Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e1ce9368ac6cb996b3f619058c9722edbf03a5d4.roa
File:                     e1ce9368ac6cb996b3f619058c9722edbf03a5d4.roa (raw, json)
Hash identifier:          h5fY1oXCAEf65mg4f9PcgXBVuJNKi0Rcl2Nj0psVq5Y=
Subject key identifier:   E3:4F:DD:ED:56:86:9A:3A:9F:EB:9B:CC:DE:9A:C7:91:AF:17:17:8A
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       190D10
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e1ce9368ac6cb996b3f619058c9722edbf03a5d4.roa
Signing time:             Sat 27 Aug 2022 14:34:32 +0000
ROA not before:           Wed 24 Mar 2021 14:30:56 +0000
ROA not after:            Tue 24 Mar 2026 14:30:56 +0000
asID:                     266725
IP address blocks:        181.119.41.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.71.0/24 maxlen: 24
                          181.119.72.0/24 maxlen: 24
                          181.119.73.0/24 maxlen: 24
                          181.119.74.0/24 maxlen: 24
                          181.119.75.0/24 maxlen: 24
                          181.119.76.0/24 maxlen: 24
                          181.119.77.0/24 maxlen: 24
                          181.119.78.0/24 maxlen: 24
                          181.119.79.0/24 maxlen: 24
                          181.119.80.0/24 maxlen: 24
                          181.119.81.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24
                          181.119.158.0/24 maxlen: 24
                          181.119.169.0/24 maxlen: 24
                          181.119.170.0/24 maxlen: 24
                          181.119.3.0/24 maxlen: 24
                          181.79.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641744 (0x190d10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 14:30:56 2021 GMT
            Not After : Mar 24 14:30:56 2026 GMT
        Subject: CN=e1ce9368ac6cb996b3f619058c9722edbf03a5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:0c:ee:a8:37:64:99:2b:d9:42:4f:28:e3:
                    cd:af:31:fe:7d:51:06:9a:74:65:ec:9d:fd:7e:e8:
                    83:de:35:6d:23:8a:a5:c3:b8:c3:95:6c:4b:20:fd:
                    c0:98:fe:2a:7d:8d:39:a5:83:46:26:94:b3:07:e2:
                    78:10:56:3b:48:aa:86:85:48:38:f5:cd:96:3b:ef:
                    3b:5d:42:4b:9b:5d:33:3e:08:be:aa:8e:6d:a8:0f:
                    ae:5e:91:9c:17:68:a2:0a:02:d7:5e:fe:7d:ad:22:
                    21:f3:59:c7:5e:1f:f0:0a:d2:bb:d1:58:9e:1b:c0:
                    6a:d3:8e:8f:fd:a0:27:a4:41:84:db:a3:52:a5:eb:
                    fb:ad:bf:1d:01:fd:84:47:f6:96:35:cb:4f:15:23:
                    65:65:ca:85:4a:ec:71:f8:34:a2:63:20:08:42:38:
                    b1:b6:1e:2f:20:30:21:19:dc:71:45:ce:e1:bd:c2:
                    6b:f3:b5:61:77:13:b1:5a:37:5e:c8:d2:79:41:f1:
                    d7:15:73:90:3d:ff:14:ab:57:7e:36:03:35:51:eb:
                    90:c1:7b:26:fd:37:bf:43:98:52:8c:f4:c5:1d:61:
                    60:b0:79:b0:88:8c:61:98:5b:af:4b:b5:21:78:e8:
                    0f:c7:9e:63:17:84:0e:e5:a3:83:57:c4:b3:e5:71:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:DD:ED:56:86:9A:3A:9F:EB:9B:CC:DE:9A:C7:91:AF:17:17:8A
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/e1ce9368ac6cb996b3f619058c9722edbf03a5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.219.0/24
                  181.119.3.0/24
                  181.119.41.0/24
                  181.119.69.0/24
                  181.119.71.0-181.119.82.255
                  181.119.158.0/24
                  181.119.169.0-181.119.170.255

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:4e:29:6a:14:07:d1:17:85:a8:2e:6b:71:f5:5f:6b:24:
         ca:14:fd:d4:f6:b2:27:bb:3d:92:07:d9:3c:c9:b9:09:4c:52:
         44:9c:22:70:cf:77:33:ac:43:d2:aa:74:50:18:27:48:52:89:
         67:5b:15:c2:50:e1:2b:53:52:a7:6d:b2:25:79:c4:60:ed:5b:
         77:01:38:62:44:80:aa:50:a3:76:7b:0a:58:cf:4e:3f:37:7f:
         4f:64:26:c4:12:a8:46:dd:f2:17:47:9b:7c:de:ef:5e:f0:82:
         cd:c4:fd:5a:12:1d:13:04:28:05:08:ca:50:37:ab:c8:5d:20:
         40:7c:e7:14:05:56:5a:2e:f3:63:47:64:e0:c1:cf:c8:4b:bd:
         7a:06:82:fe:cb:5f:2e:aa:32:5f:95:9e:6a:a9:9d:c4:eb:13:
         9c:5b:08:dc:fe:fe:6d:3e:ad:34:89:6b:8f:85:ac:c4:aa:3b:
         46:0c:4e:5c:6b:88:5c:6d:6a:8b:ee:a5:d7:9a:18:96:d6:20:
         5c:2f:b0:34:9b:9c:d9:1f:3e:e3:01:56:aa:83:93:fe:a5:94:
         f7:7e:ca:1e:05:47:23:24:ee:89:7e:bb:bb:b7:ef:d6:da:87:
         a8:87:a2:e2:3c:0b:66:dd:64:27:cb:24:d8:98:4f:47:4c:c3:
         d1:68:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org