Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5dc52381ff349fffe0ffbbb0715a0091f04ba189.roa
File:                     5dc52381ff349fffe0ffbbb0715a0091f04ba189.roa (raw, json)
Hash identifier:          OsEiwX2G5mdyCcSZjxwhe6wJt3ZzK6VlPifKyMb5eTE=
Subject key identifier:   03:CF:BD:7F:63:C1:CF:7E:32:A8:33:B0:E3:03:2D:76:F7:08:A2:84
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       158CA5
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5dc52381ff349fffe0ffbbb0715a0091f04ba189.roa
Signing time:             Tue 01 Feb 2022 13:36:52 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     3356
IP address blocks:        191.96.94.0/24 maxlen: 24
                          181.214.197.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          191.96.206.0/24 maxlen: 24
                          191.96.168.0/24 maxlen: 24
                          191.101.202.0/23 maxlen: 24
                          181.215.252.0/23 maxlen: 24
                          181.214.78.0/23 maxlen: 24
                          181.214.198.0/24 maxlen: 24
                          191.96.52.0/22 maxlen: 24
                          181.214.219.0/24 maxlen: 24
                          181.214.84.0/23 maxlen: 24
                          181.215.244.0/23 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          191.101.187.0/24 maxlen: 24
                          191.101.194.0/23 maxlen: 24
                          181.214.146.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          191.96.233.0/24 maxlen: 24
                          191.101.190.0/24 maxlen: 24
                          191.101.191.0/24 maxlen: 24
                          181.214.13.0/24 maxlen: 24
                          181.214.255.0/24 maxlen: 24
                          179.61.226.0/24 maxlen: 24
                          191.96.140.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          179.61.203.0/24 maxlen: 24
                          191.101.181.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          181.214.244.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          191.101.168.0/24 maxlen: 24
                          191.96.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412261 (0x158ca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5dc52381ff349fffe0ffbbb0715a0091f04ba189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:f9:c8:89:a5:59:03:ef:c5:eb:1c:82:ec:
                    43:67:42:c8:1d:e3:52:91:72:90:a8:8d:f7:a0:7c:
                    54:e0:bc:17:37:cf:dc:1e:48:86:8a:18:fa:16:5b:
                    6a:80:8a:20:4d:6e:b2:31:51:16:88:a3:c4:e8:0e:
                    ce:51:a3:78:da:72:77:1b:a6:83:71:52:14:52:bb:
                    45:3a:51:1a:2d:5e:44:0d:44:f2:6e:ec:a2:0e:93:
                    43:30:27:44:35:af:68:8b:aa:44:5f:eb:68:75:6c:
                    74:5c:2b:87:93:31:8c:f5:8e:8a:06:2d:f3:53:c5:
                    f3:a2:45:7d:2f:88:8b:49:15:d6:80:0b:30:23:d5:
                    f3:66:85:62:32:09:0e:06:d2:12:df:08:d4:2a:a2:
                    08:29:a4:42:97:82:b1:b3:f8:6c:70:96:88:5a:10:
                    a5:b1:0b:9c:6b:a8:8e:12:c0:c9:2d:37:c8:6f:80:
                    f9:23:38:22:37:4b:94:fc:23:4b:76:73:f6:e1:df:
                    cc:d4:61:1d:63:ec:38:3a:e4:87:06:49:e1:cf:bc:
                    bf:2a:de:85:a1:1b:f1:42:33:c3:c7:ca:d1:95:8a:
                    d0:26:c8:4d:29:8a:65:9c:1b:7c:f0:ba:6a:43:34:
                    fc:b8:39:6f:c6:e5:14:d4:e9:6f:97:00:0e:81:b6:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CF:BD:7F:63:C1:CF:7E:32:A8:33:B0:E3:03:2D:76:F7:08:A2:84
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5dc52381ff349fffe0ffbbb0715a0091f04ba189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.203.0/24
                  179.61.226.0/24
                  181.214.13.0/24
                  181.214.78.0/23
                  181.214.84.0/23
                  181.214.122.0/24
                  181.214.146.0/24
                  181.214.197.0-181.214.198.255
                  181.214.219.0/24
                  181.214.244.0/24
                  181.214.255.0/24
                  181.215.9.0/24
                  181.215.31.0/24
                  181.215.35.0/24
                  181.215.244.0/23
                  181.215.252.0/23
                  191.96.29.0/24
                  191.96.34.0/24
                  191.96.52.0/22
                  191.96.61.0/24
                  191.96.94.0/24
                  191.96.118.0/24
                  191.96.140.0/24
                  191.96.149.0/24
                  191.96.168.0/24
                  191.96.206.0/23
                  191.96.233.0/24
                  191.96.245.0/24
                  191.101.168.0/24
                  191.101.181.0/24
                  191.101.187.0/24
                  191.101.190.0/23
                  191.101.194.0/23
                  191.101.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:ac:aa:da:c9:59:ad:e8:a0:8a:0b:4b:16:70:f9:e3:0b:1f:
         d1:7c:85:4b:6f:f4:b7:22:9f:43:08:0b:68:8e:f3:1b:88:7e:
         55:15:43:8a:0c:b4:b4:f2:c2:1d:7d:de:0c:cc:a7:d9:1f:da:
         2b:64:95:3b:af:e4:20:44:9b:f3:a7:b1:ee:98:be:1c:f0:3e:
         f8:11:29:76:0f:f1:af:21:a4:2c:97:9c:3c:de:44:2f:a5:ab:
         5f:b8:68:69:41:89:40:17:00:af:3c:4a:7b:20:e9:75:bb:49:
         f8:3f:3e:d3:de:5d:a2:1f:10:80:85:a0:a6:b2:b4:25:d1:f9:
         16:37:2f:95:ad:66:bd:58:a3:2e:b3:ad:ec:3a:9e:6d:74:e2:
         26:c0:74:e6:ec:38:d6:f3:c0:76:06:00:63:62:4e:80:69:37:
         52:8a:7c:40:56:90:d8:32:ee:c4:2c:be:21:55:22:2b:1a:94:
         f9:8a:8e:d2:63:7e:ea:c6:ba:b3:35:20:bd:d7:ca:d7:68:6d:
         7d:68:33:8d:87:a1:95:2d:c2:81:ff:e5:93:a8:9e:7a:e2:8f:
         64:0d:2c:e7:07:19:cf:5f:b1:ae:49:26:94:26:f6:ee:6f:b7:
         c5:f4:14:7d:ca:7d:08:5a:eb:16:60:30:ec:90:e8:c5:0c:6e:
         41:be:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org