Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2fbf4c455784fb4a02c44425be4b7a012164fb9e.roa
File:                     2fbf4c455784fb4a02c44425be4b7a012164fb9e.roa (raw, json)
Hash identifier:          63f69b/omNCRqH7vwX1Ur8V4UG98Jckilb3lYhC66kg=
Subject key identifier:   8C:A5:A0:89:DE:DF:63:33:94:D7:8D:F1:EB:3E:B2:24:22:CB:9B:76
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       169A6C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2fbf4c455784fb4a02c44425be4b7a012164fb9e.roa
Signing time:             Thu 24 Feb 2022 12:40:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     45671
IP address blocks:        191.101.161.0/24 maxlen: 24
                          191.101.37.0/24 maxlen: 24
                          179.61.228.0/24 maxlen: 24
                          179.61.240.0/24 maxlen: 24
                          181.214.163.0/24 maxlen: 24
                          181.214.162.0/24 maxlen: 24
                          181.214.174.0/24 maxlen: 24
                          181.215.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481324 (0x169a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2fbf4c455784fb4a02c44425be4b7a012164fb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:33:f6:da:8c:4e:c7:ea:76:10:b9:88:32:
                    77:3e:99:5e:e7:8d:51:d5:bf:b4:59:5b:ef:13:b5:
                    fd:bb:5a:4d:8f:83:12:d3:ab:32:4a:52:7b:0f:56:
                    cb:e3:e9:dd:1f:65:0c:51:9d:a7:7b:c7:da:56:76:
                    88:a6:93:12:72:9e:79:0f:d5:11:13:a6:57:c5:a9:
                    db:8e:18:7e:2e:4b:bc:05:72:5e:19:ff:63:d3:1a:
                    3e:5d:71:85:53:77:86:24:6b:f5:bf:40:9e:a3:28:
                    59:4d:c1:09:bd:df:77:d9:16:2e:13:a9:5e:70:5a:
                    15:24:53:15:61:64:34:fa:a3:17:1a:3b:13:c2:39:
                    93:82:bf:7b:6f:c2:02:49:a3:ed:e5:ee:ea:c2:56:
                    a6:41:d1:db:e3:da:d9:c6:35:d0:c4:7a:40:b0:ca:
                    f7:38:d3:72:9b:47:fa:9a:c4:1f:58:4a:bc:17:3d:
                    0c:76:67:2c:48:4f:86:de:47:65:06:6f:f8:5e:dc:
                    76:36:1c:7d:bf:ac:97:3f:e5:5b:7d:cf:14:70:20:
                    6d:d8:9a:fe:39:97:5c:63:0d:8a:53:d1:4b:01:94:
                    73:e9:af:6d:b2:6c:51:27:82:0a:23:05:01:31:b3:
                    37:56:fc:78:32:a8:d3:65:c0:2b:83:ac:d6:39:2d:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A5:A0:89:DE:DF:63:33:94:D7:8D:F1:EB:3E:B2:24:22:CB:9B:76
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2fbf4c455784fb4a02c44425be4b7a012164fb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.228.0/24
                  179.61.240.0/24
                  181.214.162.0/23
                  181.214.174.0/24
                  181.215.168.0/24
                  191.101.37.0/24
                  191.101.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:37:2b:a8:70:cd:05:4e:4e:0d:6e:fc:62:29:9a:4b:33:23:
         19:47:df:d8:fd:70:46:29:18:83:d6:79:01:0d:a5:db:7b:13:
         19:82:09:79:ef:6c:ea:d6:92:93:8f:0c:56:72:be:9a:2e:22:
         bb:47:34:a9:39:09:1a:e5:ec:e3:37:35:95:83:c2:73:df:02:
         e9:d9:7d:c5:77:19:d1:10:fd:fa:fd:ae:80:9c:d5:1d:7d:f9:
         f3:d0:29:0b:8c:83:11:dc:5a:74:10:e8:7a:da:18:9f:a6:f4:
         81:f7:91:ac:dc:83:7a:b0:20:4f:84:3d:18:4b:dd:fe:37:76:
         f6:64:25:96:62:1f:7e:10:03:fb:5d:4c:e9:a8:db:07:33:dc:
         5c:f6:42:65:5d:6e:f6:52:a4:ab:76:a6:29:1b:bb:e5:ee:8b:
         63:35:0a:10:21:09:3e:7d:9d:a8:8c:d1:cc:7e:fe:1b:35:05:
         dc:b3:67:70:f6:70:eb:c5:b3:b3:31:c9:93:bb:5f:4a:de:62:
         7c:40:28:72:c8:94:49:1e:aa:18:13:90:c7:68:10:37:3d:9a:
         af:26:f6:d2:ee:11:20:67:b4:c2:a7:a2:c3:7d:b7:f2:34:e6:
         8a:cd:e8:af:b4:2f:a8:49:53:74:5b:23:08:93:d9:77:9b:14:
         19:a4:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org