Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa
File:                     af0e9aa05add3be689177e462758918982512571.roa (raw, json)
Hash identifier:          DxhGpQnC+1jjJgyHibJhTwl6wkogxQEo+3GRZdh/StQ=
Subject key identifier:   19:92:94:1C:D5:69:1C:97:C0:DE:AC:5D:7B:6D:3E:71:8D:9A:64:DC
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       13BDBC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa
Signing time:             Thu 06 Jan 2022 18:09:59 +0000
ROA not before:           Wed 01 Sep 2021 03:00:00 +0000
ROA not after:            Fri 01 Sep 2023 03:00:00 +0000
asID:                     42831
IP address blocks:        191.96.110.0/24 maxlen: 24
                          191.101.59.0/24 maxlen: 24
                          181.215.229.0/24 maxlen: 24
                          181.215.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293756 (0x13bdbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep  1 03:00:00 2021 GMT
            Not After : Sep  1 03:00:00 2023 GMT
        Subject: CN=af0e9aa05add3be689177e462758918982512571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:49:c2:bb:46:71:f3:ed:f4:27:bf:c2:8c:
                    a9:06:1b:c3:a2:7a:f9:55:45:dd:4f:ef:5c:1e:21:
                    c2:55:b8:0a:27:24:00:67:02:da:a1:1c:5c:66:c6:
                    73:82:bb:07:38:44:c0:ef:66:75:eb:1a:5e:38:62:
                    bf:4d:db:a9:0e:3a:89:a4:a6:71:87:78:61:6f:f0:
                    ec:33:2e:bc:81:7a:66:af:94:4c:fd:02:fd:41:34:
                    10:5a:35:29:44:93:4a:40:fa:30:a1:ba:f1:eb:bc:
                    ec:5a:a3:e6:b8:36:1e:aa:05:be:42:26:4d:2b:89:
                    f6:14:40:85:80:ff:52:f7:c9:35:a1:71:c9:09:bd:
                    5a:39:4a:84:ee:ce:a6:8f:d0:be:46:8a:48:d4:59:
                    e0:fe:e3:80:2a:4b:e5:bd:6d:2c:7b:8a:ea:77:7a:
                    3e:54:b9:7e:64:39:fe:75:26:48:09:a1:02:2c:1b:
                    2a:c6:bd:18:5b:93:fa:30:3c:46:ce:cd:a9:10:e7:
                    03:e5:0c:f3:8e:ee:a8:97:21:4b:3d:e5:cd:62:ae:
                    08:6f:df:6b:09:cc:d5:05:e4:03:de:bd:e1:33:ab:
                    e8:7e:22:23:8b:1b:ac:9d:b0:a3:4b:e2:bb:cb:a6:
                    0a:4e:5f:2c:d5:7f:cb:97:72:ed:2c:1c:51:de:45:
                    52:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:92:94:1C:D5:69:1C:97:C0:DE:AC:5D:7B:6D:3E:71:8D:9A:64:DC
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/af0e9aa05add3be689177e462758918982512571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.226.0/24
                  181.215.229.0/24
                  191.96.110.0/24
                  191.101.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:85:0e:b7:ab:19:0b:2c:46:b4:60:fc:45:79:86:94:5a:31:
         68:b6:b8:dd:b2:c8:7f:ea:01:34:2b:96:a4:a2:c9:a5:91:a2:
         bd:78:8e:8c:f4:28:95:91:bc:6f:c3:56:48:07:ea:c2:63:e7:
         9c:02:da:d4:71:67:5f:38:31:7e:4d:6e:2b:9b:8e:73:9d:18:
         6c:4a:04:12:68:4b:a4:1e:65:c1:48:df:a9:e2:0d:13:e0:36:
         11:54:8a:0d:1a:9e:44:ee:61:53:31:23:4e:cb:7b:1c:5d:64:
         50:13:f1:00:b6:83:12:f1:17:9d:ed:04:f0:c1:86:7f:8c:6e:
         82:cb:66:66:d6:d3:4d:b4:7d:30:e3:81:d0:a6:29:2d:bf:e4:
         c7:aa:52:84:89:a0:76:02:78:59:40:38:2b:cd:46:19:0c:b5:
         ae:9d:3b:e8:df:9d:32:3f:b4:c2:12:fa:c5:f6:bb:d9:c4:30:
         54:17:53:8d:ad:95:32:b4:34:7f:90:a5:47:14:4a:6f:3d:a1:
         34:25:4a:6b:09:56:c1:13:8d:62:02:da:12:8b:01:84:68:b2:
         f3:c6:a7:13:dd:33:c6:10:7d:af:33:01:7f:74:6b:ec:5f:83:
         7a:c0:70:a3:07:10:4a:fc:55:29:5f:84:34:a7:a7:4e:5a:60:
         3f:13:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org