Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa
File:                     8856ed4a286aad2824fc7c42142b831628c09033.roa (raw, json)
Hash identifier:          I0R6GHGBc7646nY6XsRY92HzsgLhy7G1hIiI0KgKmOs=
Subject key identifier:   44:CA:B1:49:2C:A6:5E:FB:B3:73:5C:D9:29:35:EE:1F:94:85:10:A2
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       095333
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa
Signing time:             Tue 18 May 2021 16:39:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     54825
IP address blocks:        181.214.236.0/24 maxlen: 24
                          181.215.11.0/24 maxlen: 24
                          191.101.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611123 (0x95333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8856ed4a286aad2824fc7c42142b831628c09033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:1c:df:ac:a9:6c:7d:bd:d0:55:b6:09:b5:
                    01:ec:86:e2:bc:4b:f4:2d:65:a0:94:45:5e:a7:c3:
                    76:12:1c:31:51:d1:1b:89:ac:6c:75:d4:44:db:3f:
                    e2:2b:a9:70:e1:46:18:38:05:d1:54:e1:c1:b5:b1:
                    3a:d5:83:84:48:19:1b:ce:6e:d4:f3:25:7d:40:77:
                    59:5d:c2:d2:bb:b5:b6:ed:01:6d:32:59:35:08:7f:
                    b6:f7:7a:fa:14:f5:7c:01:61:5e:c0:6e:6e:16:ad:
                    f7:76:a4:5f:f8:14:6c:84:ad:dc:2f:18:80:83:c3:
                    a1:3a:81:a4:b6:41:10:d9:9b:f8:86:67:14:c5:99:
                    51:5a:50:33:8f:cc:90:e6:93:94:4d:49:9c:b7:22:
                    b4:c1:94:9e:35:35:a2:ea:38:7d:ee:dc:58:97:2b:
                    01:17:a2:6f:91:72:c5:81:65:70:a6:67:3d:d7:32:
                    fc:7d:08:68:26:5c:cf:90:64:d9:f6:d4:da:c6:c8:
                    bd:7c:8b:5e:99:c3:e9:6d:0f:72:b6:b7:9d:e7:96:
                    e9:0b:52:73:93:44:19:e2:d9:ab:10:18:34:ba:60:
                    17:12:78:ec:d7:5e:64:ff:2c:33:17:d4:3a:82:74:
                    c0:ad:a4:d9:dd:3f:24:12:95:df:45:27:9e:a2:1d:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:B1:49:2C:A6:5E:FB:B3:73:5C:D9:29:35:EE:1F:94:85:10:A2
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.236.0/24
                  181.215.11.0/24
                  191.101.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:f2:82:d1:27:e0:b5:3f:d7:74:44:fb:ab:4f:82:df:aa:
         00:82:ef:cf:bd:49:66:9b:30:53:15:78:e3:52:dc:94:1a:da:
         bc:8f:53:55:b0:b7:a1:ec:3d:95:1e:3c:56:50:07:ee:b4:25:
         f4:35:ff:d0:5b:93:b0:06:c0:b5:bf:07:e7:22:9d:f8:14:20:
         de:f7:ca:f4:5f:ca:b1:ea:5b:78:85:e8:d5:99:3e:7a:3d:d6:
         7b:bd:71:29:2e:fd:f6:96:6d:ee:cf:90:2f:81:36:3f:31:18:
         3f:ef:32:31:35:e3:c4:e6:12:26:e6:08:fa:74:6e:01:a4:8f:
         69:6c:d2:56:06:0d:08:a7:5f:a5:07:23:71:e7:b4:29:a4:04:
         3d:9c:34:60:85:b2:56:a0:2e:99:ce:cb:2b:41:fe:ec:81:de:
         c6:72:fe:50:3b:98:33:57:d3:78:34:95:0a:bf:ef:4f:98:31:
         ed:84:ab:9a:14:29:0c:8a:c1:a5:ad:9f:03:c9:5d:e2:92:09:
         7a:c1:d7:c0:74:f5:8c:74:10:a2:f5:9b:3e:06:c2:ea:8f:e5:
         da:e7:e9:27:62:60:58:bc:85:d3:ca:db:7a:7b:26:b7:bf:e8:
         35:f4:5e:c5:3f:29:2a:b0:e7:dd:16:f3:07:fa:22:5d:1d:59:
         0a:bc:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org