Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa
File:                     2783e781c80cbccb9c3e988c79d2c15781f528c3.roa (raw, json)
Hash identifier:          7iSU7jhASBFWy3lugJdcSEb5GeJaqZcUHTdEK8sd93A=
Subject key identifier:   62:38:B4:B3:09:05:14:68:0E:C2:92:48:84:42:23:E3:F9:9B:30:91
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06B92B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     36351
IP address blocks:        191.96.120.0/24 maxlen: 24
                          191.96.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440619 (0x6b92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=2783e781c80cbccb9c3e988c79d2c15781f528c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:db:21:68:c5:b9:a4:de:0b:32:0a:ce:2a:
                    cb:63:36:e6:c9:2b:50:9d:18:b7:a6:1a:dc:fc:7d:
                    57:66:3a:c3:f1:db:0c:f9:41:4e:c7:92:fa:1a:79:
                    58:3b:e2:47:0a:06:b2:bd:de:58:8a:bd:56:a6:85:
                    f5:c8:bd:e1:7d:6d:93:32:6b:f1:5f:0c:61:f4:5f:
                    f4:c4:9b:bb:0a:95:5c:b3:a3:a7:7c:73:3c:9f:32:
                    40:8e:40:ac:4d:10:9a:00:38:5f:d1:27:8f:56:18:
                    5c:e5:77:67:26:f4:9a:33:12:5c:fd:65:fa:3e:a6:
                    27:bd:59:2b:9e:67:7a:96:fc:a5:23:f5:06:ae:e2:
                    39:c9:a2:8e:f0:09:dd:ac:0c:c8:84:82:d3:0e:76:
                    ec:97:9e:7f:2e:e1:2a:6e:9d:0e:9c:29:a6:c8:75:
                    d5:da:e7:b0:37:e7:59:ca:e8:f6:3c:30:41:81:2f:
                    0c:44:cb:4a:6c:14:13:5d:9a:12:d2:f3:21:09:17:
                    e1:e0:0d:a6:15:cb:f7:83:08:ff:68:10:9e:60:ab:
                    5b:2b:0a:bb:34:2b:fd:ad:f7:51:49:40:03:0d:d8:
                    15:37:96:2d:2b:05:f8:f6:b7:f1:30:15:93:2d:da:
                    fe:c0:8a:9e:88:c0:90:c4:27:b5:0b:3e:7e:41:da:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:B4:B3:09:05:14:68:0E:C2:92:48:84:42:23:E3:F9:9B:30:91
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:38:10:9a:9d:a7:73:f6:b3:8a:3e:8d:e1:8e:76:18:58:56:
         60:e5:b4:e5:33:35:09:01:6a:12:61:f2:47:f2:e3:54:92:6b:
         fd:30:56:f5:d1:35:9c:0b:4b:fd:da:49:f5:f1:c2:9b:17:c1:
         0f:6e:22:03:03:30:51:60:20:e5:b3:5d:e7:9e:85:12:94:ff:
         c6:aa:71:47:60:7b:9d:f7:d7:b7:cd:81:4b:7d:61:41:86:d0:
         63:56:6e:3e:f5:8b:28:b4:56:d4:4b:f6:a3:fd:2d:9b:94:5c:
         2d:f9:e2:08:d3:d5:9c:80:6f:1d:6b:df:6a:bd:e4:a0:6c:1d:
         87:72:39:d4:5c:c1:95:03:71:52:d8:b8:14:21:e8:cd:dd:2a:
         9d:67:f3:39:51:cb:08:b5:64:6b:d1:c7:7c:a1:c7:03:89:17:
         24:e4:16:09:15:a9:3a:fa:55:11:5f:4b:68:85:7e:bb:3d:be:
         9f:f1:00:46:1f:01:b1:30:72:10:d0:08:ca:86:10:37:25:dd:
         51:7c:9a:be:13:28:b5:e1:85:f4:9d:e2:a9:67:dc:8c:f3:7e:
         fc:19:cd:bf:7a:1f:08:35:d7:86:08:e5:31:98:40:53:fe:05:
         8b:10:91:3f:eb:c9:41:5d:e7:16:cc:eb:0e:c2:d9:8b:31:4c:
         a1:ad:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org