Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b64b09b13be78faddc200a7bbf9920f3fd4e0e7b.roa
File:                     b64b09b13be78faddc200a7bbf9920f3fd4e0e7b.roa (raw, json)
Hash identifier:          +uYKY4fJlXgHn2OqRw2lL1F1HpUZgrp6SQfLFYIcSTk=
Subject key identifier:   98:45:04:87:C8:60:B4:D3:04:D0:33:2D:67:C0:39:0F:2D:AF:2C:17
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       13D50B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b64b09b13be78faddc200a7bbf9920f3fd4e0e7b.roa
Signing time:             Thu 06 Jan 2022 19:22:04 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     49999
IP address blocks:        181.215.73.0/24 maxlen: 24
                          181.215.53.0/24 maxlen: 24
                          179.61.217.0/24 maxlen: 24
                          191.101.185.0/24 maxlen: 24
                          191.96.36.0/24 maxlen: 24
                          181.214.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299723 (0x13d50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=b64b09b13be78faddc200a7bbf9920f3fd4e0e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:de:92:e2:57:49:f8:4b:75:5f:3a:d1:c6:
                    04:70:92:df:ad:75:59:09:b2:49:b7:d1:45:4a:31:
                    67:5e:1d:df:29:03:06:04:14:d1:33:78:58:b9:7a:
                    ae:cf:9f:9c:1b:b6:b2:2d:42:6f:8a:3d:5e:69:93:
                    fa:7e:7c:ab:ae:6d:1c:97:22:b6:18:82:57:e5:31:
                    c5:74:5c:2e:b6:94:98:30:e2:6c:9c:7f:b7:ec:e3:
                    d3:f7:e1:1d:66:78:3c:64:00:f7:1b:0a:2f:fa:ab:
                    fd:80:e5:20:51:d5:08:60:ac:87:31:f2:0a:15:36:
                    71:cb:16:8a:ba:10:05:d6:ff:dc:a5:da:3b:16:40:
                    fd:3e:d1:fc:6d:82:ff:7a:49:c6:de:7e:19:80:64:
                    97:cd:b7:03:dd:57:c0:e8:76:a1:74:5e:d8:2a:1b:
                    3e:ed:eb:82:af:7e:db:2c:a5:26:88:48:b9:04:c6:
                    1b:ab:78:c7:4f:b8:9e:d6:3c:a3:ac:55:aa:78:46:
                    58:b2:75:d6:2c:9f:24:de:18:d8:cb:f5:96:58:9d:
                    66:79:5f:13:df:08:68:14:70:19:27:f0:11:02:cf:
                    a0:82:94:b2:c4:87:df:39:df:28:a3:2d:a1:bb:b3:
                    2d:dd:4a:86:99:26:3f:d5:f2:02:59:0b:9f:88:3c:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:04:87:C8:60:B4:D3:04:D0:33:2D:67:C0:39:0F:2D:AF:2C:17
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b64b09b13be78faddc200a7bbf9920f3fd4e0e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.217.0/24
                  181.214.160.0/24
                  181.215.53.0/24
                  181.215.73.0/24
                  191.96.36.0/24
                  191.101.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:7d:bf:81:fc:29:a6:2a:09:8d:92:33:96:6e:c9:30:84:
         13:7e:05:7f:0e:3a:3f:26:5b:64:91:24:d3:c1:3d:05:08:48:
         bd:a0:72:bb:5f:b4:d7:7f:17:2c:0a:eb:ef:ee:81:c6:83:58:
         1f:d2:8a:29:5f:1b:6f:7b:dc:ff:66:d0:38:2a:d4:aa:05:43:
         b7:65:fb:8b:9a:98:99:80:b3:20:5d:67:f7:90:56:77:06:09:
         42:23:f3:9c:da:32:af:a7:c7:60:9c:ff:9c:01:04:d1:c1:8a:
         37:27:12:59:de:f3:71:ca:9d:4b:92:bf:4c:06:5d:f9:1a:2d:
         ab:71:ee:f0:50:ce:c2:dc:7d:07:71:f5:3c:38:09:ba:e8:80:
         e6:9d:32:a9:f9:c7:03:e6:8e:87:70:00:02:98:16:7c:d6:ed:
         d9:b7:60:f9:13:16:78:14:20:86:cd:fe:0d:29:00:54:9e:cf:
         e7:1e:0a:58:4b:09:fd:cd:b0:0d:78:57:30:70:db:a3:8e:c8:
         e6:fa:7a:e2:f2:5c:17:de:dd:15:45:af:e6:09:86:e6:e6:52:
         49:aa:73:be:9b:f3:92:a5:59:5e:76:63:13:85:61:13:03:9a:
         61:4c:c4:30:e4:a9:92:80:4e:67:b8:4e:cf:92:6c:34:e0:ab:
         f0:59:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org