Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2332718977f65ff50ee34a515b4b4243aaa904ab.roa
File:                     2332718977f65ff50ee34a515b4b4243aaa904ab.roa (raw, json)
Hash identifier:          +BFTn+UzLHZRoRCkh5wQXql98+8DJ8GJiM+Rmr4G4HQ=
Subject key identifier:   C0:DF:89:CB:80:2F:68:03:0C:D5:92:8C:57:DE:BA:81:9B:37:F3:7B
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       118D58
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2332718977f65ff50ee34a515b4b4243aaa904ab.roa
Signing time:             Wed 24 Nov 2021 04:23:23 +0000
ROA not before:           Thu 16 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     397373
IP address blocks:        191.96.25.0/24 maxlen: 24
                          179.61.223.0/24 maxlen: 24
                          181.215.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150296 (0x118d58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 16 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=2332718977f65ff50ee34a515b4b4243aaa904ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:cc:20:d9:ee:62:96:01:d6:6b:ac:d3:92:
                    d8:84:70:9e:5f:3f:ae:f0:b8:8b:81:b8:9e:c2:07:
                    33:70:18:c9:c6:61:ba:07:05:42:16:14:a7:4a:26:
                    9a:94:7f:19:91:3c:34:98:95:b6:75:f4:e8:11:49:
                    36:38:1f:0d:ec:7c:36:4c:da:6c:23:dd:5b:b0:3a:
                    3e:2d:02:a6:9d:56:f9:7f:1e:e7:58:dc:26:d0:a9:
                    38:de:16:ad:08:be:8f:ca:1e:81:be:bf:15:73:78:
                    b3:53:8c:90:ee:3f:a7:2d:dc:c7:8b:7b:57:ad:8b:
                    a7:35:87:ae:10:f8:99:eb:63:06:0f:95:84:e9:4d:
                    4d:19:d0:48:1e:c4:3b:52:9a:92:d0:23:e2:c0:c4:
                    95:d5:c7:bc:9b:8e:ff:db:28:52:a4:63:9a:3f:d4:
                    8c:13:a9:d9:85:f4:a6:82:f1:f3:c6:73:bb:94:ec:
                    31:f0:0a:f4:42:31:5c:28:24:b8:99:ec:f8:dc:b5:
                    34:43:c2:16:a7:26:07:95:3d:9a:cb:02:e7:2d:7a:
                    cf:f0:83:73:66:21:d1:90:d4:0e:4e:f4:0f:c2:84:
                    f8:04:e4:f0:e6:06:86:32:87:65:6a:1f:01:f4:ea:
                    81:59:6b:0b:ae:d7:d2:89:3a:e6:c9:db:8e:fb:9a:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:89:CB:80:2F:68:03:0C:D5:92:8C:57:DE:BA:81:9B:37:F3:7B
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2332718977f65ff50ee34a515b4b4243aaa904ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.223.0/24
                  181.215.248.0/24
                  191.96.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:a4:63:2b:d3:fa:80:7f:37:c5:2b:ab:39:6b:d6:c7:4b:
         25:17:31:b1:ef:ff:8f:42:ae:96:3b:9c:ff:97:76:58:f7:7b:
         00:0b:ee:a4:08:dd:27:77:55:d7:9f:0a:1b:3f:87:40:2b:9e:
         5e:41:cd:e3:20:2e:88:1c:86:1e:a2:10:92:c1:96:d2:b5:a7:
         75:38:56:f9:df:3c:56:e6:90:3f:03:ab:9b:6b:dc:37:06:e5:
         0c:e5:f5:bc:e7:f8:43:15:b6:1b:05:4c:69:27:71:96:ed:2e:
         55:ed:d1:eb:36:89:70:b0:6b:05:4c:88:8a:8c:ff:8c:20:c2:
         fc:df:2c:68:fd:6e:88:c1:b8:9f:18:e4:c3:87:12:84:93:54:
         a2:87:a4:8a:0a:9a:49:a6:8b:0a:27:55:f3:05:e6:e3:75:aa:
         5b:7d:0b:ad:3d:2b:a0:29:bf:b8:c8:1b:13:02:c7:bd:bd:2e:
         b3:5c:ce:0f:4a:41:27:8f:bc:92:35:9f:f5:7b:f7:1e:a5:0b:
         a0:60:43:9a:26:d4:d6:24:00:cb:4b:c0:d8:bc:e0:8d:43:84:
         04:52:b0:49:e1:04:e7:91:93:3b:70:8d:a2:bc:aa:81:9b:bc:
         a4:98:1d:3b:75:3b:0b:29:b4:03:99:ab:4e:d5:dd:f6:e8:84:
         b4:6e:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org