Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/c1a60e929bd32b95400342a24b54e7d3145972e5.roa
File:                     c1a60e929bd32b95400342a24b54e7d3145972e5.roa (raw, json)
Hash identifier:          VL//xfDOtoV9HLrvAaif248RoCCU7H1RhIF++G2BEfE=
Subject key identifier:   29:0D:5D:1C:E8:B9:3D:AD:E3:A4:02:DD:5B:D7:12:76:8E:1D:42:E1
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       2503A6
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/c1a60e929bd32b95400342a24b54e7d3145972e5.roa
Signing time:             Tue 26 Sep 2023 17:13:27 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     263805
IP address blocks:        181.39.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425766 (0x2503a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=c1a60e929bd32b95400342a24b54e7d3145972e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:ba:39:03:97:a0:00:e3:12:7b:40:77:67:
                    94:66:c1:cf:b1:a8:34:a6:de:e5:4b:84:43:08:b2:
                    7d:70:6b:91:f5:b9:00:1b:ab:6f:0b:93:3a:14:31:
                    b8:dc:61:95:71:b3:fa:78:ee:c4:e5:6c:b3:86:03:
                    6e:42:26:45:65:8a:dd:e5:5a:3b:55:89:ac:ac:35:
                    43:22:1e:3c:6d:23:ad:0b:bb:f3:19:24:12:de:a3:
                    eb:ec:d5:b3:48:b9:9e:28:e3:42:7e:c6:0b:53:20:
                    38:ee:23:d0:30:47:4c:fe:d6:b5:e6:01:ed:af:07:
                    29:15:84:11:31:cd:2c:ad:2b:5e:fc:22:df:9a:76:
                    26:e3:26:04:09:fc:77:dd:ad:20:96:49:cc:4c:53:
                    dc:32:ec:2e:f3:49:d6:95:2e:a9:ae:6a:50:01:1b:
                    17:da:7a:21:fb:5d:7d:61:6b:0c:b7:bb:8f:fb:c9:
                    0d:2d:39:3b:de:77:94:f8:e7:e7:03:f5:0e:1c:cd:
                    21:5c:eb:28:98:10:17:25:83:2c:92:2f:54:59:f8:
                    bc:a5:22:61:ab:94:75:e1:af:e5:29:e0:5a:40:73:
                    b2:a4:7a:00:48:42:8a:70:8d:70:1e:02:0d:a8:22:
                    7e:91:31:3c:24:52:d6:2b:7a:db:c4:11:45:2d:14:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:5D:1C:E8:B9:3D:AD:E3:A4:02:DD:5B:D7:12:76:8E:1D:42:E1
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/c1a60e929bd32b95400342a24b54e7d3145972e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:6a:0f:1c:f4:af:39:36:90:6c:ab:c0:71:b8:31:ef:0d:
         0e:92:a6:4a:ff:ad:53:9c:46:90:c6:b3:fa:8f:14:79:14:48:
         0d:29:b6:05:36:98:70:46:6c:18:0d:93:c4:16:d3:b2:66:4d:
         6c:0b:c7:89:6b:79:30:2c:69:d8:af:20:be:9d:e0:2d:63:b6:
         27:46:ee:2e:f4:69:34:3a:d8:43:9f:37:99:05:94:fc:7b:1e:
         df:de:30:b2:5e:38:d8:4a:c5:f5:9e:16:3d:77:71:14:e4:79:
         73:0b:3b:43:65:00:72:49:f5:13:dd:af:46:98:6e:a8:9f:ac:
         63:a5:45:7d:97:d4:60:61:d2:9c:9e:58:02:f6:98:25:f9:9d:
         80:03:ce:b9:ba:8f:10:4c:64:b0:ca:82:4e:74:3f:e3:6c:b8:
         d6:81:b4:41:a6:58:82:0a:ce:68:01:7f:62:5e:ff:6e:40:4e:
         9e:3f:c9:e0:de:35:07:15:3b:e9:bd:14:d5:9c:a6:58:49:b2:
         62:46:be:73:83:50:7c:77:e2:4f:ec:9e:f1:45:22:6f:9d:71:
         1e:12:79:94:7e:e4:f6:d6:58:0d:7f:7c:31:67:ba:e6:8d:a2:
         9c:cf:7d:35:df:53:d8:3e:16:2e:66:21:ed:5b:9a:ae:a4:9f:
         13:a6:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org