Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/a0ed941c1b0921ea879f06540f6ed94b744f1bcd.roa
File:                     a0ed941c1b0921ea879f06540f6ed94b744f1bcd.roa (raw, json)
Hash identifier:          lyshPgBWthzmUwXpF0XRT8Oqu4pfSKRK15LeaFFma2k=
Subject key identifier:   12:F9:CD:09:C1:89:66:8F:32:B2:DC:55:11:BE:41:91:1C:8A:0A:5A
Certificate issuer:       /CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
Certificate serial:       05EF9B
Authority key identifier: 8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/a0ed941c1b0921ea879f06540f6ed94b744f1bcd.roa
Signing time:             Tue 18 Jul 2023 15:31:24 +0000
ROA not before:           Mon 17 Jul 2023 15:31:24 +0000
ROA not after:            Fri 18 Jul 2025 15:31:24 +0000
asID:                     271944
IP address blocks:        181.232.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389019 (0x5ef9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
        Validity
            Not Before: Jul 17 15:31:24 2023 GMT
            Not After : Jul 18 15:31:24 2025 GMT
        Subject: CN=a0ed941c1b0921ea879f06540f6ed94b744f1bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:12:98:04:aa:8c:49:c9:73:ac:bd:70:9b:
                    d2:ae:69:76:ab:a0:ed:01:f2:d5:d0:24:d8:b9:8b:
                    24:46:7c:d2:a8:73:87:97:7a:ad:ce:52:54:75:c0:
                    a0:10:1e:cd:65:89:f2:0f:f5:23:44:23:6b:dc:85:
                    f5:94:33:5d:18:d1:0d:20:8c:3a:cb:e3:81:e3:67:
                    be:3a:a0:94:a4:e9:c1:c7:de:f1:1f:76:c5:ca:49:
                    60:a7:46:73:b8:1e:a5:ff:79:5a:bb:9d:b6:05:ea:
                    97:74:79:bf:fc:a9:96:a8:70:32:f5:48:b3:cb:d6:
                    02:d3:b0:7d:a6:de:70:02:e4:57:87:6a:1f:9b:5f:
                    a1:0d:88:8c:80:e5:27:bd:d4:fa:9e:92:d3:81:00:
                    d0:0d:be:e6:d9:b8:8a:0c:df:5a:49:76:af:5a:99:
                    4a:29:10:5b:e4:93:10:bb:db:9f:6b:0e:7c:bf:30:
                    d0:66:91:d4:88:27:04:8c:7e:cb:0f:cd:40:4c:32:
                    5c:bf:1d:7e:e9:6d:b0:e7:c5:0a:ab:1c:5f:3d:38:
                    95:af:61:ac:9a:fb:34:67:2b:4e:54:ba:40:42:5b:
                    3a:a3:92:88:96:3c:08:7c:06:a3:a3:31:fb:f3:51:
                    88:fd:62:f9:93:c6:99:9e:01:fa:0d:94:28:c8:5c:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:CD:09:C1:89:66:8F:32:B2:DC:55:11:BE:41:91:1C:8A:0A:5A
            X509v3 Authority Key Identifier:
                keyid:8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/a0ed941c1b0921ea879f06540f6ed94b744f1bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/b1d26b632f0eecb3c9ba3d91dff070512a60b299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:44:c5:b5:9f:be:61:29:f7:e8:fa:05:3c:62:29:9c:6f:
         99:b2:f3:cd:61:6f:64:ee:02:f4:76:86:6f:43:a9:58:e7:0a:
         b8:32:93:8d:f0:eb:9e:be:8b:50:66:18:6b:8b:dd:bc:b2:22:
         c3:51:74:b8:c4:b7:99:df:d6:dd:a6:64:80:ac:dd:c8:79:1f:
         3d:cc:5c:7c:60:9e:17:52:44:f1:9d:83:aa:34:59:aa:f3:22:
         36:47:8f:34:31:38:5e:b0:0e:7e:fb:0f:e5:d2:62:aa:36:51:
         d7:31:0d:e1:6d:11:1e:29:4c:23:dc:8f:99:f2:8c:04:7a:c0:
         45:bf:a6:4b:4f:cd:b9:45:15:36:fe:26:ed:94:1b:f8:05:ce:
         07:2b:3b:19:b2:fb:7b:98:ae:34:81:1a:ac:85:bb:a4:29:ec:
         e9:aa:50:0a:40:00:65:3a:30:92:f9:09:a8:8a:c8:1c:c4:8c:
         c8:82:b6:4a:e8:8a:99:5e:8f:28:d6:7c:6a:f3:c5:69:36:f3:
         42:42:61:95:2a:85:9f:71:4f:ba:ac:16:de:18:1d:85:6a:53:
         e1:a6:b6:ca:84:63:17:47:cb:12:b7:4e:5a:4c:91:83:8c:ce:
         7d:ce:52:07:94:ed:7c:e2:ce:c5:d2:82:b0:10:9c:26:87:56:
         4c:b6:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org