Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/4bb8c89d393344b23411802fa2d00b818e7e3073.roa
File:                     4bb8c89d393344b23411802fa2d00b818e7e3073.roa (raw, json)
Hash identifier:          Y+BICy+ZYWoGAPE/vLlZ1tRWbL6MOkK6cumLnH3vnFU=
Subject key identifier:   21:F4:08:99:25:0B:FA:33:62:90:F5:3D:A1:D9:6C:B7:FB:8E:FD:C6
Certificate issuer:       /CN=22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e
Certificate serial:       22B23C
Authority key identifier: F4:7C:3F:47:EE:43:14:77:57:45:DF:04:67:B1:C5:D5:33:42:10:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/4bb8c89d393344b23411802fa2d00b818e7e3073.roa
Signing time:             Wed 23 Aug 2023 08:30:00 +0000
ROA not before:           Tue 22 Aug 2023 08:30:00 +0000
ROA not after:            Thu 21 Aug 2025 08:30:00 +0000
asID:                     267708
IP address blocks:        181.224.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273852 (0x22b23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e
        Validity
            Not Before: Aug 22 08:30:00 2023 GMT
            Not After : Aug 21 08:30:00 2025 GMT
        Subject: CN=4bb8c89d393344b23411802fa2d00b818e7e3073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:70:47:02:9f:37:52:a5:1d:89:98:12:5e:
                    2d:f3:75:e6:1e:1d:29:b1:4c:e6:9e:92:6d:6b:44:
                    3f:88:f3:e6:eb:7b:6d:3a:90:a1:55:7f:ec:99:ba:
                    78:21:f1:8c:da:66:31:9d:21:8f:b8:b7:8c:bf:c9:
                    d6:46:0d:2d:b0:f1:6e:fe:29:c1:ec:f5:f2:a4:fa:
                    67:a2:13:d0:7b:62:27:81:13:1f:6c:42:22:c8:1b:
                    3a:c5:71:22:a2:64:8b:0c:18:aa:f7:33:63:86:58:
                    17:ff:ac:61:b1:16:9a:dd:67:06:e6:1e:9d:0e:d4:
                    4b:9c:54:c1:12:9c:60:9e:47:0a:d3:79:61:ef:ae:
                    5f:e7:34:ce:61:cf:b0:35:7b:6d:03:f0:ca:e2:1a:
                    65:20:7d:bd:1d:6d:0c:66:36:0e:a3:a9:a4:b4:c7:
                    b4:70:e5:63:73:e5:fa:5c:29:54:57:7f:db:3f:dd:
                    bd:d3:75:5e:a6:41:91:75:20:45:94:d9:67:40:71:
                    fd:b4:6b:c2:e2:5d:64:c1:25:14:e6:b1:a3:21:ab:
                    13:39:6c:9a:39:b0:1e:5b:db:4e:98:04:1d:7e:6f:
                    20:e4:15:c6:7b:e4:3a:d7:0b:b0:b5:66:90:ff:2e:
                    3e:c9:9f:19:11:68:67:94:e7:b5:7c:5d:02:4b:36:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:08:99:25:0B:FA:33:62:90:F5:3D:A1:D9:6C:B7:FB:8E:FD:C6
            X509v3 Authority Key Identifier:
                keyid:F4:7C:3F:47:EE:43:14:77:57:45:DF:04:67:B1:C5:D5:33:42:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/4bb8c89d393344b23411802fa2d00b818e7e3073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:21:14:94:86:a3:64:a7:ee:ad:e4:69:37:53:60:f2:ef:b0:
         93:f2:c3:83:85:4b:da:ec:89:c6:61:02:94:23:84:c6:a8:d6:
         81:0e:ae:4e:98:41:c0:e5:9e:4b:50:d5:f4:ac:c6:a1:88:2f:
         12:51:8b:85:83:01:cb:6d:ac:ee:a4:dd:68:d0:6d:06:f3:47:
         7a:bb:f3:53:d9:8d:66:5c:be:3d:fc:5e:aa:47:62:84:d2:d3:
         34:2f:eb:eb:62:66:9d:e0:f9:50:68:bc:12:93:95:c1:27:56:
         13:28:cd:e9:03:c5:01:f5:aa:73:bf:2b:36:45:14:a8:dd:13:
         25:d9:d3:e1:90:82:6d:54:6d:bd:b1:5e:3f:26:00:c2:4f:99:
         d3:02:75:74:b8:37:ad:0d:36:39:55:8e:79:e2:1d:3e:c4:dd:
         b9:71:4a:ca:7d:a9:4e:72:30:fe:a3:f2:ef:cf:e9:04:08:81:
         2e:3b:81:cc:e6:a2:6e:06:61:84:54:ed:1d:47:0b:51:91:2b:
         9d:76:3a:d9:5f:76:8d:17:5c:0e:b8:07:51:81:6c:33:50:03:
         82:d0:a0:64:70:65:c4:c7:7a:ce:f0:bd:0f:e3:d0:38:65:7f:
         bd:b1:83:4f:06:c8:32:6d:21:6f:98:47:17:58:fc:53:48:de:
         09:39:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org