Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2d3f931c1e6fafb6a45cd1acac594e0647e8d34a.roa
File:                     2d3f931c1e6fafb6a45cd1acac594e0647e8d34a.roa (raw, json)
Hash identifier:          9zSafd3bwp2ENr2ktlLo+Py3/GlHhhQvpCIPeaxOBME=
Subject key identifier:   7C:BF:DB:43:87:C7:A0:EB:12:20:37:41:B5:E6:91:60:FB:9D:6D:AB
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0F7013
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2d3f931c1e6fafb6a45cd1acac594e0647e8d34a.roa
Signing time:             Mon 11 Oct 2021 08:27:08 +0000
ROA not before:           Mon 11 Oct 2021 03:00:00 +0000
ROA not after:            Wed 11 Oct 2023 03:00:00 +0000
asID:                     396356
IP address blocks:        181.214.155.0/24 maxlen: 24
                          179.61.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011731 (0xf7013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 11 03:00:00 2021 GMT
            Not After : Oct 11 03:00:00 2023 GMT
        Subject: CN=2d3f931c1e6fafb6a45cd1acac594e0647e8d34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:aa:9d:41:26:18:9f:d5:91:db:d9:d0:d1:
                    c1:08:d9:f8:2d:96:ce:9a:9a:38:a5:d4:a6:63:c3:
                    21:6c:08:11:69:19:79:45:ec:12:f4:07:4c:0b:61:
                    3b:7e:25:27:cd:9d:8c:43:16:6d:0e:c2:e6:2f:65:
                    e0:e4:c6:27:37:2a:da:43:99:cb:a1:89:3c:4e:d8:
                    ae:5e:ab:b3:56:98:8e:f2:df:fd:42:13:06:73:b5:
                    9d:37:95:9b:28:c3:6b:27:a9:52:16:3e:6c:7f:5a:
                    22:21:2c:a4:a9:aa:40:f4:b8:53:25:e4:0a:24:54:
                    d6:83:37:9b:05:2c:31:c3:cc:97:86:85:c0:33:81:
                    f0:e7:b7:16:8b:9e:bd:d0:ac:98:5f:69:18:28:e1:
                    13:15:47:bf:2a:d0:88:aa:9d:1e:17:fe:5a:60:a3:
                    24:f3:d3:08:f8:b2:b4:f4:46:a0:3c:56:ce:de:f4:
                    3f:93:4c:fc:46:57:cb:c7:da:53:a0:94:ff:67:65:
                    98:c6:06:d7:bd:90:b0:67:a9:47:5d:f9:57:1b:49:
                    e8:69:b9:bd:84:55:27:dd:f9:9e:50:8b:af:7a:df:
                    8f:0e:a2:af:82:33:1b:96:e7:40:e5:a8:7b:ca:9e:
                    c4:0b:8d:f9:27:23:1a:74:b7:8b:b4:90:ad:ea:24:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:DB:43:87:C7:A0:EB:12:20:37:41:B5:E6:91:60:FB:9D:6D:AB
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2d3f931c1e6fafb6a45cd1acac594e0647e8d34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.217.0/24
                  181.214.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:45:f8:d7:72:c9:d6:86:fe:b2:8c:c6:94:86:e4:9a:f2:
         27:15:d5:54:fc:20:41:20:3e:f6:d8:e7:89:40:85:8b:fc:b2:
         24:21:d2:5d:f9:80:df:90:eb:de:92:24:55:8a:f9:f0:60:a3:
         6e:f1:c5:e8:84:73:10:d2:53:79:d6:4a:f6:81:b0:9e:49:61:
         5c:20:8f:50:56:26:e6:06:23:a5:08:98:1d:d0:d1:1f:2b:18:
         73:04:cc:88:dc:13:a2:29:ac:3d:66:88:62:54:80:75:92:f8:
         f8:1e:9f:89:ca:e3:cb:f7:67:a4:e5:87:0f:02:97:b1:11:87:
         e0:90:12:55:de:e7:7a:e5:98:26:75:1a:3e:6c:e9:c5:26:cc:
         e5:b5:c1:5e:24:f1:79:46:44:cf:88:62:3f:e5:53:61:9f:de:
         84:94:43:7c:39:ad:46:77:50:f8:d5:3d:36:a9:22:77:21:5a:
         2e:20:19:4f:be:6a:f1:11:a0:d5:fc:18:f8:a8:f1:fe:01:77:
         91:81:c2:2e:2f:72:b0:ce:ff:16:60:6f:58:ae:22:db:27:cf:
         34:62:cc:66:d1:be:06:03:60:2a:e1:27:1e:2f:70:cf:29:67:
         55:65:f9:63:2d:92:97:c5:8f:e3:c7:48:c0:0c:25:0b:45:f0:
         22:f5:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org