Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/0b57015531ab9217500af4d096fa2048e56e4bb8.roa
File:                     0b57015531ab9217500af4d096fa2048e56e4bb8.roa (raw, json)
Hash identifier:          IeykYCOJElgFgMT2qxe0Cw6BANwtKEj7xQ3JrH+8McY=
Subject key identifier:   6D:7A:A0:06:F2:D3:B5:7A:08:DC:9F:F6:A0:E4:EF:5C:A6:D2:40:58
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       2851FD
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/0b57015531ab9217500af4d096fa2048e56e4bb8.roa
Signing time:             Fri 08 Mar 2024 16:58:13 +0000
ROA not before:           Fri 08 Mar 2024 16:58:12 +0000
ROA not after:            Sun 08 Mar 2026 17:58:12 +0000
asID:                     52471
IP address blocks:        181.189.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642429 (0x2851fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar  8 16:58:12 2024 GMT
            Not After : Mar  8 17:58:12 2026 GMT
        Subject: CN=0b57015531ab9217500af4d096fa2048e56e4bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:50:d0:e7:8f:33:09:f1:ea:50:1b:f9:f4:
                    1e:73:2f:23:18:28:fc:80:7e:f1:8f:7c:29:f1:73:
                    c9:79:9d:9c:fc:22:ab:53:f8:a3:ad:c5:fa:da:77:
                    65:81:2e:4f:f8:26:2f:53:87:7d:ac:5a:15:d7:ed:
                    bb:5d:45:a6:12:d7:ae:e0:a0:af:7f:93:ed:7c:87:
                    3d:d7:a9:cf:d4:68:d8:13:89:ec:47:9a:61:a1:6e:
                    88:42:7c:a5:ed:53:e1:93:ea:86:92:3f:ac:7d:70:
                    91:6e:77:fe:4f:f8:33:fe:ef:cc:97:d8:69:8d:79:
                    e1:d5:e0:d9:a7:48:e2:90:00:1a:d5:34:df:11:f5:
                    15:be:99:59:04:01:d2:b2:b3:85:40:7b:ef:6e:d3:
                    81:a6:2b:9f:05:e7:29:d9:9d:a0:79:87:5e:d9:58:
                    b3:34:f7:c9:9b:05:cd:5b:d6:a6:04:c9:45:cc:d4:
                    87:1e:42:ab:95:6f:6a:85:74:30:e6:b8:e1:36:59:
                    e2:04:67:aa:9a:7d:cc:53:b7:28:d5:0b:48:91:cf:
                    85:61:f3:6c:cc:bb:dc:82:f4:14:d2:dd:66:a3:cd:
                    a9:e6:4c:9e:36:2e:f2:e0:56:f6:c2:1c:41:af:5d:
                    04:92:6d:3f:b9:0a:29:02:7e:b9:9a:d9:b4:06:be:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:A0:06:F2:D3:B5:7A:08:DC:9F:F6:A0:E4:EF:5C:A6:D2:40:58
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/0b57015531ab9217500af4d096fa2048e56e4bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:9d:94:73:a7:c7:ab:07:61:0a:0f:b0:8a:c3:5a:da:25:
         42:37:57:ed:8a:f6:e2:71:c0:99:15:88:83:f5:3b:97:dc:6c:
         46:3b:17:d7:12:6b:d1:d3:27:ff:70:55:46:c8:4e:25:a0:df:
         6d:e4:22:e6:2e:5c:78:87:13:f2:19:fe:35:f2:33:5b:34:7f:
         4b:06:ac:a5:04:43:23:b1:eb:19:53:d8:0a:41:e5:0c:e5:89:
         99:52:34:6c:af:0c:cd:e3:9c:cb:07:e9:9c:d8:9c:80:1f:63:
         84:eb:1a:0c:a6:5d:44:9c:53:0f:ec:9e:96:aa:5c:40:58:3e:
         1d:d6:0b:64:ae:2b:30:61:c3:da:f8:5c:c0:bf:8a:6b:c6:0e:
         71:a4:3e:b1:03:dc:43:3f:1c:0c:46:7d:fd:95:ee:14:4c:e6:
         df:1b:12:64:cd:87:df:67:32:c4:b7:c2:60:01:a6:9a:79:56:
         ce:15:b3:ca:49:4b:cd:52:6c:89:23:d4:4f:50:aa:9c:4f:54:
         c1:aa:33:4f:c7:d1:5c:e4:0b:11:c6:f1:a0:85:32:f6:7f:2d:
         bc:99:f8:b6:6d:da:24:c8:f2:ad:30:ce:98:bd:fb:66:de:45:
         17:40:a4:2c:6c:1d:58:0f:69:4e:b9:70:ae:53:51:8d:7c:87:
         d4:55:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:35 2024 by rpki-client on console-fra.rpki-client.org