Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/656e1dc345e42b8f58502246de21bb98cda81f09.roa
File:                     656e1dc345e42b8f58502246de21bb98cda81f09.roa (raw, json)
Hash identifier:          ThTYsxOLn42gQBy4EGBLpmWZfn1tg9WFU5f3AspJ6N4=
Subject key identifier:   8F:4D:23:38:30:05:CC:86:37:15:C3:12:19:F3:86:BA:5B:3A:55:B9
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0C8B93
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/656e1dc345e42b8f58502246de21bb98cda81f09.roa
Signing time:             Fri 13 Aug 2021 17:56:16 +0000
ROA not before:           Fri 13 Aug 2021 17:56:16 +0000
ROA not after:            Thu 13 Aug 2026 17:56:16 +0000
asID:                     141199
IP address blocks:        191.96.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822163 (0xc8b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Aug 13 17:56:16 2021 GMT
            Not After : Aug 13 17:56:16 2026 GMT
        Subject: CN=656e1dc345e42b8f58502246de21bb98cda81f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:08:0d:ea:d7:b7:a3:5b:ac:73:c4:3e:a3:
                    13:c7:31:40:f8:66:ff:02:09:b8:4d:07:62:d9:3d:
                    f6:3b:09:45:73:31:a1:2c:c4:22:79:e5:f4:dd:6d:
                    f2:09:3d:cd:6e:0e:36:c6:51:ff:82:24:c8:65:e6:
                    e3:f0:6b:65:58:fd:c6:e3:5a:92:34:25:66:ec:83:
                    17:49:96:44:1a:fe:01:09:39:36:38:d5:e6:69:28:
                    2e:31:7e:43:23:80:c3:c2:7b:b6:0f:d4:6f:03:fc:
                    72:29:18:04:e5:80:78:03:02:36:74:0b:06:38:af:
                    6c:47:4d:8e:33:3f:46:99:59:43:6f:03:25:21:b2:
                    a5:af:aa:12:a2:23:56:33:46:7f:1b:5a:94:11:96:
                    3c:c7:7a:d6:81:8f:ea:54:ac:4b:b1:e4:ce:2b:2a:
                    ce:01:fb:57:8f:f1:3f:b0:17:54:80:73:f0:de:3e:
                    e5:0b:91:84:32:21:a9:e8:b8:07:cf:17:a8:50:21:
                    56:8d:fe:f2:e0:ef:f5:7a:bc:06:b3:69:ac:15:18:
                    a3:cc:9f:3a:56:af:ad:fc:71:04:8d:49:8f:da:6a:
                    44:32:77:a8:89:fd:d3:db:4a:c7:20:16:b4:13:4a:
                    1c:f4:52:7e:60:1f:88:d4:67:a9:3b:e1:0c:0f:46:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:23:38:30:05:CC:86:37:15:C3:12:19:F3:86:BA:5B:3A:55:B9
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/656e1dc345e42b8f58502246de21bb98cda81f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:cd:bd:f1:bd:a0:2f:a8:1b:dc:cc:68:74:f9:f2:14:2a:
         85:85:1b:fb:d8:6d:c6:d8:59:f3:59:73:ea:25:8c:5a:d1:6f:
         3d:85:27:b1:7b:4b:68:0d:65:0b:7d:91:ab:79:f4:47:38:32:
         1b:a4:c9:42:30:c1:64:75:66:5e:ac:db:c5:24:d5:cb:74:e6:
         1f:aa:44:96:c4:b5:52:cb:28:33:bb:da:0f:30:a5:d9:46:bf:
         63:28:51:91:ae:40:27:a1:fd:e0:c2:92:96:e1:ec:b6:8e:d8:
         fc:a8:45:4f:2b:dd:b4:0b:26:bf:89:36:8a:81:83:6d:74:31:
         60:05:dc:1d:80:12:b8:a0:50:29:6b:f8:a9:01:95:e4:ec:f7:
         e4:9d:ac:39:4f:33:8f:c4:49:1b:aa:8a:88:da:49:98:b1:f8:
         9c:56:73:19:e4:e1:0a:7c:d0:e5:3c:eb:f6:f4:8b:07:51:6e:
         31:55:a6:ba:b1:2b:17:a2:01:f8:81:ff:a8:2b:de:54:d5:c6:
         f0:69:4c:55:5b:4e:e9:7f:26:de:48:b6:94:a5:e5:53:a0:03:
         06:4a:dc:d4:ed:9f:b2:8b:dd:df:ef:82:88:24:79:46:70:b5:
         ee:c3:14:e8:27:f1:e7:90:3c:45:0a:14:ce:12:38:47:61:97:
         ea:9f:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org