Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8902f1d59e873f6d7a757b5d454a0b8e0435bacb.roa
File:                     8902f1d59e873f6d7a757b5d454a0b8e0435bacb.roa (raw, json)
Hash identifier:          bf0v3PMwkBO2cpmGeMgPgcXz1kSGLI8T0V9/x8V6IWs=
Subject key identifier:   66:14:6A:3F:86:63:D8:D9:AF:52:40:BA:E6:87:81:06:B2:C8:2B:BD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       166679
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8902f1d59e873f6d7a757b5d454a0b8e0435bacb.roa
Signing time:             Fri 18 Feb 2022 10:28:13 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sun 18 Feb 2024 03:00:00 +0000
asID:                     206092
IP address blocks:        191.101.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468025 (0x166679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2024 GMT
        Subject: CN=8902f1d59e873f6d7a757b5d454a0b8e0435bacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:57:65:84:40:fb:a8:e6:af:3d:43:74:9e:
                    a4:c2:f7:a4:a4:a5:99:0c:da:cc:f7:a2:0a:14:d5:
                    a8:4b:ef:4d:8e:86:26:5d:4e:3e:34:36:50:d4:b8:
                    80:2b:ef:3b:ce:d2:41:ef:ed:0f:f3:7d:f4:4a:ff:
                    6f:ab:57:b5:e2:44:55:86:e1:a0:1b:11:5e:22:65:
                    a0:15:5e:a7:fc:3a:72:5e:16:61:5e:34:dd:62:e8:
                    73:d0:ba:bf:a6:b9:35:40:5f:db:f3:e1:f0:6b:9b:
                    2b:bf:35:7d:37:22:77:2e:14:88:f5:0f:9d:15:84:
                    19:be:c1:93:c9:d4:60:4b:51:1e:92:77:24:d6:43:
                    e3:bc:01:01:74:3c:76:1f:c4:cd:98:81:2b:32:f7:
                    6c:37:8f:90:9c:c6:a5:cc:62:a4:78:27:74:aa:ee:
                    22:60:5c:ff:c4:d0:5e:79:e5:37:92:c5:86:d3:e4:
                    24:8c:78:d7:1b:c4:fb:b7:42:c5:82:1a:9f:91:9b:
                    82:fa:c5:51:ef:d8:92:d4:7b:f7:58:c0:bb:b2:04:
                    72:37:f1:d5:13:6f:22:67:f3:5b:70:f5:36:50:47:
                    d7:b2:c6:75:a6:f9:11:a8:66:70:c9:50:95:26:5c:
                    f4:0e:2d:61:2e:1a:6e:73:64:3b:d2:dd:89:7e:2e:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:14:6A:3F:86:63:D8:D9:AF:52:40:BA:E6:87:81:06:B2:C8:2B:BD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8902f1d59e873f6d7a757b5d454a0b8e0435bacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:fd:f2:b5:ef:ae:13:de:81:df:3f:42:29:86:03:00:ff:
         49:0a:1d:0d:f2:de:5d:8e:b1:2b:e3:67:b1:84:fc:c2:ec:30:
         a2:80:e1:a1:64:8f:3b:28:b5:1e:63:f0:24:c3:37:19:4f:8c:
         9c:2c:d4:1d:df:88:fa:a0:88:f6:dd:6b:d5:4c:9d:d7:7a:a3:
         e2:1c:02:5c:51:da:8e:46:ca:3c:86:31:fc:4e:79:ae:3d:7c:
         7d:f2:9b:58:a9:45:61:00:28:06:de:69:09:d4:29:b8:42:27:
         71:5b:b4:fe:07:72:2f:6b:47:75:13:94:b9:0f:0e:23:be:b2:
         4a:99:c6:db:38:49:03:8b:0c:d2:3b:25:bd:87:b7:b4:19:eb:
         26:bc:20:3f:c4:3b:82:97:f9:c1:f5:bb:3c:7d:ff:25:3a:b9:
         09:71:4f:95:f8:94:51:23:7d:35:72:a8:a6:14:88:81:bf:d7:
         56:aa:ae:94:2c:82:e4:e8:08:c3:81:84:07:16:37:9e:44:80:
         a8:7b:fb:3e:8d:53:c8:e6:bb:5d:5b:65:04:39:39:34:49:c0:
         a4:ac:40:8c:88:84:16:15:02:9b:3d:93:76:22:1e:13:56:d5:
         dc:59:f5:94:22:6f:dd:31:ca:e5:c1:f8:e8:b3:cc:f1:ce:83:
         03:ad:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org