Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/48bc82b904621d0f13a0fad8c0b57fa51a913d19.roa
File:                     48bc82b904621d0f13a0fad8c0b57fa51a913d19.roa (raw, json)
Hash identifier:          FHfdlZ5Ev1ROBW6T0H66UnbLpUV38uWwppjHPbwoUsA=
Subject key identifier:   37:BA:7B:F6:A2:77:AA:F0:23:02:73:77:39:98:29:14:D6:1D:F9:8B
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       14F8B4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/48bc82b904621d0f13a0fad8c0b57fa51a913d19.roa
Signing time:             Thu 27 Jan 2022 10:26:20 +0000
ROA not before:           Thu 27 Jan 2022 03:00:00 +0000
ROA not after:            Sat 27 Jan 2024 03:00:00 +0000
asID:                     139660
IP address blocks:        181.215.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374388 (0x14f8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan 27 03:00:00 2022 GMT
            Not After : Jan 27 03:00:00 2024 GMT
        Subject: CN=48bc82b904621d0f13a0fad8c0b57fa51a913d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:9c:6d:69:7e:e4:5e:09:91:57:b9:40:c6:
                    8b:8c:da:47:b2:03:2e:9b:3c:b4:5c:06:a7:f4:04:
                    cf:cd:9b:3e:04:5f:c3:82:19:a4:9d:48:5e:4d:2b:
                    02:c4:d0:41:80:17:08:33:22:1c:bf:f6:0b:f7:46:
                    67:50:7c:80:86:51:5d:05:d7:ba:f1:d9:67:d0:9e:
                    bf:74:fa:c2:15:fa:f8:60:9e:c8:52:c4:2b:cc:20:
                    94:34:b5:e3:3a:a3:37:32:bb:f1:07:4e:6e:3b:06:
                    d1:76:d3:db:69:61:f5:ea:30:82:d5:b0:6b:8d:a9:
                    7b:15:c5:73:ae:88:89:0f:c5:d9:2e:5b:cd:93:27:
                    9a:ab:8c:a8:e3:5f:fa:b1:1d:f5:85:87:8e:67:a7:
                    fe:04:5c:e3:62:83:d0:20:2d:d3:61:08:2a:b7:00:
                    6d:df:6c:54:cc:30:b0:78:10:dc:34:ba:29:9f:2e:
                    1b:c3:7d:05:1e:7a:49:b4:90:c4:cf:37:cc:83:ce:
                    de:53:5e:8d:f9:43:31:ba:78:5f:5a:0a:ab:a5:00:
                    ae:98:9d:4b:dc:1c:79:6d:28:10:33:33:46:ac:33:
                    37:40:2c:97:59:c5:0e:b2:66:be:89:f0:56:c7:f8:
                    33:bf:97:76:e2:8b:2c:1f:22:63:9d:e9:18:14:a4:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:7B:F6:A2:77:AA:F0:23:02:73:77:39:98:29:14:D6:1D:F9:8B
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/48bc82b904621d0f13a0fad8c0b57fa51a913d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:43:7d:f8:08:61:27:fb:dc:83:05:c7:f3:12:13:0c:08:d6:
         da:18:d0:3a:e5:47:30:ff:d1:d7:bd:a6:50:3c:f6:9b:81:85:
         ab:2e:68:8a:c5:69:c6:43:b7:93:cb:26:25:2f:13:da:3f:32:
         cd:9f:b0:15:55:1a:02:1d:dc:83:4f:bd:cf:d5:49:03:dd:30:
         e0:48:b6:38:17:da:97:5b:d7:d0:62:84:bc:26:d9:de:d9:8b:
         fb:ad:9a:b0:e5:93:8e:0b:56:cc:74:2a:38:b0:61:30:05:2b:
         4b:de:12:f8:86:3b:68:ea:ed:f2:3c:a1:93:ab:ce:78:1a:03:
         96:4a:a6:f7:2b:b9:c4:b6:00:8b:1f:d8:ba:30:05:8e:12:22:
         4a:2b:b5:89:7b:2d:74:21:94:5d:4c:4c:74:b2:e3:d3:dd:ab:
         22:bf:d5:ce:8c:e7:80:fa:be:26:1f:27:f5:4f:3a:e8:ee:00:
         ea:b8:5d:8f:b8:d4:e8:82:42:95:31:86:1a:cc:fe:ef:42:86:
         de:6c:da:6a:46:d3:49:7c:b7:6b:52:2c:29:3c:fa:bb:8c:4f:
         b6:fb:32:05:d2:74:bc:cd:ae:63:8e:05:c9:46:d0:d9:26:1b:
         d3:64:12:b8:36:0c:d6:6c:e1:0b:7f:70:65:06:98:b4:ca:cc:
         05:1c:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org