Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa
File:                     83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa (raw, json)
Hash identifier:          PulRa1GcyayyDMa9FMuFCVGLSe12g8Uab/MV2Qpni38=
Subject key identifier:   8B:9A:EF:51:D3:EB:EE:CF:62:EF:6E:4E:B8:5D:DD:13:BE:11:66:64
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       0DEE8B
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa
Signing time:             Wed 24 Mar 2021 14:28:59 +0000
ROA not before:           Wed 24 Mar 2021 14:28:59 +0000
ROA not after:            Tue 24 Mar 2026 14:28:59 +0000
asID:                     28075
IP address blocks:        181.118.64.0/23 maxlen: 23
                          181.118.84.0/22 maxlen: 22
                          181.118.88.0/22 maxlen: 22
                          181.118.96.0/22 maxlen: 22
                          181.118.100.0/24 maxlen: 24
                          190.113.160.0/24 maxlen: 24
                          190.113.161.0/24 maxlen: 24
                          190.113.167.0/24 maxlen: 24
                          190.113.170.0/23 maxlen: 23
                          190.113.180.0/24 maxlen: 24
                          190.113.181.0/24 maxlen: 24
                          190.113.182.0/23 maxlen: 23
                          190.113.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913035 (0xdee8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Mar 24 14:28:59 2021 GMT
            Not After : Mar 24 14:28:59 2026 GMT
        Subject: CN=83d1b447bd0d36c8723fb7ab10682e63787c2dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:72:40:84:29:38:2e:7e:87:d8:f1:13:05:
                    9c:17:c5:91:b9:e0:55:0e:f4:2a:2b:f6:56:f6:fc:
                    09:e6:a5:91:e9:7c:fa:1c:48:a9:05:32:af:1b:f8:
                    e9:2d:68:a7:9f:3f:88:17:c8:33:fa:5d:5d:6b:1e:
                    a7:f1:13:f4:ca:1c:60:f7:26:bb:c6:a7:3a:e3:7c:
                    0b:e9:4a:35:1c:30:80:2a:93:6c:4b:7d:5a:c8:09:
                    36:c5:93:df:6d:53:9e:c4:d9:2a:f1:2d:1f:ea:7f:
                    dc:3a:a2:d9:8e:7c:54:49:ea:7a:e7:70:2e:bb:9c:
                    32:c9:78:23:34:7f:55:16:c9:61:8b:af:01:75:17:
                    38:06:1d:5a:9f:df:a1:02:0a:af:a7:4a:e2:44:3d:
                    76:a0:ef:92:cc:ea:1f:c7:7e:3c:27:ec:d4:8a:5d:
                    5d:19:cd:c9:c6:48:73:43:f9:cb:de:94:e4:95:0b:
                    7c:d2:49:2f:f8:02:c1:bd:9c:83:e7:7e:75:d3:ef:
                    e3:c4:11:0b:c6:06:73:9d:1a:48:e8:70:1c:6c:ab:
                    36:b1:d5:71:51:01:a0:86:54:3e:54:09:7c:40:b4:
                    36:49:b2:a0:93:a4:bb:39:4a:20:f5:1f:2b:d9:cc:
                    41:a6:22:4d:39:2f:ac:59:72:ac:18:29:88:b7:10:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:EF:51:D3:EB:EE:CF:62:EF:6E:4E:B8:5D:DD:13:BE:11:66:64
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.64.0/23
                  181.118.84.0-181.118.91.255
                  181.118.96.0-181.118.100.255
                  190.113.160.0/23
                  190.113.167.0/24
                  190.113.170.0/23
                  190.113.180.0-190.113.185.255

    Signature Algorithm: sha256WithRSAEncryption
         31:db:64:6f:de:b4:31:26:22:a6:d4:19:9a:d8:01:4e:88:35:
         9b:24:37:34:54:86:fe:75:24:4e:2f:53:85:2d:a7:f4:17:b9:
         b3:2c:e1:fc:e0:18:8f:ed:28:61:1d:c7:a1:df:28:05:5c:6f:
         59:a8:27:9c:06:93:fe:2e:b7:84:8e:e3:eb:9d:c1:7f:77:88:
         2c:86:1b:58:f7:d3:92:50:88:dd:e5:8e:14:c3:59:bd:9e:50:
         dd:75:4d:aa:1f:76:72:d4:04:c4:0e:ed:1d:c7:47:bb:e4:39:
         16:8f:2b:d5:d7:09:32:bc:65:e1:32:cf:82:f7:b2:1f:32:d3:
         88:d9:9f:b1:c9:f0:a6:66:13:66:78:dc:81:3b:65:6d:1c:e5:
         6f:be:55:75:8a:3b:84:c9:83:b1:72:61:9f:2b:45:bb:50:4f:
         d3:f1:69:91:73:72:30:6c:ac:32:12:24:d6:61:60:40:4f:d3:
         ba:e2:42:78:8f:37:15:c8:90:4c:90:e4:e5:e7:4d:dd:ea:c8:
         9d:65:cc:05:14:cb:44:dd:2f:70:17:f3:02:80:bf:b6:53:d0:
         3b:cf:9a:7f:70:c2:e0:ce:a2:6f:c4:57:f9:d7:95:0e:20:e5:
         c2:32:51:02:69:24:a6:da:7e:9e:d3:9a:24:45:ba:b8:6e:e9:
         3f:05:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org