Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/06d40d6cfca52c6a08e2be26649b3db6fd71a42b.roa
File:                     06d40d6cfca52c6a08e2be26649b3db6fd71a42b.roa (raw, json)
Hash identifier:          kvZ/roXucXUoQdpR8/nsWRBFWMC3fC8cYP3CMrwRJ2g=
Subject key identifier:   9F:F2:0B:91:A6:72:24:36:23:CF:CC:48:68:F5:3E:19:19:67:7D:EE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0FAC72
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/06d40d6cfca52c6a08e2be26649b3db6fd71a42b.roa
Signing time:             Thu 14 Oct 2021 20:46:19 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     6461
IP address blocks:        181.214.13.0/24 maxlen: 24
                          191.101.190.0/24 maxlen: 24
                          191.101.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027186 (0xfac72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=06d40d6cfca52c6a08e2be26649b3db6fd71a42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:0a:0e:e2:b5:e1:27:58:d7:8c:dd:0d:08:
                    fa:ad:58:66:92:c9:6d:ae:b6:21:cf:3b:ba:68:b4:
                    6e:2d:fc:f3:63:ed:14:ec:df:3b:5b:83:78:8b:88:
                    1f:1e:db:ca:1d:b5:ce:97:30:15:5e:cc:13:ff:15:
                    57:06:54:06:59:bb:4a:06:3b:d4:7a:c6:e9:b0:a8:
                    db:3e:cd:d5:3b:1c:96:60:69:54:07:89:97:90:8b:
                    74:da:6f:df:a7:5e:45:df:6d:37:11:f6:ed:c1:f8:
                    6b:83:a5:75:37:52:b4:f2:7e:6f:af:01:42:30:ab:
                    f0:08:5f:60:42:a8:e2:22:a6:52:4f:e0:8a:c3:25:
                    5a:0d:2a:b9:66:10:f7:cb:0c:44:9e:40:20:ca:da:
                    9c:94:d2:4c:94:83:7f:b3:78:f4:d8:c3:42:66:80:
                    66:32:40:ad:b1:10:cf:ba:55:71:d7:53:ee:75:39:
                    be:8a:9f:75:a6:52:c0:0f:6e:1f:3a:43:c7:0c:56:
                    19:d8:1d:6b:c1:37:a9:fc:05:df:66:e0:d3:0c:0e:
                    09:83:27:72:e0:24:09:31:c0:75:49:0d:ce:28:b6:
                    3e:eb:27:44:a8:bd:fa:2f:04:80:56:32:45:b7:6c:
                    9a:f9:e2:8e:45:e6:ab:5a:09:c9:8a:4a:62:f7:45:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:0B:91:A6:72:24:36:23:CF:CC:48:68:F5:3E:19:19:67:7D:EE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/06d40d6cfca52c6a08e2be26649b3db6fd71a42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.13.0/24
                  191.101.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:7e:91:58:37:ba:27:5b:30:dd:df:8b:98:e4:68:b3:78:
         1a:19:01:f3:01:bc:d8:10:c6:0e:31:46:f3:95:f0:1b:6d:71:
         76:17:ca:66:e5:cb:87:d6:3b:00:96:91:7a:76:38:4b:2b:bc:
         ce:aa:49:ae:95:89:44:19:40:4d:75:1a:96:71:e9:3e:1f:d3:
         49:6a:c5:75:79:b5:53:5c:14:33:7d:d7:9b:ec:ac:ea:40:39:
         4c:5b:96:b7:1e:e6:35:8b:9b:2c:94:2d:1c:ad:e6:22:e4:b6:
         bc:5c:cd:52:b3:57:ae:2b:e7:36:7d:49:ba:1b:6f:9c:91:4c:
         3a:94:20:ff:05:ad:19:df:8c:90:56:2c:74:cb:6a:d9:68:73:
         a7:f1:1c:be:8b:76:94:1a:51:b4:19:da:1d:19:6e:d7:2b:d5:
         f2:c4:6d:68:85:d2:0c:5d:36:61:2c:9b:5a:6c:79:64:8c:cc:
         cc:a4:5a:9e:9c:65:c4:fc:09:60:2b:7f:9b:0f:f0:b4:7f:0d:
         3a:07:b6:aa:c1:02:e8:15:34:99:34:b1:c0:2e:96:00:bd:93:
         c7:de:74:77:ae:32:a7:24:d6:03:ae:9d:0e:45:c0:a7:b2:f5:
         e3:17:b6:2f:a4:d8:b5:d3:60:4c:1e:f8:2f:05:a4:38:77:5a:
         6f:c2:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org