Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0b7e5c5bfd83ef269b232aebf78ec7665f4af1d7.roa
File:                     0b7e5c5bfd83ef269b232aebf78ec7665f4af1d7.roa (raw, json)
Hash identifier:          h8iQsKN/FO83qPwu6AZlvKcU24BHd/sKoFP8jg/YtaE=
Subject key identifier:   18:E0:7E:D5:47:43:61:81:D1:B1:62:A1:E9:47:BB:83:AC:6C:12:27
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       156743
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0b7e5c5bfd83ef269b232aebf78ec7665f4af1d7.roa
Signing time:             Mon 31 Jan 2022 20:05:37 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     3356
IP address blocks:        191.96.94.0/24 maxlen: 24
                          181.214.197.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          191.96.206.0/24 maxlen: 24
                          191.96.168.0/24 maxlen: 24
                          191.101.202.0/23 maxlen: 24
                          181.215.252.0/23 maxlen: 24
                          181.214.78.0/23 maxlen: 24
                          181.214.198.0/24 maxlen: 24
                          191.96.52.0/22 maxlen: 24
                          181.214.219.0/24 maxlen: 24
                          181.214.84.0/23 maxlen: 24
                          181.215.244.0/23 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          191.101.187.0/24 maxlen: 24
                          191.101.194.0/23 maxlen: 24
                          181.214.245.0/24 maxlen: 24
                          181.214.146.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          191.96.233.0/24 maxlen: 24
                          191.101.190.0/24 maxlen: 24
                          191.101.191.0/24 maxlen: 24
                          181.214.13.0/24 maxlen: 24
                          181.214.255.0/24 maxlen: 24
                          179.61.226.0/24 maxlen: 24
                          191.96.140.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          179.61.203.0/24 maxlen: 24
                          191.101.181.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          181.214.244.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          191.101.168.0/24 maxlen: 24
                          191.96.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402691 (0x156743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=0b7e5c5bfd83ef269b232aebf78ec7665f4af1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:db:03:4b:f0:98:29:1f:55:df:b9:e7:9a:
                    37:d2:42:6c:9f:bf:ac:b0:57:43:0c:33:67:ee:58:
                    d1:6d:c1:43:fb:13:91:32:04:50:a4:31:88:29:b0:
                    56:3e:d5:0e:8a:5a:d7:86:52:da:2c:ea:3a:59:18:
                    10:95:96:77:a1:9f:e5:96:bb:df:b6:09:91:46:0e:
                    2d:d4:0d:49:12:ee:26:d9:91:66:88:0e:c2:d9:f2:
                    58:dc:62:46:34:b7:37:c2:51:0e:a0:3d:28:c2:88:
                    0e:0f:b5:ba:9c:8d:52:88:f8:5b:81:dc:19:45:32:
                    36:57:d1:36:73:7e:b5:57:7a:1f:0e:18:4b:30:1d:
                    59:1c:dd:6e:79:38:4d:5d:13:fd:27:fb:6e:79:61:
                    d6:6c:32:44:89:10:7b:65:12:69:8b:1a:34:75:42:
                    01:aa:4e:c2:4a:ce:8d:e1:f7:0b:e0:15:cf:f8:78:
                    f7:d0:bf:cf:01:29:a0:12:87:c3:04:af:90:e9:96:
                    91:7e:5f:6a:14:18:b3:7e:7a:bc:0c:cb:95:2b:85:
                    4e:ee:05:c1:b5:ef:a5:5a:ee:81:36:28:09:14:70:
                    98:e4:5d:f0:30:b3:08:3b:ff:4e:47:2a:85:47:f8:
                    a2:14:20:42:36:92:6f:76:9b:0d:4c:f1:6a:90:25:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:7E:D5:47:43:61:81:D1:B1:62:A1:E9:47:BB:83:AC:6C:12:27
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0b7e5c5bfd83ef269b232aebf78ec7665f4af1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.203.0/24
                  179.61.226.0/24
                  181.214.13.0/24
                  181.214.78.0/23
                  181.214.84.0/23
                  181.214.122.0/24
                  181.214.146.0/24
                  181.214.197.0-181.214.198.255
                  181.214.219.0/24
                  181.214.244.0/23
                  181.214.255.0/24
                  181.215.9.0/24
                  181.215.31.0/24
                  181.215.35.0/24
                  181.215.244.0/23
                  181.215.252.0/23
                  191.96.29.0/24
                  191.96.34.0/24
                  191.96.52.0/22
                  191.96.61.0/24
                  191.96.94.0/24
                  191.96.118.0/24
                  191.96.140.0/24
                  191.96.149.0/24
                  191.96.168.0/24
                  191.96.206.0/23
                  191.96.233.0/24
                  191.96.245.0/24
                  191.101.168.0/24
                  191.101.181.0/24
                  191.101.187.0/24
                  191.101.190.0/23
                  191.101.194.0/23
                  191.101.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:80:43:3c:3f:51:79:24:6a:2f:f3:8e:f8:b8:bd:75:ce:14:
         8b:8d:4d:cc:90:bd:da:6a:7f:32:f4:87:ed:42:cc:b8:37:a1:
         d7:b5:7e:f3:01:f9:df:06:5b:d6:1f:0e:05:ed:eb:5c:05:83:
         11:57:ac:0d:da:38:ce:db:bf:55:56:7a:2c:89:41:0d:7d:fe:
         bb:f5:68:82:b9:d7:65:16:58:fd:2b:df:21:de:72:fb:e5:06:
         60:5e:62:cf:00:c5:30:38:89:f4:8d:b3:39:b7:ca:ec:d9:60:
         f1:49:f7:99:aa:d3:98:8b:d9:7c:eb:30:88:08:58:78:44:79:
         42:95:4e:b4:8d:10:25:ee:46:75:c2:04:fc:25:72:c4:6a:b3:
         dc:76:71:12:19:75:c5:9a:1f:7f:fe:6b:4a:f2:f2:72:7a:70:
         f5:79:5b:21:22:90:b1:b5:21:ea:80:d0:4d:2b:e8:61:ca:f4:
         e8:da:4a:d8:b6:b2:a6:4e:b1:8d:d8:52:1c:39:cd:db:1e:5d:
         e8:25:3d:67:e6:f5:a6:89:ca:2b:20:3e:4c:41:79:09:c4:6f:
         e2:d6:82:08:70:98:5c:bb:89:82:7d:3c:56:72:53:7a:a1:3e:
         16:22:1c:25:12:16:f3:29:9a:ae:d3:db:7c:0f:68:0f:ae:e2:
         e3:65:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org