Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/18ea628e65fac344317c54725e410e4681943b4d.roa
File:                     18ea628e65fac344317c54725e410e4681943b4d.roa (raw, json)
Hash identifier:          hW9fwh6lumZsHwbhGC47BO0o2DtFn5nAFYxZqL2Baz0=
Subject key identifier:   9E:21:D2:51:DC:37:0A:79:AD:01:5E:82:11:93:05:9F:93:CD:7F:63
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0FEDEB
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/18ea628e65fac344317c54725e410e4681943b4d.roa
Signing time:             Thu 21 Oct 2021 03:15:30 +0000
ROA not before:           Thu 21 Oct 2021 03:00:00 +0000
ROA not after:            Sat 21 Oct 2023 03:00:00 +0000
asID:                     271956
IP address blocks:        181.214.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043947 (0xfedeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 21 03:00:00 2021 GMT
            Not After : Oct 21 03:00:00 2023 GMT
        Subject: CN=18ea628e65fac344317c54725e410e4681943b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:b7:69:b2:fb:fa:5a:85:2d:d5:c8:93:c4:
                    36:fc:88:42:b0:62:a6:83:5c:a9:ef:cf:6e:0c:99:
                    ea:18:84:92:87:f1:1a:b0:3a:b0:a4:97:70:68:fc:
                    fd:3f:4b:0f:83:2d:18:ea:88:78:45:1b:bc:c8:31:
                    98:70:c0:e7:98:02:37:e2:14:a9:7c:82:a4:bf:95:
                    fb:fb:13:5d:ac:ec:33:25:54:6c:8b:c1:01:64:6c:
                    96:5b:57:c4:30:92:6c:f8:6d:df:38:94:14:6c:7f:
                    cb:d5:e2:a7:cb:41:b5:86:dd:af:0f:9b:97:d4:51:
                    69:15:55:86:08:7a:74:a8:43:c7:0e:7c:5d:d8:88:
                    0d:5a:9b:ed:35:60:2f:fb:91:ba:a9:9a:32:17:be:
                    2c:2e:ab:e5:a5:45:f7:51:41:7d:0f:95:03:1f:0a:
                    d7:b4:2a:62:97:ce:70:de:02:1d:4c:35:aa:7b:fc:
                    7e:7c:b5:c6:52:ee:c2:87:58:b2:05:0d:39:cb:2a:
                    74:62:e1:71:8b:81:19:fd:29:57:61:75:30:fb:4e:
                    7a:cc:97:68:c1:50:5e:d2:b0:d8:0a:00:51:24:3c:
                    22:20:b4:c4:c3:d2:84:b2:ec:56:e9:f0:52:9a:22:
                    73:af:d5:2e:59:b4:79:ba:76:62:81:9b:5c:55:0a:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:D2:51:DC:37:0A:79:AD:01:5E:82:11:93:05:9F:93:CD:7F:63
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/18ea628e65fac344317c54725e410e4681943b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:2e:ae:06:fb:50:48:4f:4d:0b:39:ba:ff:51:5a:e8:d9:
         7e:51:f5:e5:df:78:59:c1:17:d1:ea:65:b3:57:74:5f:e9:58:
         87:87:5c:1e:be:78:4e:32:5b:5e:72:34:12:0d:3f:12:07:b3:
         c6:e7:8e:fd:77:4a:ba:75:bd:df:3e:59:ae:06:18:8e:c0:6d:
         3a:42:67:0e:0b:f4:80:55:c8:e6:0d:46:0b:a3:53:4e:81:92:
         e3:24:ba:14:44:6f:30:af:32:0a:2b:3a:28:2d:96:dc:b4:76:
         bc:3b:52:84:3e:8d:7f:68:f5:66:7e:87:2a:35:30:ea:ec:29:
         16:78:86:4f:48:44:26:96:49:9f:90:b9:00:be:6e:9f:e2:74:
         18:40:ac:60:64:a3:66:4b:6d:ca:09:d3:c6:fd:cd:00:fb:b7:
         e2:88:e4:0b:d8:16:9a:75:01:a9:ea:52:8a:5f:fc:a1:24:91:
         98:6d:00:5d:b2:dc:c4:7b:71:c0:ff:89:18:c2:cd:a4:2a:3a:
         cd:88:3b:cb:cd:81:b3:96:bd:97:e0:38:93:49:5d:17:80:ea:
         6f:bd:5b:d6:1f:45:8f:bc:10:d9:06:3d:8b:cc:be:a1:36:e5:
         fa:74:b7:8a:83:14:b3:d6:2e:18:42:88:c4:70:ac:34:a5:d0:
         c4:c2:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org