Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2375ef6cc73fbe7930a765e222e992b810cf6a1e.roa
File:                     2375ef6cc73fbe7930a765e222e992b810cf6a1e.roa (raw, json)
Hash identifier:          IqCux1jVCUJj8egZilioEr7nHR5KHl9Cc1rkFYI44dE=
Subject key identifier:   89:8E:15:55:40:92:BD:A3:65:FF:0F:86:A2:10:DD:2E:B4:62:4F:CA
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       067369
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2375ef6cc73fbe7930a765e222e992b810cf6a1e.roa
Signing time:             Wed 24 Mar 2021 14:33:36 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     19844
IP address blocks:        191.96.48.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422761 (0x67369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=2375ef6cc73fbe7930a765e222e992b810cf6a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:06:33:ae:62:75:2a:ae:d5:e6:23:12:b7:
                    1d:2f:26:91:80:96:aa:1f:92:61:36:1d:de:e6:b6:
                    e5:b8:d1:37:26:78:f7:b4:d1:fe:23:8d:ad:58:34:
                    ef:fc:3b:a0:85:ea:41:a0:95:66:83:7c:95:21:b6:
                    8c:73:50:4a:e6:79:48:81:28:d3:48:49:b5:60:95:
                    1b:33:a2:ed:9e:09:f5:92:a2:6f:cc:49:3a:71:ff:
                    ed:14:e9:f5:18:6e:1f:b6:35:2c:d9:11:15:d2:e5:
                    84:26:2c:c7:e3:c1:57:52:35:3f:78:30:99:d9:b7:
                    9a:7f:8f:97:ca:5e:10:f9:68:6d:dd:e1:c8:65:58:
                    f5:cd:af:e3:46:2e:c2:b9:d3:94:8a:e2:4c:ad:b7:
                    b4:ad:ec:bb:12:ba:d0:d0:05:e5:f3:55:f6:ef:9a:
                    82:a3:76:d8:5e:95:10:53:41:ff:4f:bf:ed:85:3f:
                    c0:b7:fc:f8:52:27:4d:79:d9:a6:0f:69:ca:1e:91:
                    e7:19:f4:26:74:67:b1:0a:46:89:28:30:13:21:ca:
                    5e:3f:c6:ee:ab:1a:9e:bf:22:de:21:5f:67:89:12:
                    78:00:22:de:40:fe:18:c5:56:d1:75:b8:6c:ef:c6:
                    80:16:f1:59:a7:9f:cc:9e:f2:61:41:f1:38:c9:90:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8E:15:55:40:92:BD:A3:65:FF:0F:86:A2:10:DD:2E:B4:62:4F:CA
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2375ef6cc73fbe7930a765e222e992b810cf6a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:78:19:8a:8f:7c:04:d0:2f:19:41:57:cf:3d:89:82:2d:10:
         3b:cd:1c:e6:f2:17:2e:c2:41:27:83:a7:ab:2b:3f:2f:3c:95:
         ee:ed:f5:4d:d2:0f:81:2c:0b:9f:09:a5:11:e4:d0:61:b7:e2:
         ca:eb:34:64:e5:72:04:8a:2a:2a:47:9a:75:bf:ca:ea:ef:2b:
         f1:d1:57:ab:73:f7:0f:26:a2:d3:b7:f0:1f:1e:e3:98:e9:52:
         b2:59:79:37:b2:9c:5b:17:57:43:cd:42:fb:cc:89:05:9a:3c:
         cb:59:43:64:37:cb:7d:aa:0d:30:6d:48:01:5b:4f:83:4b:80:
         8f:55:8c:1f:e4:19:8e:df:2e:35:31:09:01:05:d3:2f:e3:d1:
         ac:2b:87:78:cf:34:17:69:d7:7f:4a:99:ff:67:0e:77:da:fb:
         a4:01:39:0f:4c:f2:e0:7c:b7:7f:8b:fb:88:23:d0:c3:34:6e:
         e8:88:47:69:3d:eb:c0:ba:6d:d1:eb:e7:cd:6d:58:f9:45:7b:
         a1:01:4d:3e:32:19:e5:21:9d:7e:f8:34:d0:df:c2:05:40:0f:
         76:dc:9e:4b:ec:0a:b5:4b:74:2d:67:23:14:a6:43:3e:66:15:
         6c:11:1a:a4:ee:ee:ad:ac:75:3f:be:65:66:1c:31:44:98:97:
         1a:10:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org