Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/1e16d268301752db03509859c31a88212205466d.roa
File:                     1e16d268301752db03509859c31a88212205466d.roa (raw, json)
Hash identifier:          Y06zT76845jr9cLVcVqVw5AlgBSLsdWwwHDOIVAsfcc=
Subject key identifier:   95:6C:5D:75:96:AD:08:FC:D0:39:CD:84:70:0A:C8:83:0E:C4:09:92
Certificate issuer:       /CN=9f93cc4be904bedf51ae14caa9d33ee5ec03dce8
Certificate serial:       1E1780
Authority key identifier: DE:16:CC:0D:84:F3:21:46:7E:1C:D7:08:83:A4:50:00:E5:65:D0:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/1e16d268301752db03509859c31a88212205466d.roa
Signing time:             Tue 24 Jan 2023 18:31:51 +0000
ROA not before:           Mon 23 Jan 2023 18:29:17 +0000
ROA not after:            Fri 24 Jan 2025 18:29:17 +0000
asID:                     264738
IP address blocks:        181.191.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972096 (0x1e1780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f93cc4be904bedf51ae14caa9d33ee5ec03dce8
        Validity
            Not Before: Jan 23 18:29:17 2023 GMT
            Not After : Jan 24 18:29:17 2025 GMT
        Subject: CN=1e16d268301752db03509859c31a88212205466d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:eb:48:45:43:c7:a6:79:bc:12:da:ea:fe:
                    70:35:87:fc:d5:b3:26:c6:ab:87:d2:95:fc:69:a1:
                    05:61:1d:73:36:5f:17:ec:06:cf:aa:70:76:3a:9a:
                    b2:6d:32:0d:92:3b:aa:e1:de:25:6c:09:d0:2b:cd:
                    94:7f:bd:84:28:fa:0f:08:b3:4d:ac:75:c7:7d:1e:
                    90:51:9d:fe:e9:be:3e:8a:6a:dc:ca:3f:ca:55:34:
                    2a:80:41:7b:96:6d:a3:93:d4:e2:6c:d6:f2:a3:46:
                    f8:3f:34:6f:8e:f9:5f:6b:ff:23:fc:1b:2b:8a:9d:
                    61:7d:1f:e9:12:50:98:8b:04:e4:f7:9c:d3:8d:1c:
                    91:9f:bf:fd:21:43:18:a1:c2:28:a2:78:c7:88:79:
                    85:e4:65:9c:c0:4b:71:22:83:97:39:02:04:5f:94:
                    40:a8:ab:53:7f:70:a9:9f:c0:10:4f:0d:68:68:69:
                    02:55:c3:61:c8:b1:7f:65:a1:fd:ae:05:49:ae:a1:
                    85:36:e0:82:32:1e:36:35:ca:4c:79:9e:4e:4c:f3:
                    b9:7d:ac:d7:6e:f8:ea:61:0f:19:89:4f:3a:a8:c4:
                    f7:dc:8a:a9:74:be:10:07:a7:ec:e5:9a:9e:a9:6e:
                    8f:e2:b0:1e:fe:40:0d:84:ed:96:5c:89:cc:9d:1d:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6C:5D:75:96:AD:08:FC:D0:39:CD:84:70:0A:C8:83:0E:C4:09:92
            X509v3 Authority Key Identifier:
                keyid:DE:16:CC:0D:84:F3:21:46:7E:1C:D7:08:83:A4:50:00:E5:65:D0:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/1e16d268301752db03509859c31a88212205466d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef31cd1b-4c3c-4cea-880c-7a6ea6ebd562/9f93cc4be904bedf51ae14caa9d33ee5ec03dce8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:29:31:f0:0f:0a:50:69:2b:69:5c:6e:86:e4:1c:a9:37:9b:
         8b:61:85:99:d8:cb:f2:be:89:8c:fe:6d:e4:d3:f3:ff:fa:6b:
         4d:db:4a:23:b2:95:85:72:c5:5e:07:03:e4:6f:94:d8:c2:54:
         3f:0f:9b:41:be:67:74:e1:1c:3b:02:06:47:c7:55:b7:06:40:
         fb:39:b0:4a:d7:8c:72:13:5e:9c:10:85:fb:6b:ef:cf:62:07:
         e4:62:45:4e:48:ae:4b:85:12:a8:e2:0d:5d:1d:5c:64:e5:b0:
         41:39:bb:0d:83:7d:b5:27:f7:6c:8e:ad:da:af:c7:43:f9:c0:
         56:e5:34:97:32:81:cc:c8:13:21:b9:a6:7c:47:a8:18:7e:e8:
         6f:69:61:a5:df:31:ba:82:7a:fb:b9:47:74:ce:c2:b1:dd:b3:
         f3:2f:c2:0d:fc:82:b8:f4:07:d5:db:9b:dc:37:59:e2:82:9f:
         25:70:9c:e7:b6:80:f7:fc:25:95:90:98:40:76:3b:63:ae:5e:
         4e:8c:d6:73:45:de:2a:c3:9b:c2:f9:33:60:29:b4:51:66:88:
         4c:f1:47:2c:9d:6c:65:a6:e5:cc:c4:58:8e:ae:d0:7a:8b:bb:
         0a:03:00:b7:b4:56:24:6b:10:6f:42:b8:c7:bf:f6:66:73:7e:
         ca:14:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org