Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa
File:                     f977398db9c5469dc317d3dc990740a966cb8f3c.roa (raw, json)
Hash identifier:          ROksc/lq96wWv0AzPtOtdBScLHrZPAD0bjwhFHftCmA=
Subject key identifier:   85:D8:24:9F:B3:B9:4D:90:30:1C:2A:E8:74:5A:D9:33:21:9F:C8:11
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       155A23
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa
Signing time:             Mon 31 Jan 2022 19:59:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     26636
IP address blocks:        181.214.219.0/24 maxlen: 24
                          181.214.84.0/23 maxlen: 24
                          181.214.245.0/24 maxlen: 24
                          181.214.146.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.94.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          191.96.206.0/24 maxlen: 24
                          191.96.168.0/24 maxlen: 24
                          191.101.202.0/23 maxlen: 24
                          181.215.252.0/23 maxlen: 24
                          181.214.78.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399331 (0x155a23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f977398db9c5469dc317d3dc990740a966cb8f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:6c:b0:ac:9f:4b:f4:02:0c:2d:32:71:65:
                    22:8f:57:9e:a0:c9:fd:80:72:dc:a2:76:48:b4:6b:
                    58:3b:7b:f9:77:1a:80:fe:1a:9a:d9:20:30:42:0a:
                    12:36:0c:ad:f3:5f:b2:30:ae:62:c8:d2:ad:fa:3c:
                    ed:c2:9b:04:ca:b1:e1:61:df:71:46:84:f4:ab:bc:
                    07:e6:48:50:8b:f7:f8:90:0b:b0:90:74:7f:89:84:
                    87:67:e9:81:60:d7:2d:be:3e:4e:43:97:6e:09:15:
                    35:9b:f8:42:d0:bf:dc:fa:92:46:ff:10:ea:1d:33:
                    5e:b6:0f:49:96:17:74:09:c1:27:9a:20:16:13:80:
                    89:73:99:b8:18:8e:48:cc:46:41:5f:8c:41:fc:de:
                    bc:85:a4:7f:9b:ab:8a:99:ba:fb:48:e3:63:0c:9b:
                    24:e5:81:1e:f1:63:fb:02:f2:a2:c4:96:6c:83:07:
                    f0:4d:8c:ab:1c:fb:53:b3:ff:7b:8a:9d:72:cb:02:
                    f4:8b:04:c4:d9:d3:3e:cf:46:f5:72:b9:8a:cf:cb:
                    f2:b2:f5:f5:ce:52:fb:4a:80:7f:7a:36:8e:a1:37:
                    26:67:a0:36:11:dc:e5:91:df:46:68:0a:51:28:91:
                    95:79:0e:94:82:cc:09:51:5d:c0:ca:67:d0:49:1a:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D8:24:9F:B3:B9:4D:90:30:1C:2A:E8:74:5A:D9:33:21:9F:C8:11
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f977398db9c5469dc317d3dc990740a966cb8f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.78.0/23
                  181.214.84.0/23
                  181.214.146.0/24
                  181.214.219.0/24
                  181.214.245.0/24
                  181.215.31.0/24
                  181.215.35.0/24
                  181.215.252.0/23
                  191.96.29.0/24
                  191.96.34.0/24
                  191.96.61.0/24
                  191.96.94.0/24
                  191.96.168.0/24
                  191.96.206.0/24
                  191.101.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:0c:b9:f2:21:aa:61:cd:64:f9:1a:99:fd:1b:b7:b7:b6:
         57:05:1f:2f:8b:4c:83:1a:77:e3:38:5a:7d:fb:fc:e2:ba:d8:
         61:a2:c4:42:6a:39:e8:fe:c6:af:d7:16:29:53:40:32:01:50:
         fe:55:76:1e:be:4e:47:3e:1f:3e:8a:09:31:c7:8a:0e:4f:f1:
         74:21:03:82:60:27:6e:d2:7a:97:11:a9:e5:ad:e5:c1:77:42:
         90:c7:09:8a:90:fa:77:e8:bb:db:73:29:46:7b:3f:79:3c:df:
         ca:4b:29:3d:9a:41:46:38:ba:3b:ae:0d:c3:4c:e3:4d:1c:50:
         01:f3:e9:1c:5c:bd:39:82:d0:03:c7:68:28:52:75:45:36:bf:
         af:3e:1e:cd:97:f9:b3:76:e5:04:48:ef:cc:9b:26:47:37:b0:
         c4:3e:98:ae:a1:0d:17:5c:7c:de:03:2d:bc:66:b7:de:91:0e:
         1c:57:57:68:6d:c9:06:18:37:0c:d7:34:50:5e:57:8b:8e:80:
         fa:be:87:b9:34:32:2e:fa:57:6f:55:0e:39:6e:7c:3a:4b:5e:
         f3:d0:67:8f:23:7c:35:f7:ce:eb:83:f9:87:43:db:c2:a1:79:
         a8:7f:86:05:80:24:c4:93:a0:39:c8:46:8b:d0:44:04:65:12:
         fc:2f:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org