Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7465be20b6242b0647b8b7fa26556789f906e78b.roa
File:                     7465be20b6242b0647b8b7fa26556789f906e78b.roa (raw, json)
Hash identifier:          FGS1MTWEii1IpgbvZeRvX5K0vwtSRVuqQOoxtEX8zg0=
Subject key identifier:   72:E0:EB:22:98:96:F9:04:F7:40:2C:D4:E7:03:11:D5:50:3F:C2:4A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0623E9
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7465be20b6242b0647b8b7fa26556789f906e78b.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     207461
IP address blocks:        181.214.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402409 (0x623e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=7465be20b6242b0647b8b7fa26556789f906e78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:59:4e:d3:ec:e4:c6:17:f1:47:09:1b:53:
                    05:6c:2f:39:9b:df:ef:6f:38:8f:67:b9:e4:84:7f:
                    6e:05:05:6c:3e:91:49:45:aa:5a:bd:a7:15:62:b4:
                    a2:22:78:d7:38:9e:74:db:e4:12:6a:4c:d9:3c:d4:
                    8d:70:eb:2a:3f:61:7c:3a:c7:14:33:a2:5f:39:be:
                    7d:2f:cf:60:b8:09:20:1e:73:6b:ae:de:bb:fb:3b:
                    32:c5:16:fb:ac:e5:61:65:c5:52:44:07:24:ed:6c:
                    36:4a:36:00:51:82:cc:79:12:93:50:50:e5:a9:6d:
                    70:f6:13:d6:f6:30:64:97:93:5e:24:bd:35:06:66:
                    f9:29:7f:4c:a9:bc:58:c9:6d:ce:88:0c:50:ad:12:
                    38:d0:4a:c2:b3:ce:b0:fc:7f:72:ed:bc:27:68:d4:
                    fd:2a:63:c8:d2:40:ff:c7:ef:36:d2:b5:a8:06:a0:
                    49:56:79:44:ed:78:02:85:d5:70:59:5c:75:26:d5:
                    e9:ec:37:64:c5:1d:ad:93:5f:3c:72:d7:30:08:e6:
                    b2:41:3a:17:3a:67:5c:8c:8d:dc:9d:8e:55:b3:18:
                    f5:33:47:93:31:5f:17:f2:4c:aa:4b:fc:34:78:b0:
                    14:53:ea:d2:3a:6c:0f:dd:e9:e5:08:85:eb:44:49:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:EB:22:98:96:F9:04:F7:40:2C:D4:E7:03:11:D5:50:3F:C2:4A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7465be20b6242b0647b8b7fa26556789f906e78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:de:c4:78:30:a0:4f:81:a4:eb:6d:b2:4a:62:95:d7:97:
         72:c6:ea:d4:5e:fd:68:48:f2:c8:95:dc:44:80:e6:8d:31:c5:
         08:3c:64:dd:64:79:06:2a:a6:bf:4b:b1:3e:86:86:68:93:f1:
         9f:66:b5:ac:cf:cc:95:ec:d6:cf:62:e2:34:3b:e1:3f:ae:19:
         22:dc:cd:0f:9f:34:73:45:f0:9c:79:ec:72:bb:30:11:b7:c6:
         ec:a5:5c:6e:d2:a9:ed:e4:8d:79:d6:47:57:76:18:4c:b4:22:
         cb:5d:23:46:b3:6c:dd:88:99:b5:ed:63:aa:43:27:71:a7:31:
         10:a8:51:c1:8a:a8:42:a0:46:5e:c1:24:c9:53:58:b3:9d:f4:
         d1:60:9f:64:53:0a:d7:6c:e9:12:1b:e4:e6:07:4a:2a:8f:56:
         3f:bd:c3:89:6d:5d:87:3d:55:32:7a:94:f6:6a:c2:f9:dd:cb:
         c0:44:fa:81:0d:ce:9f:6d:b9:98:77:76:92:44:43:59:70:9c:
         15:0e:d2:41:7b:7e:d0:0d:19:23:49:b3:a2:2e:f0:97:c2:fd:
         0f:5a:06:6f:69:61:77:27:d0:f3:44:78:c1:ba:2c:a5:77:28:
         4a:04:a7:4c:e6:1b:53:a3:6e:61:c0:46:f8:53:42:a6:86:eb:
         89:78:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org