Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/6907151864407f183383df27a87e1777992ecfb2.roa
File:                     6907151864407f183383df27a87e1777992ecfb2.roa (raw, json)
Hash identifier:          LZZDdgSYiH5le+02vMvTZZID87F7+m9jFpaoQDuIfiQ=
Subject key identifier:   32:A9:F7:D6:8A:D6:D6:50:3B:C4:83:8D:AD:80:75:2C:1C:6C:E4:48
Certificate issuer:       /CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
Certificate serial:       05EA9A
Authority key identifier: 8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/6907151864407f183383df27a87e1777992ecfb2.roa
Signing time:             Tue 18 Jul 2023 15:30:56 +0000
ROA not before:           Mon 17 Jul 2023 15:30:56 +0000
ROA not after:            Fri 18 Jul 2025 15:30:56 +0000
asID:                     271944
IP address blocks:        181.232.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387738 (0x5ea9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
        Validity
            Not Before: Jul 17 15:30:56 2023 GMT
            Not After : Jul 18 15:30:56 2025 GMT
        Subject: CN=6907151864407f183383df27a87e1777992ecfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:1e:3b:c7:60:79:c9:99:d0:5d:7e:76:66:
                    01:b0:a4:c3:55:52:fb:aa:c5:19:2c:32:b2:09:76:
                    cc:44:5d:18:88:0a:de:34:45:6b:6e:0c:bb:ee:f0:
                    f0:13:31:f0:da:fa:f8:92:ec:1d:91:da:fa:ee:d0:
                    d9:84:0a:37:84:af:b5:31:25:ba:db:84:9b:2a:73:
                    bc:c6:33:5d:91:c9:bb:69:2d:89:4f:e5:fd:dd:8a:
                    c1:70:e0:1e:af:1f:f3:fb:6e:c9:ca:96:6c:56:5b:
                    04:ae:7e:8e:79:27:81:bc:a1:d6:8f:22:8e:da:12:
                    c5:c7:94:ae:99:cb:f5:1e:41:7c:12:2c:82:66:e5:
                    7a:69:69:1e:3d:42:a1:25:4f:c8:b2:d5:7e:50:2f:
                    5c:d9:9b:ac:4b:dd:cb:02:8f:a2:97:b9:f4:ae:e6:
                    1c:81:e8:9d:22:c1:60:7c:63:3a:4a:26:53:43:52:
                    c6:61:62:50:0d:19:fe:9c:bc:2a:1c:64:b1:ab:cd:
                    95:92:d0:18:5b:cd:3a:e8:72:de:c2:7f:62:fb:ac:
                    95:00:8b:bd:c1:b0:88:e2:b7:da:0b:3e:35:e0:59:
                    8f:7b:50:b5:0d:63:00:a6:19:bc:cb:29:f3:fc:cc:
                    85:c6:70:56:f8:14:9f:5a:27:80:c0:96:b6:9f:d6:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A9:F7:D6:8A:D6:D6:50:3B:C4:83:8D:AD:80:75:2C:1C:6C:E4:48
            X509v3 Authority Key Identifier:
                keyid:8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/6907151864407f183383df27a87e1777992ecfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/b1d26b632f0eecb3c9ba3d91dff070512a60b299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:89:9b:b0:aa:0c:a5:69:ec:95:62:f0:f5:86:7d:d6:ae:26:
         32:4b:78:c5:0f:be:e8:1d:e4:e4:26:ed:8c:df:4a:b4:78:bd:
         d8:33:3c:04:87:4c:01:67:a9:8e:2b:9d:59:e4:35:90:43:0b:
         0f:ac:45:58:99:8b:90:81:10:d5:7f:8d:fc:2d:9d:14:12:bc:
         e7:e1:ef:cc:0f:a9:7e:24:14:04:2e:4a:fc:15:18:0f:ec:94:
         1a:a3:b3:79:0e:b8:5f:53:bc:71:ac:e6:34:7a:8d:88:1b:04:
         c1:3b:4d:ac:4e:08:58:58:cf:52:1e:51:a2:b1:8c:5c:9c:81:
         ae:2c:f1:53:44:ca:57:1a:fc:6b:3f:b8:12:85:1b:8f:10:13:
         7f:e2:69:1d:86:e6:22:ed:4e:cd:cc:a4:f0:84:83:ee:f4:19:
         dd:37:dc:c1:bf:5c:12:71:60:af:74:0a:77:f3:ac:a3:40:ec:
         37:33:ad:2b:3e:a2:04:8a:e1:f6:38:b0:5b:4c:d8:1b:44:da:
         d3:5c:dc:47:af:74:10:6c:74:09:04:67:1c:d9:70:0f:ad:48:
         9c:d4:ab:a6:6f:f1:23:42:e2:5c:02:88:c1:f3:2f:05:e1:d3:
         b1:9c:ca:b8:b2:2e:48:a8:f0:d0:b0:a6:3d:64:c7:25:6e:55:
         9d:83:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:51 2025 by rpki-client