Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/262d84a007872d2aa697ba260fca169c5391c2f4.roa
File:                     262d84a007872d2aa697ba260fca169c5391c2f4.roa (raw, json)
Hash identifier:          OdY/DSU2Y+5/oaPIPUdByhuLvQQAmO65xd/GNYYiI08=
Subject key identifier:   01:81:8D:A8:E7:F1:31:6B:B3:5A:C0:ED:22:43:8C:0C:03:78:03:58
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06ADD9
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/262d84a007872d2aa697ba260fca169c5391c2f4.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     205544
IP address blocks:        191.101.134.0/24 maxlen: 24
                          191.96.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437721 (0x6add9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=262d84a007872d2aa697ba260fca169c5391c2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:fe:c9:ad:79:b9:65:97:6c:0b:b3:3b:81:
                    68:32:35:be:a3:02:f4:71:e7:d0:ce:d5:4c:62:da:
                    3b:3d:eb:f3:5a:38:ef:f1:b0:08:93:56:0d:b4:57:
                    43:97:a4:35:34:45:11:8d:07:37:3b:40:04:04:98:
                    bf:c9:9c:25:f4:8b:55:07:84:47:77:cf:38:72:e9:
                    9e:bb:c8:8a:7b:c4:ca:2d:55:7b:51:40:05:7a:1c:
                    b6:4a:31:29:74:c8:27:43:46:1d:1b:3e:f5:87:09:
                    cf:99:ea:70:6a:d9:eb:23:98:83:b0:99:ef:f5:d8:
                    d5:2a:13:dc:79:8b:41:bf:85:1a:9a:97:41:c7:1c:
                    94:19:cb:71:63:4f:40:b0:fc:9f:d0:03:23:ce:94:
                    38:2e:06:80:0c:ce:f8:87:4f:64:df:06:f9:04:90:
                    6d:ba:74:2d:c7:00:ec:36:48:9d:cd:f8:da:f4:4d:
                    5e:c5:55:3e:ea:4e:1d:61:d7:cc:bd:48:13:60:44:
                    d6:78:c4:fc:71:14:5c:67:88:b0:11:5b:d8:3b:4c:
                    5d:f9:11:5f:fa:b0:51:24:53:cb:59:78:04:b5:52:
                    b2:e7:bd:33:04:38:14:be:4f:dd:08:ef:cf:14:16:
                    0f:dd:bd:79:ef:36:70:3e:55:72:21:9a:02:84:9d:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:81:8D:A8:E7:F1:31:6B:B3:5A:C0:ED:22:43:8C:0C:03:78:03:58
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/262d84a007872d2aa697ba260fca169c5391c2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.249.0/24
                  191.101.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:eb:24:55:25:c5:2f:29:b8:22:16:d8:a2:db:ab:17:a5:
         49:e3:5f:cd:8c:6b:64:32:33:4f:c5:7d:b1:96:0f:c1:d4:8e:
         9f:c9:a7:b4:13:94:a1:fe:8a:51:86:ce:40:aa:ac:85:b1:53:
         c7:a6:02:67:ca:bb:19:cc:c7:e3:1b:a0:a5:5c:4d:59:eb:7e:
         e1:64:aa:b0:ee:74:ef:7f:9c:20:67:4b:52:f2:4a:ba:1f:aa:
         bb:d6:8a:c2:23:76:96:40:f9:52:f9:1f:4e:07:ce:25:b0:97:
         a9:f0:27:bf:fa:80:05:60:65:38:ea:61:b8:57:8a:8f:4d:30:
         34:10:aa:84:88:10:d3:ed:a6:9b:fb:df:e6:8c:b6:60:9f:93:
         59:73:48:6a:66:a4:1b:c8:74:15:f2:40:d2:4c:95:d9:8e:c8:
         04:cc:24:2e:3f:a5:23:66:78:6f:21:83:83:98:ce:f5:3d:3a:
         7d:12:c7:2c:2d:82:a9:f4:07:64:92:a3:7b:53:1c:f6:53:12:
         5f:cc:21:a2:fa:8d:19:9a:82:63:93:14:d9:87:70:03:b8:45:
         e1:75:fa:7e:6f:64:8c:b9:59:26:f4:85:85:14:cd:5c:fb:b3:
         8b:3e:ab:a5:9f:c3:78:4d:1a:a5:6c:e8:d0:e7:e2:18:84:e5:
         41:30:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org