Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa
File:                     0b80284afa76f80048417cf229d1ef6ee86bf8af.roa (raw, json)
Hash identifier:          FEtqdCTeL1nHLJsBjNs2nrvpHe4WrZzNviFMDc8z71A=
Subject key identifier:   7D:51:36:19:FE:C3:FF:DD:08:5A:3A:FC:8A:68:72:41:93:4C:DB:FF
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0E023B
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa
Signing time:             Wed 24 Mar 2021 14:29:00 +0000
ROA not before:           Wed 24 Mar 2021 14:28:59 +0000
ROA not after:            Tue 24 Mar 2026 14:28:59 +0000
asID:                     28075
IP address blocks:        181.118.106.0/24 maxlen: 24
                          181.118.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918075 (0xe023b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 14:28:59 2021 GMT
            Not After : Mar 24 14:28:59 2026 GMT
        Subject: CN=0b80284afa76f80048417cf229d1ef6ee86bf8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:29:d0:cd:8b:74:8d:6f:00:39:c2:c1:35:c8:
                    50:fb:25:b4:8d:06:e3:3a:28:24:cc:d3:e1:d3:8c:
                    97:98:18:7c:ed:67:86:70:6e:7f:99:87:be:15:72:
                    8c:38:27:ed:6f:72:18:dc:d7:13:f9:e4:d0:61:4a:
                    55:b6:5f:8f:1a:6a:02:02:40:f7:67:3f:64:ba:8e:
                    e5:9b:6c:da:e7:2a:72:41:5a:d8:41:e5:92:56:fc:
                    ff:5c:53:48:9c:31:dd:13:77:8d:3b:73:aa:e4:dd:
                    42:bf:e2:da:21:92:d4:e5:07:5a:a5:96:17:ce:a1:
                    aa:f7:53:7b:c6:19:17:b8:2d:42:6e:b5:81:ac:38:
                    bc:36:b0:a1:28:87:f0:2d:ce:96:aa:c1:00:69:1a:
                    9f:1c:42:b8:88:91:93:a1:33:64:62:59:dd:0c:7e:
                    39:cc:6e:b7:a0:dc:fb:0f:f0:e6:86:cf:f5:51:3d:
                    69:46:a3:57:51:de:51:28:c5:4e:75:e1:e1:9e:6b:
                    51:2f:31:76:5d:d6:53:c9:92:f3:56:bf:94:1d:bc:
                    e4:a6:0a:63:1c:35:b7:4e:c2:06:1c:0d:02:71:6b:
                    ca:72:3d:82:90:e5:9e:4a:b4:78:03:b3:79:15:1a:
                    bf:6f:64:b9:47:2b:cc:e0:95:6f:0c:ce:a8:8a:a9:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:36:19:FE:C3:FF:DD:08:5A:3A:FC:8A:68:72:41:93:4C:DB:FF
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:14:51:ef:da:c6:5c:ee:9f:a7:d6:b1:1a:e0:64:c6:cd:
         62:f9:d6:61:63:02:1d:ef:4c:40:fa:c3:56:29:5f:03:e5:69:
         d7:b6:a3:ba:58:e5:d3:da:5c:d2:ee:7b:03:f5:24:93:8a:3b:
         53:ad:bf:20:a7:bd:76:3d:e3:fb:0a:7b:ed:d0:a1:80:49:63:
         d6:89:90:29:7c:77:99:3f:0f:16:2a:b9:7e:e9:c3:a2:51:2a:
         e3:d3:72:fc:25:04:a4:26:1f:65:67:bd:0f:31:1c:36:19:74:
         14:20:81:28:6d:49:57:4b:a4:17:94:a3:88:89:1c:cf:22:ea:
         b1:c9:d5:7d:a9:af:c5:41:2c:94:8d:e4:6d:c1:51:51:36:a9:
         bc:3e:31:96:d4:a0:1a:8f:90:8c:79:da:85:72:8a:7c:88:4f:
         2d:b6:9d:ae:2a:75:e7:12:44:ff:84:98:a4:f8:82:18:f7:2f:
         4c:a8:36:18:aa:3e:a6:ce:b3:55:f3:02:b6:ce:c5:a3:ab:65:
         86:fd:61:be:39:c6:7c:da:ae:20:61:b3:1e:6a:98:dd:c4:7a:
         b8:73:64:5f:1c:27:20:e2:6a:ab:24:1f:56:05:f5:b5:62:dd:
         ae:2a:bd:bb:66:7f:6c:e8:41:70:73:a5:2d:7a:92:67:6e:80:
         a1:86:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org