Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5ae65a4b8846e53866931daa31522a03cbc8e449.roa
File:                     5ae65a4b8846e53866931daa31522a03cbc8e449.roa (raw, json)
Hash identifier:          yNOE/diRJ0ZCPbBBqxxoPRATCYLbCoVf8PWWAettvEo=
Subject key identifier:   8C:D0:FD:81:A5:A4:27:CB:E4:6C:DF:38:D7:85:D6:CF:4C:FB:63:3A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06A54E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5ae65a4b8846e53866931daa31522a03cbc8e449.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     138156
IP address blocks:        191.96.92.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435534 (0x6a54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=5ae65a4b8846e53866931daa31522a03cbc8e449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:8d:45:0b:dd:85:e6:ae:cf:56:bd:b0:62:
                    7a:fe:66:cd:b8:cc:4d:d1:e3:e1:a6:ea:64:af:b0:
                    ae:ff:66:b6:26:e7:47:88:d5:3a:de:1f:8d:56:48:
                    d8:f9:2f:f3:48:61:32:c1:d8:19:ad:14:6f:27:58:
                    64:3a:18:5d:1a:b1:ff:92:d7:b4:f2:b2:ef:7a:a7:
                    d6:b9:6c:4f:d8:07:d2:e0:c1:fd:f7:47:a4:2b:f3:
                    69:f6:8a:b1:a2:c4:cb:03:f3:13:86:1a:5d:87:bc:
                    c4:6f:63:b0:91:a8:56:b7:a7:4a:d7:b6:e0:6d:f6:
                    32:6c:32:83:5a:3f:1f:dc:88:69:5c:c2:51:27:9c:
                    11:ef:14:59:1b:11:28:08:6d:ce:09:91:87:2a:61:
                    ca:2e:7f:ec:61:dd:a1:d4:63:ee:35:14:bd:92:1c:
                    02:92:d4:8b:4c:ee:03:98:00:f0:be:e4:cc:f2:a9:
                    d5:56:f9:46:11:8a:71:ad:89:28:77:b1:b7:45:97:
                    1e:ca:b3:c2:f6:d2:7a:43:dd:dd:1d:ec:79:de:51:
                    62:2b:46:48:32:ce:69:ec:8c:22:31:15:51:28:44:
                    28:65:71:15:74:e1:ef:b6:17:bc:00:15:42:85:ea:
                    73:59:4a:43:bb:28:81:61:b6:d1:92:db:9b:24:1b:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:FD:81:A5:A4:27:CB:E4:6C:DF:38:D7:85:D6:CF:4C:FB:63:3A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5ae65a4b8846e53866931daa31522a03cbc8e449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:ab:38:f0:20:f5:ca:a4:c8:e3:91:48:ad:fa:6c:ee:cb:
         0a:c3:06:6c:1c:4e:c8:43:63:b8:92:d2:91:13:36:b5:12:c4:
         87:70:cf:34:d3:ee:93:3a:6d:d9:b0:6d:88:92:b0:ad:7a:26:
         b7:33:26:f7:92:6b:65:74:b8:ba:04:bf:5b:3b:5a:65:e3:0e:
         bb:6e:00:91:a8:fc:7b:39:33:d0:f5:54:9a:2c:d6:09:d4:b7:
         ce:ef:84:1c:ce:ba:b8:9e:58:20:4b:96:38:e6:2f:37:de:0f:
         e8:8a:83:35:4a:e5:93:46:11:05:30:a7:8d:a7:8c:54:d6:6e:
         9d:79:36:50:10:e2:a1:ea:58:7b:7c:32:e8:31:05:ed:3c:c2:
         c2:27:2a:d2:01:23:bc:bb:29:70:ea:19:ad:f5:e6:d8:3a:6a:
         4c:b9:64:ee:b7:9c:f5:1f:16:57:ef:20:58:8f:6f:7d:15:16:
         7c:f8:ff:43:89:2e:7f:a7:fa:ae:6c:a3:f0:a8:96:3e:5b:0c:
         57:14:56:85:c2:67:6a:98:f9:36:c0:f2:39:0a:1c:2a:28:59:
         6c:b9:15:39:50:9e:8c:cf:59:e6:e7:10:ed:0b:09:ae:f2:56:
         01:74:39:5d:07:43:e8:0a:ee:79:fc:8a:37:e9:59:87:5e:89:
         57:6e:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org