Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/ed1f7d66261bf2fa4729aa9e75c8b662debd6ecc.roa
File:                     ed1f7d66261bf2fa4729aa9e75c8b662debd6ecc.roa (raw, json)
Hash identifier:          39+5OlRqjMg57dbmnZAKrZlImgvUuKP1Fn5jPdzxj6M=
Subject key identifier:   56:CB:59:E6:2E:DE:61:19:0D:50:82:75:D1:F3:54:67:CE:D7:92:D8
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       24DAFB
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/ed1f7d66261bf2fa4729aa9e75c8b662debd6ecc.roa
Signing time:             Tue 26 Sep 2023 17:12:51 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     52257
IP address blocks:        181.199.1.0/24 maxlen: 24
                          181.39.0.0/16 maxlen: 24
                          186.4.128.0/17 maxlen: 24
                          181.199.13.0/24 maxlen: 24
                          190.95.131.0/24 maxlen: 24
                          181.199.28.0/22 maxlen: 24
                          181.199.47.0/24 maxlen: 24
                          186.101.128.0/17 maxlen: 24
                          181.199.64.0/18 maxlen: 24
                          186.3.128.0/17 maxlen: 24
                          181.198.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415355 (0x24dafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=ed1f7d66261bf2fa4729aa9e75c8b662debd6ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:13:f4:09:32:49:f4:a8:1e:6d:6a:a5:65:
                    4b:52:f4:52:7c:a5:b2:82:79:cf:06:bd:1e:fd:48:
                    fb:0d:b9:69:b8:28:97:40:7f:7d:c6:e4:4c:2f:17:
                    bb:ac:2f:60:b9:ab:c3:b1:98:80:1a:9d:d9:e7:23:
                    38:e4:c6:67:21:d4:10:f3:86:6e:c8:04:37:c1:5c:
                    7e:be:82:25:38:c7:7d:77:66:cb:07:76:4d:9d:a7:
                    06:4b:c3:a4:48:88:a7:bc:1c:54:94:00:20:17:3d:
                    60:58:18:63:51:5d:b5:98:3c:25:58:2d:ca:af:b6:
                    2d:3f:7f:4d:79:00:6a:b8:dd:b2:43:b8:5c:c0:c3:
                    c4:94:cf:a1:f1:a7:75:f3:89:b1:ef:e9:15:31:2b:
                    21:d0:e9:65:aa:89:2f:4c:79:cb:83:3a:86:b5:77:
                    88:8b:d5:db:bd:e3:4e:d3:f5:41:ee:6d:6b:a8:24:
                    76:3b:f4:4e:5e:64:45:2f:d4:f9:b4:eb:2c:b0:19:
                    b0:ac:7b:97:1c:bb:4c:5b:8e:5b:21:74:a5:a0:77:
                    da:4a:4f:67:57:3a:70:95:31:bd:0f:65:5b:eb:3b:
                    37:6d:15:a1:e5:b7:96:9a:2d:dd:1a:37:65:fd:3e:
                    fc:4d:3c:94:2e:16:74:56:a2:d0:1c:9b:2f:77:12:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:59:E6:2E:DE:61:19:0D:50:82:75:D1:F3:54:67:CE:D7:92:D8
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/ed1f7d66261bf2fa4729aa9e75c8b662debd6ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16
                  181.198.128.0/17
                  181.199.1.0/24
                  181.199.13.0/24
                  181.199.28.0/22
                  181.199.47.0/24
                  181.199.64.0/18
                  186.3.128.0/17
                  186.4.128.0/17
                  186.101.128.0/17
                  190.95.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:c6:6a:11:12:ab:b9:39:99:74:8e:73:2a:ea:bc:1b:47:
         6c:56:04:d2:d9:20:d9:5f:a7:dd:9f:bd:07:b8:58:64:a1:25:
         b1:a2:f7:02:04:ce:8e:d8:0f:61:ca:e3:e1:50:86:81:c0:92:
         bb:84:4f:08:a4:96:80:05:6c:a7:91:41:73:f6:3f:17:3c:60:
         28:ea:94:be:fe:36:9a:b0:16:1f:c0:bd:5c:b6:ab:f9:fa:e3:
         25:42:1c:db:14:04:1b:bd:1b:d4:06:39:56:14:9a:9a:77:f5:
         27:1e:fb:18:5e:2a:a3:a7:b4:97:a1:1c:81:b3:71:32:a6:53:
         40:51:ac:ea:18:0f:b3:c6:8a:1a:36:b8:a1:4b:c3:18:e0:4f:
         9f:cf:82:cf:0f:8c:af:00:f0:30:45:28:1a:45:3e:2e:a9:18:
         6c:e5:64:3a:2d:59:9c:7d:9a:70:f6:29:61:e2:67:71:11:75:
         b2:a7:c9:ae:5f:c1:65:f5:32:e5:d8:17:1f:ba:92:16:b3:03:
         f4:39:54:05:47:07:21:45:46:1a:ff:c3:77:b8:fa:46:d6:d1:
         97:ea:45:b4:e1:d6:79:1e:f3:73:9f:06:97:1b:96:57:0e:12:
         df:ab:10:ff:df:93:66:3a:28:de:99:8c:96:d9:99:d4:a2:bf:
         05:12:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org