Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/efedb979-26c7-452e-8f36-9ef325138f80/4fbc1a497a34fc5821dd4c123a2e2ad524c9a40e.roa
File:                     4fbc1a497a34fc5821dd4c123a2e2ad524c9a40e.roa (raw, json)
Hash identifier:          AOE4fGKnxjSuPBDaTmU3MhzV2Gq2iFb+EGYtDpwlvMQ=
Subject key identifier:   21:E9:D1:4A:61:9D:3A:D8:A1:29:E0:C9:44:4E:63:62:91:B7:D8:F8
Certificate issuer:       /CN=3f3f5f267b4f8dbd26f5dfbf3c434305f2beef88
Certificate serial:       03A5
Authority key identifier: 5C:27:1B:36:3C:D1:06:2A:3F:37:21:4F:29:66:5C:81:11:67:CC:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f3f5f267b4f8dbd26f5dfbf3c434305f2beef88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/efedb979-26c7-452e-8f36-9ef325138f80/4fbc1a497a34fc5821dd4c123a2e2ad524c9a40e.roa
Signing time:             Tue 19 Jul 2022 23:18:27 +0000
ROA not before:           Tue 19 Jul 2022 03:00:00 +0000
ROA not after:            Fri 19 Jul 2024 03:00:00 +0000
asID:                     272068
IP address blocks:        181.224.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f5f267b4f8dbd26f5dfbf3c434305f2beef88
        Validity
            Not Before: Jul 19 03:00:00 2022 GMT
            Not After : Jul 19 03:00:00 2024 GMT
        Subject: CN=4fbc1a497a34fc5821dd4c123a2e2ad524c9a40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:d2:89:02:47:c0:84:bf:22:21:c7:cd:9e:
                    6a:d2:02:72:eb:d6:22:a3:c0:16:d9:40:06:41:c7:
                    58:45:48:b6:b8:fe:d0:ac:dd:94:3b:f5:e7:42:73:
                    5d:29:db:fb:59:05:eb:b4:2d:fa:02:96:07:eb:fe:
                    d0:f3:df:b8:ce:5d:7c:7c:7f:6c:68:69:4a:69:73:
                    02:f4:a1:19:b6:b2:d0:14:c0:eb:0d:af:e5:7f:11:
                    82:4f:cf:0d:eb:a4:30:28:30:6f:36:ef:8b:1f:84:
                    d3:b1:e2:0c:1e:a8:ee:b9:a4:18:b9:12:60:4e:4e:
                    b4:a4:37:d9:2a:e4:43:34:49:51:b6:7c:19:6f:57:
                    66:e5:a5:1a:7a:3d:f0:73:2b:1b:09:34:d0:a1:d0:
                    b1:f6:3c:6b:5f:d3:04:ce:e3:67:db:39:f6:1b:58:
                    13:06:eb:d9:7a:4c:5b:c9:53:4b:32:81:ae:54:eb:
                    ae:db:ff:af:61:3f:8e:d9:67:46:7c:64:13:79:8e:
                    c4:6f:fb:20:d2:bd:e5:f7:c0:c5:bd:e0:fe:5f:53:
                    cb:12:ea:5d:36:0a:fe:d9:66:f5:93:df:b3:62:01:
                    97:33:04:e7:7d:c4:89:4b:04:07:d2:e1:2c:d5:26:
                    08:75:fc:7f:ed:c9:a2:84:4f:25:5e:a5:48:b6:be:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:D1:4A:61:9D:3A:D8:A1:29:E0:C9:44:4E:63:62:91:B7:D8:F8
            X509v3 Authority Key Identifier:
                keyid:5C:27:1B:36:3C:D1:06:2A:3F:37:21:4F:29:66:5C:81:11:67:CC:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f3f5f267b4f8dbd26f5dfbf3c434305f2beef88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/efedb979-26c7-452e-8f36-9ef325138f80/4fbc1a497a34fc5821dd4c123a2e2ad524c9a40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/efedb979-26c7-452e-8f36-9ef325138f80/3f3f5f267b4f8dbd26f5dfbf3c434305f2beef88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:af:18:43:3d:b2:b9:9a:70:f2:cf:f7:86:68:32:b0:5c:6f:
         b6:1c:97:e5:1a:0a:9b:6d:4d:17:53:53:65:d4:ad:7c:8f:da:
         ab:ff:da:1e:c1:7e:55:6a:1d:a3:aa:03:4d:22:28:2e:48:f9:
         4e:f4:7c:44:f6:db:80:12:6e:0c:c4:d5:98:4e:8d:2a:4b:51:
         24:83:4d:47:63:39:b4:62:37:ba:cf:f2:aa:04:af:e1:d8:34:
         cf:74:5d:4e:51:44:ca:65:c3:f9:d9:23:9e:98:5e:17:72:0a:
         01:0f:e3:d9:dc:28:34:10:97:fd:36:7e:8d:5e:d4:f6:53:f7:
         05:b9:48:a1:17:b5:ce:40:36:8d:8e:8a:1a:a0:3a:bc:b5:0b:
         64:44:a6:ab:fa:c5:af:28:0f:55:da:31:0e:f6:ce:c8:7c:a3:
         7a:f6:7e:71:d1:a0:84:83:48:ef:b8:eb:00:18:ea:97:a3:3a:
         35:6d:61:3f:43:cf:2e:04:79:25:8c:b3:e2:70:d5:e6:8f:22:
         76:82:2f:64:c0:24:71:bc:8b:14:6c:af:90:7e:8c:31:f1:b9:
         b7:c6:4f:9e:8a:ec:12:6b:1d:c8:6e:8c:3b:9e:d8:c8:f3:06:
         59:41:54:34:45:fb:da:95:27:2f:04:b2:60:9b:a0:a6:94:54:
         8c:81:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org