Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/169340ca4db3e2ac2653da415cc05cbfc12167e4.roa
File:                     169340ca4db3e2ac2653da415cc05cbfc12167e4.roa (raw, json)
Hash identifier:          bI4FU0d655E6cxlOVr1wS8q8rUKNkJ1WmG0H6QDdeWs=
Subject key identifier:   4C:BE:B0:03:EE:C9:41:01:8D:6C:EA:10:02:80:41:11:C7:E9:5E:D1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       11E50C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/169340ca4db3e2ac2653da415cc05cbfc12167e4.roa
Signing time:             Fri 03 Dec 2021 19:15:11 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265867
IP address blocks:        181.214.158.0/23 maxlen: 24
                          181.214.192.0/23 maxlen: 24
                          181.214.137.0/24 maxlen: 24
                          191.101.40.0/24 maxlen: 24
                          191.96.216.0/23 maxlen: 24
                          191.96.218.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172748 (0x11e50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=169340ca4db3e2ac2653da415cc05cbfc12167e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:75:60:01:ea:94:00:14:7c:f9:3f:1a:c7:
                    fc:19:22:72:e8:e3:f1:f4:71:b9:d7:cb:d5:ab:05:
                    cf:6c:37:73:b7:05:a4:97:3d:92:d2:a0:1b:cd:ff:
                    0f:39:25:27:54:51:9d:f2:e6:a8:75:e4:07:bd:6b:
                    1e:ef:fb:6c:bb:9a:a1:5c:06:6d:19:38:a4:00:e7:
                    8d:66:da:0c:0c:cf:d2:20:da:1c:88:df:7d:8a:05:
                    51:27:1f:5f:86:6c:d6:fa:8c:32:14:3c:58:c2:87:
                    df:85:7f:6a:8b:22:db:00:a0:f9:1c:67:a8:91:29:
                    3e:36:77:6a:ad:cc:b7:87:0b:9d:cb:b7:6a:33:41:
                    e9:2b:c6:24:67:71:57:f5:c5:41:3f:46:ea:38:e9:
                    51:ac:95:21:93:5d:16:72:80:98:9f:70:6d:58:a7:
                    9f:1c:68:6b:75:09:6e:8a:28:03:1d:0f:66:df:1f:
                    1c:1a:9c:30:6a:bf:e5:a7:1b:c2:8f:ce:99:65:f1:
                    82:2f:7c:db:9f:91:5e:fd:30:ed:46:56:f9:e5:d3:
                    28:c5:0b:6d:be:4b:59:b0:e0:91:de:74:a9:91:5b:
                    91:82:1c:8b:8f:c8:ea:e2:03:06:64:71:d5:a4:88:
                    7e:f2:25:8d:63:e3:f8:51:ac:b8:c6:61:1a:94:4b:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BE:B0:03:EE:C9:41:01:8D:6C:EA:10:02:80:41:11:C7:E9:5E:D1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/169340ca4db3e2ac2653da415cc05cbfc12167e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.137.0/24
                  181.214.158.0/23
                  181.214.192.0/23
                  191.96.216.0/22
                  191.101.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:35:fc:b6:d1:b5:d2:30:90:69:c5:a8:90:ac:c7:52:e1:
         f0:d1:89:7e:8d:98:dd:9b:f8:37:d2:b2:59:12:7f:dd:fd:87:
         28:01:eb:c1:95:b4:76:5c:10:2e:c0:33:bb:7f:61:52:d8:c8:
         9d:fc:6a:5a:23:96:d6:9a:a5:54:62:69:d2:b2:50:49:fd:29:
         00:f7:f0:e8:d2:cd:20:82:85:c1:aa:86:ec:45:6e:62:a0:cd:
         cb:19:a2:b6:86:42:f1:e0:93:b4:9f:39:9a:d6:85:1f:5c:f9:
         d3:90:5a:12:95:7a:c2:ac:7b:12:ef:d5:ed:6f:63:98:e2:27:
         6f:a8:d9:70:13:ec:f7:38:50:03:8a:7f:79:ba:29:cd:eb:b8:
         42:85:3b:c5:90:79:e3:2d:87:94:26:c7:be:9e:03:87:44:5a:
         d3:87:25:fb:b0:6f:f5:f4:24:c8:a1:7c:a9:98:83:c8:c4:eb:
         b0:30:e5:5a:3b:dd:0c:d8:eb:63:d0:96:bd:40:6f:76:cc:ac:
         4b:6e:dd:07:ff:c1:2f:ef:1b:72:37:3e:52:39:2a:3d:95:e1:
         e7:41:50:58:7f:cd:b8:29:28:50:5b:a7:61:19:f4:f0:c0:eb:
         5f:9e:ac:6b:7c:bd:a0:f1:de:47:85:92:ae:09:d7:e4:7b:da:
         cc:9d:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org