Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01dfc821890dbf3517a87887d5a118542d2e6479.roa
File:                     01dfc821890dbf3517a87887d5a118542d2e6479.roa (raw, json)
Hash identifier:          guxuj0GKN19xQzW+15dcZ5TS8uEcu1sV7oKfd6DG/Cw=
Subject key identifier:   9F:02:F2:65:B3:9A:4E:F2:BF:25:A7:56:C2:00:E5:69:E6:0E:24:BD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       09E3A4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01dfc821890dbf3517a87887d5a118542d2e6479.roa
Signing time:             Fri 04 Jun 2021 04:12:14 +0000
ROA not before:           Fri 04 Jun 2021 03:00:00 +0000
ROA not after:            Sun 04 Jun 2023 03:00:00 +0000
asID:                     30455
IP address blocks:        181.215.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648100 (0x9e3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jun  4 03:00:00 2021 GMT
            Not After : Jun  4 03:00:00 2023 GMT
        Subject: CN=01dfc821890dbf3517a87887d5a118542d2e6479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:04:22:02:28:09:c6:88:a8:ae:27:81:11:
                    dc:e1:7e:db:31:fd:64:4a:b9:0b:af:4e:7c:f2:ed:
                    25:07:15:52:98:e4:f8:21:e2:83:46:14:45:19:92:
                    1f:ce:f9:7d:c9:b5:2c:90:b8:c0:25:98:06:3b:97:
                    ab:77:61:c5:db:95:8d:e9:87:a3:05:ab:94:94:84:
                    71:cd:8e:85:f8:71:64:18:41:5d:cc:5d:92:5d:c9:
                    fa:32:64:f8:3b:3f:9e:7e:c5:05:ee:5e:b3:8c:2d:
                    4c:5c:95:28:14:0b:c1:41:af:11:b2:2f:b5:4c:97:
                    8d:fd:b3:d2:08:f7:b6:2a:c9:25:03:1a:99:72:98:
                    b6:4d:4a:91:ad:c2:4f:5d:e3:5c:60:b5:e9:48:f4:
                    c1:b3:07:2a:01:1b:f1:9d:95:35:3c:fc:f5:73:6f:
                    58:da:c8:85:25:03:b3:7b:a4:07:01:a5:a8:38:3a:
                    b2:ce:8a:8d:cc:ed:39:54:18:7d:a1:ed:4a:f0:26:
                    79:4e:01:a2:51:a0:42:8f:fc:b9:31:8c:22:1f:66:
                    5e:37:2a:20:41:0b:b4:60:2b:eb:72:c0:95:18:1d:
                    85:c7:f9:be:9f:f4:31:32:89:cf:76:c5:bc:6c:e4:
                    80:54:a6:2e:a1:7d:98:a4:b2:c4:06:92:0c:c4:56:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:F2:65:B3:9A:4E:F2:BF:25:A7:56:C2:00:E5:69:E6:0E:24:BD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01dfc821890dbf3517a87887d5a118542d2e6479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:69:43:3c:cf:43:f5:3b:42:47:dc:e5:4d:e0:5a:d9:2d:f2:
         ac:ba:5c:64:83:c6:7b:a1:ce:3e:e2:82:30:a4:a5:79:16:9d:
         01:01:cf:8d:8f:2a:d6:0c:64:2e:1b:28:ec:b5:1d:a5:3b:41:
         24:92:3e:78:4f:af:67:62:d1:bd:1c:3b:99:b2:8f:f4:e9:7b:
         5c:56:e9:68:4d:21:75:cf:1c:c7:fc:c5:e5:78:39:89:a4:36:
         2b:51:43:68:48:a6:48:b3:21:04:06:60:1f:bc:86:5e:dd:3c:
         2b:35:79:7d:77:02:ae:61:29:2c:3c:74:59:73:a4:5e:fa:d9:
         b9:0b:22:9a:47:72:53:eb:54:75:fc:be:09:e6:39:74:3f:a6:
         88:e6:1c:07:dd:ce:1a:6a:92:06:b0:e5:02:ee:0f:d2:d6:55:
         3c:b5:1c:da:c5:3f:c4:85:d1:95:ed:69:2c:8d:c9:b7:bb:d7:
         c1:4f:2c:36:90:ec:8d:d9:fa:14:06:71:a9:a8:28:d3:78:d8:
         d9:12:23:5a:f0:0c:a2:6f:56:78:e3:c8:4a:35:79:fc:90:23:
         fe:7e:04:6f:d8:99:63:8e:35:30:58:93:7a:b2:6d:54:b7:2d:
         4b:61:f1:9f:f8:94:da:bf:65:0b:ab:e5:f1:61:d6:88:9e:d7:
         6a:7d:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org