Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/00ed1986f314951d26574b21dd4529cc75353c4f.roa
File:                     00ed1986f314951d26574b21dd4529cc75353c4f.roa (raw, json)
Hash identifier:          N0l94PpButbOigeKEePkX/QEP5EviPgJvjBi9oJaztk=
Subject key identifier:   4B:BF:0D:7D:DD:1B:B3:21:BC:27:99:F5:24:D8:BD:40:9C:3F:58:C7
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       145332
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/00ed1986f314951d26574b21dd4529cc75353c4f.roa
Signing time:             Sat 15 Jan 2022 06:58:02 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     63018
IP address blocks:        181.214.87.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332018 (0x145332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=00ed1986f314951d26574b21dd4529cc75353c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:6c:16:61:49:64:1b:5c:67:f7:7e:75:39:
                    23:ed:8a:c3:5b:85:c5:6b:ae:a8:f1:10:83:43:57:
                    39:d7:d0:e2:ba:b9:d5:8a:d2:a7:f1:5d:ef:46:87:
                    66:8d:69:bb:2b:e2:c7:b9:bd:6c:8d:5c:f3:d1:8b:
                    2c:6d:14:46:de:89:5f:73:9e:1b:d4:0a:f4:74:37:
                    dc:58:b6:62:d3:d8:37:4b:be:c2:dc:58:1c:56:97:
                    4b:ff:49:69:4b:f3:5b:9b:03:41:5a:4b:ff:f6:90:
                    87:6a:f3:f0:48:31:b1:83:8d:0a:92:11:00:78:fa:
                    fd:47:cd:f0:bc:2c:d8:d5:df:f4:c1:de:19:67:db:
                    6f:f7:aa:6f:cc:94:f8:5d:06:7e:da:7f:c9:da:ad:
                    eb:2d:e9:1b:00:1a:4c:54:af:90:98:f4:83:4b:61:
                    ca:c9:d0:5f:4b:6f:9b:b0:fc:54:d8:0a:24:28:59:
                    42:00:20:00:bd:06:d7:e3:be:0d:3c:7f:7a:2a:db:
                    d1:fd:2e:63:81:84:89:c8:b9:51:db:89:58:64:5b:
                    d4:bd:f3:24:45:cb:a0:f3:aa:db:72:91:2a:8d:2d:
                    b2:42:18:b3:0f:f2:1c:6a:94:0b:5a:95:49:b9:5b:
                    3c:2c:d1:a6:20:95:2c:b2:1e:8b:de:a3:3a:d0:fb:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:0D:7D:DD:1B:B3:21:BC:27:99:F5:24:D8:BD:40:9C:3F:58:C7
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/00ed1986f314951d26574b21dd4529cc75353c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.87.0/24
                  181.215.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:f7:f8:84:6a:56:39:f9:37:f6:69:f6:c3:69:2f:26:b0:
         11:bd:26:54:f1:8f:1c:e7:1c:17:85:ce:54:44:dd:88:28:f5:
         bf:89:98:9e:d7:39:5b:ca:62:b3:95:32:91:37:55:07:c8:c2:
         0e:d4:82:e2:33:3e:55:f8:d5:3c:68:f5:6e:eb:6f:ad:8c:34:
         67:fb:14:48:5e:92:f8:2e:df:a9:f9:31:dd:c3:8b:c9:68:b7:
         af:03:8b:48:9b:d5:7b:e7:34:5b:6b:f3:17:51:06:59:90:b1:
         9c:df:a4:7f:f9:48:13:1c:89:44:55:b7:cf:6c:31:8c:cf:67:
         85:30:e5:4a:d2:ae:25:d0:1a:80:5d:ae:79:5e:e1:63:2c:12:
         7c:a6:f2:ec:56:a4:e4:2d:2d:a8:ca:17:ea:62:77:e1:49:c8:
         6b:2f:2e:74:fd:ef:20:9d:35:0c:56:0c:50:af:e7:84:5d:37:
         8f:cb:e0:0f:b5:cb:4c:38:99:38:09:97:99:41:8c:af:a0:49:
         a9:ba:15:b0:66:74:92:65:78:ba:6b:89:44:30:da:42:9c:62:
         31:07:24:99:77:b3:86:15:24:dd:38:2a:7d:bc:70:f1:e4:fb:
         48:ae:cd:b8:18:70:5f:fa:b1:70:c3:a0:2a:2f:04:90:2d:c7:
         52:5f:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org