Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/274adbccbfbc8b774a9902e0245106bd6e57a0fd.roa
File:                     274adbccbfbc8b774a9902e0245106bd6e57a0fd.roa (raw, json)
Hash identifier:          EVgv9k2wkR0IbvAGzwuVxwI8Oc4CJOIPR/II8eXrbqs=
Subject key identifier:   65:EE:AF:E5:71:47:8C:FD:D4:19:7B:6F:3C:04:A7:A2:A7:A4:0E:67
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0EBAF3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/274adbccbfbc8b774a9902e0245106bd6e57a0fd.roa
Signing time:             Thu 30 Sep 2021 08:08:59 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     18345
IP address blocks:        181.214.215.0/24 maxlen: 24
                          181.214.199.0/24 maxlen: 24
                          191.101.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965363 (0xebaf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=274adbccbfbc8b774a9902e0245106bd6e57a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:ab:5f:c1:ed:31:f4:f0:99:dd:f2:6e:7f:
                    a0:b6:1f:29:8f:1c:ec:55:72:6c:56:ca:0b:d2:44:
                    d5:b0:62:f9:08:39:d4:7d:1d:79:91:02:75:43:56:
                    40:c3:75:d9:3a:e3:55:53:36:86:2e:51:f7:f3:e5:
                    74:50:bf:98:a6:f3:af:a6:d2:26:00:d3:61:1f:20:
                    c9:60:55:c5:b1:85:55:b8:b0:17:a1:48:6e:c3:60:
                    00:49:fe:86:59:09:08:bf:7d:89:4a:3a:c1:bf:3c:
                    a5:2e:b7:c0:28:c7:96:57:54:f5:7a:ee:45:55:3a:
                    2c:cb:e8:67:93:ab:e2:35:13:fe:7c:c7:35:d3:39:
                    2d:4d:ff:a2:c1:ba:10:2e:86:04:c6:d3:ad:b1:1f:
                    3a:d2:31:2a:01:06:5b:d3:dc:9d:e0:16:82:1f:c0:
                    c8:73:17:e0:88:8a:86:3c:0d:54:b9:c3:71:cd:ce:
                    88:38:67:28:03:75:22:d2:b6:34:f8:71:f3:2d:55:
                    0a:d4:9e:64:df:2b:b8:b8:cc:32:22:86:df:f2:d3:
                    b4:18:53:0d:09:75:97:bb:ce:05:01:e4:16:59:24:
                    5c:61:4a:84:24:59:b9:a4:31:b9:e8:f3:8e:2c:3d:
                    c9:b4:34:db:f7:6b:3d:6a:50:0c:2b:f9:e4:79:ab:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:AF:E5:71:47:8C:FD:D4:19:7B:6F:3C:04:A7:A2:A7:A4:0E:67
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/274adbccbfbc8b774a9902e0245106bd6e57a0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.199.0/24
                  181.214.215.0/24
                  191.101.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:c9:aa:e4:19:a1:5c:13:0f:77:f1:93:ce:35:44:e4:d6:
         25:f6:b1:fa:fe:da:ef:6d:d6:d5:47:8d:ef:f3:fe:ff:5b:a4:
         bc:14:71:2b:a3:4b:7f:7a:c4:ba:50:16:ee:1c:aa:e9:48:bc:
         00:93:52:81:ef:af:f8:35:ca:bb:86:82:33:04:94:b2:b3:e2:
         a9:0c:09:eb:8a:c3:7b:d6:05:29:3b:b0:af:f7:86:74:16:f7:
         65:b6:31:74:91:d9:b5:47:19:7e:d6:86:0f:1b:ba:f1:55:d6:
         29:bd:81:ab:58:c3:f7:32:38:99:29:6d:82:3a:14:31:17:7f:
         10:38:64:4b:a1:49:6a:fe:1d:13:48:23:7c:51:f8:db:fa:97:
         28:3e:76:16:0c:5e:5b:a0:e0:32:6b:a6:7b:48:b7:48:f1:1c:
         24:3b:f4:f5:3f:5d:ac:71:65:5b:0a:cb:12:63:6d:22:29:1c:
         b8:f3:a1:4d:be:6c:fe:10:62:46:33:81:b1:30:48:c5:b7:4c:
         ff:86:69:cb:5e:09:97:ba:bc:81:09:54:35:58:d2:e8:c5:ca:
         9c:77:26:f2:c4:00:6f:0c:0f:96:0f:55:d5:40:43:be:9f:e4:
         18:76:22:0d:f8:3c:0a:45:0e:ef:e7:99:56:c1:1b:e0:99:f2:
         1c:54:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org