Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/01c154a115cd261f17b10d5b4c011cb3afe68572.roa
File:                     01c154a115cd261f17b10d5b4c011cb3afe68572.roa (raw, json)
Hash identifier:          kO+kzKSpJABp3goMrejgr44OaCuZIFXMZxWhoHvxHsE=
Subject key identifier:   C6:08:A2:AB:61:7F:A8:4D:88:87:ED:8C:04:3D:17:3E:E6:48:6E:94
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24ECF6
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/01c154a115cd261f17b10d5b4c011cb3afe68572.roa
Signing time:             Tue 26 Sep 2023 17:12:57 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     19114
IP address blocks:        181.198.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419958 (0x24ecf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=01c154a115cd261f17b10d5b4c011cb3afe68572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:bc:16:f1:ba:f1:79:ee:0c:ba:84:d3:f1:
                    1e:fb:e9:04:2e:10:19:20:07:c6:e2:06:08:64:11:
                    28:17:3e:44:88:ea:e7:dc:67:73:a0:d4:1a:cd:96:
                    57:dd:46:38:b8:84:19:e3:63:2f:d9:3b:68:d6:d8:
                    4f:5e:a5:1c:a4:20:87:5f:17:6a:a3:71:b2:09:3d:
                    71:65:85:e1:7c:dc:a5:ff:48:a4:e9:4d:c9:f4:db:
                    76:9d:72:38:27:23:7c:f6:82:79:aa:1a:56:f5:0b:
                    59:b4:27:26:bd:7b:02:35:2e:1d:35:cd:45:75:79:
                    fa:96:cd:44:cd:65:07:e7:f6:23:f2:4e:01:45:42:
                    18:89:1d:7e:b2:cc:19:cb:b1:bb:ce:4c:71:5f:da:
                    27:80:96:06:09:e3:20:76:81:f5:62:26:40:87:48:
                    c0:fd:d4:9c:c2:2f:0a:bc:47:56:d7:88:0b:bf:c2:
                    68:d4:33:84:2e:01:42:79:48:c3:01:b4:aa:e7:30:
                    69:eb:a5:5d:03:7e:80:61:f2:1e:32:85:45:0d:7f:
                    fd:e4:cd:b0:7b:64:f3:ca:51:01:ea:e3:dd:8a:43:
                    bd:7f:de:1a:63:84:7d:c9:a2:b1:00:1b:63:16:76:
                    83:d0:e8:1e:b7:65:fb:ac:40:eb:8b:3e:2c:9d:42:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:A2:AB:61:7F:A8:4D:88:87:ED:8C:04:3D:17:3E:E6:48:6E:94
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/01c154a115cd261f17b10d5b4c011cb3afe68572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:55:67:94:3b:a6:27:e9:53:a6:14:c2:76:f2:9b:fc:30:3e:
         0c:a3:85:73:a3:11:81:17:14:48:f2:4b:68:94:92:23:dc:dc:
         e1:7a:90:a5:5c:80:69:e4:07:a8:2d:1e:b1:97:e7:35:ab:2b:
         99:c4:0b:63:59:37:30:bc:af:72:55:1b:ac:ce:24:71:99:5a:
         57:69:b3:19:4e:11:6c:20:79:63:c1:03:2c:37:04:3a:b4:b2:
         d9:68:c6:e9:b3:13:68:43:5a:eb:f4:5e:8e:d0:36:83:61:14:
         31:b8:c8:77:ec:21:50:85:af:57:e6:a8:b6:00:df:35:23:e4:
         6f:0b:1a:93:50:a5:f8:03:40:e7:fe:6e:7c:a3:d9:df:13:5a:
         c7:53:36:17:14:80:14:e9:91:3d:54:23:e3:55:c1:a1:2f:65:
         76:fa:8a:1b:f2:6b:5f:89:78:7f:36:0b:75:4a:99:be:db:4c:
         5c:25:29:0a:2d:25:84:0a:26:e9:b4:9c:f2:57:42:e6:cd:eb:
         a8:5b:7f:08:cd:72:32:48:af:bb:1f:2c:f1:f9:a4:3b:06:f8:
         4e:c7:44:b7:59:88:31:74:c4:96:c8:1e:00:af:d3:67:53:68:
         b4:c1:23:1d:d1:34:c1:5e:59:b3:53:2d:af:6f:12:1f:75:ea:
         2c:bd:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org