Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3109a6f73f172cad067c51eff628c0552908d5c0.roa
File:                     3109a6f73f172cad067c51eff628c0552908d5c0.roa (raw, json)
Hash identifier:          VAH98pJrjRRvapo1F7NExkMab70JPuM8saZJ2qPQQQw=
Subject key identifier:   B4:4F:6F:E0:B5:41:3D:3C:FA:15:CE:6B:58:16:B3:AD:B7:F1:45:D9
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0F0D19
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3109a6f73f172cad067c51eff628c0552908d5c0.roa
Signing time:             Tue 05 Oct 2021 11:23:28 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     271965
IP address blocks:        181.214.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986393 (0xf0d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=3109a6f73f172cad067c51eff628c0552908d5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:a6:b5:9c:a5:ff:34:dd:a9:32:27:44:ed:
                    cc:06:84:31:5e:a7:81:56:69:fd:ab:18:0d:d8:74:
                    8e:4c:3a:22:e5:1a:95:8d:2f:47:20:f6:44:bf:f7:
                    ae:b1:42:fb:3b:5d:63:b0:ec:72:65:8d:49:87:e9:
                    c4:0f:66:11:1b:bd:b9:3f:54:b6:81:8b:66:4c:d9:
                    ab:bf:18:44:44:2a:0a:5b:f4:f7:9a:98:5d:1a:89:
                    fd:64:50:c6:33:54:39:e8:03:89:70:b0:1a:bc:c0:
                    07:81:ce:f1:14:bd:e2:5d:b0:bc:fd:b5:3e:f2:ed:
                    aa:5b:76:bf:1a:42:04:d1:38:7a:59:b2:da:a3:6a:
                    7c:d1:e7:a1:c7:5a:f2:e7:43:ea:48:cf:5d:4d:73:
                    77:0d:2e:38:55:24:40:0c:75:ba:02:f8:f7:31:b9:
                    30:1a:51:ae:3f:45:59:df:07:a1:d3:f1:54:3e:66:
                    9f:aa:b8:a3:a2:3c:53:2e:40:5f:e6:2c:5e:65:34:
                    0b:2b:2e:bf:a6:86:ab:5d:9c:bf:18:2f:1c:ad:9d:
                    71:31:d0:ec:d1:36:45:2c:60:3e:18:c1:c6:b8:50:
                    ff:5a:c3:5a:5f:b4:36:9a:e4:aa:7e:1f:fc:c9:20:
                    b9:28:68:e9:e4:87:1a:69:f0:8c:83:21:88:e5:24:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4F:6F:E0:B5:41:3D:3C:FA:15:CE:6B:58:16:B3:AD:B7:F1:45:D9
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3109a6f73f172cad067c51eff628c0552908d5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:06:73:b7:04:37:f0:20:aa:ae:34:e8:94:94:9f:2a:17:ef:
         af:9f:08:02:75:a5:cc:0a:a1:fb:bb:83:66:b5:75:1f:1e:54:
         6e:62:26:06:f5:1c:e1:40:63:49:4a:26:00:4b:6b:15:73:84:
         ea:ad:17:65:c3:89:e4:01:b8:4d:27:39:9b:35:34:f4:36:88:
         0a:e4:13:e2:8d:3d:e4:ca:c7:30:38:79:38:9f:85:12:68:7e:
         ca:a1:92:d2:54:92:d1:a2:e7:af:6f:88:91:88:65:76:08:b3:
         7f:92:f9:ef:28:d5:13:69:b7:83:7d:4c:59:33:99:a2:12:9e:
         e3:7d:90:84:88:b6:5b:2a:b7:7a:59:b7:b0:b6:56:cb:65:b7:
         9f:7b:e6:3d:27:be:ff:09:b2:58:b6:0a:e2:e7:15:dc:2d:db:
         01:34:d0:ee:6a:b9:ce:cc:75:5f:87:6e:e7:2a:10:bf:15:fd:
         ff:87:11:79:ad:c9:3b:37:c0:d3:d4:b3:3e:a6:96:5e:6b:2a:
         66:98:eb:bc:94:69:1d:ae:3c:7b:aa:94:cf:43:0a:41:1c:8b:
         4a:8c:52:6d:14:9d:da:31:a1:74:f4:8c:fd:3c:93:24:2b:e1:
         b3:1a:50:1f:45:e6:1e:f5:f3:e3:b6:aa:25:9c:d3:39:cb:7b:
         ae:6a:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org