee:31:cb:22:57:b7:c7:c1:d1:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5E:58:85:4F:51:85:E3:7B:20:4A:2B:25:0C:5C:14:99:A5:71:2F
            X509v3 Authority Key Identifier:
                keyid:65:57:CF:54:48:13:62:4B:C0:98:B8:7B:5B:03:54:E8:F5:BA:20:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/869f7d019a2cd350762d2696e9f2033d079fd988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/b99de0d41117ed8e3bf2cc3d4dcc39c24b5c780f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/869f7d019a2cd350762d2696e9f2033d079fd988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.164.0/22
                IPv6:
                  2803:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:3f:32:38:c4:af:e0:54:5e:1c:e3:40:5a:47:3e:f8:5e:
         75:8f:3e:93:46:d0:08:2e:8d:74:51:13:83:44:bc:b9:af:5d:
         c6:34:bd:2b:64:ec:eb:9e:2d:45:fd:24:39:3f:ef:66:40:31:
         c3:e3:24:67:83:ce:34:51:1d:6d:bb:d4:8d:c8:97:23:19:98:
         c4:8f:7d:de:30:c7:1e:0c:99:a6:4c:73:61:10:b7:f3:c8:b3:
         a9:b9:99:f4:18:c0:87:0e:55:ae:4a:eb:99:50:06:8e:5d:be:
         0b:04:33:8b:51:c6:71:a6:db:47:ad:52:4a:67:af:31:d8:f6:
         f4:1e:da:81:6e:53:df:6c:88:4f:50:3a:a6:18:ad:42:c8:ac:
         27:ca:cc:7e:32:15:82:44:61:4a:d5:93:87:f8:7c:a6:ce:98:
         2f:bf:b0:fd:6b:7a:60:60:f5:2e:2d:62:38:0e:23:2a:67:a2:
         65:bd:69:a6:b0:d2:c8:a2:d2:39:19:48:c3:e5:a1:4d:97:ee:
         07:db:30:03:95:96:75:ea:96:f2:79:ad:a4:04:0d:53:9f:ba:
         93:a1:bc:03:2e:06:46:a6:84:72:43:8c:dc:fc:7d:b5:39:e9:
         8d:2a:5f:9f:fd:e9:12:de:6e:b7:9a:1a:e9:b6:c0:5c:ff:f4:
         12:b8:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 14:21:11 2023 by rpki-client on console-fra.rpki-client.org