Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3199f21fc4e8c9d1965229a0238bf73cc10702f2.roa
File:                     3199f21fc4e8c9d1965229a0238bf73cc10702f2.roa (raw, json)
Hash identifier:          mMDRnxX2OGU0wCGsOkqyzzXGBAGBywomttJZ6Li9Jfo=
Subject key identifier:   B1:18:C5:E4:68:62:0D:98:C3:BE:C4:0F:B6:65:64:C7:9C:4A:4C:53
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       157844
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3199f21fc4e8c9d1965229a0238bf73cc10702f2.roa
Signing time:             Tue 01 Feb 2022 13:32:36 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Thu 01 Feb 2024 03:00:00 +0000
asID:                     272546
IP address blocks:        181.214.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407044 (0x157844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2024 GMT
        Subject: CN=3199f21fc4e8c9d1965229a0238bf73cc10702f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:49:a4:47:fd:45:d1:36:32:90:eb:d7:9f:
                    bc:9d:40:4b:14:c5:21:18:a5:17:d4:a5:53:45:e1:
                    b6:5a:e1:95:72:b1:73:98:21:c0:fd:70:6d:a3:fc:
                    c6:4a:25:e0:42:76:ad:bd:a6:e4:ea:64:c3:08:26:
                    84:cb:4a:42:f3:d7:8d:8d:6d:d2:54:00:12:b9:8c:
                    e8:35:3a:54:7e:f7:10:1c:4b:84:f4:46:f9:14:7c:
                    be:9d:82:b9:72:88:2e:ad:23:d7:e6:12:4e:55:0f:
                    0b:a0:33:69:8e:5b:b6:4d:0f:2f:43:89:25:dd:2c:
                    e4:7d:41:64:e0:7c:a0:f5:50:30:25:ee:a7:67:c1:
                    15:e3:93:f3:1e:11:2d:c2:97:7b:2c:9b:44:57:79:
                    a9:fc:c2:b5:65:ff:26:01:7c:f6:a4:bc:26:7f:d3:
                    09:51:b8:cb:a6:e3:1d:07:c7:2a:03:85:6f:64:08:
                    8e:5f:72:38:13:b6:7f:5e:a4:ee:79:8d:40:9d:58:
                    46:b7:41:49:82:26:36:eb:5c:13:06:78:a3:ad:58:
                    8a:ec:f9:8b:25:4c:ae:f3:15:f2:64:83:b9:64:50:
                    9f:8e:a6:7b:56:c8:cb:03:1f:87:62:5c:df:a3:e8:
                    4c:c0:63:54:86:17:ca:68:a1:c1:ae:c2:52:a4:f0:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:18:C5:E4:68:62:0D:98:C3:BE:C4:0F:B6:65:64:C7:9C:4A:4C:53
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3199f21fc4e8c9d1965229a0238bf73cc10702f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:18:0f:ea:f9:de:d5:a1:00:98:df:49:52:23:b2:33:93:
         e7:8f:e8:2e:6f:f3:24:ec:10:4e:11:20:1c:6f:c2:ff:42:bf:
         7d:4e:e6:e1:94:68:87:0f:b0:cd:2c:6b:97:25:9a:eb:09:a9:
         f8:3e:06:d4:de:05:39:0a:6b:cb:b3:c8:b4:11:95:ff:b8:ef:
         ee:21:a8:69:4f:3b:78:cd:d1:dc:5b:c8:ef:bd:ce:77:81:41:
         fb:a8:bf:4d:96:ad:6f:9f:76:71:af:0e:b4:9c:19:98:fc:ca:
         8c:7c:fe:2a:2e:16:7e:30:14:0a:8c:97:17:ad:50:94:1d:bf:
         d7:58:d5:51:2d:7d:9e:5f:70:3b:47:b0:ec:9c:3b:d1:31:f2:
         79:10:b5:72:27:4b:08:c3:01:6e:01:a9:49:16:78:95:83:15:
         b5:09:e9:78:b9:54:bc:2d:bd:a2:29:50:00:3c:4b:96:59:4d:
         d8:90:d9:a2:24:92:e3:74:2f:6f:f5:43:3e:e9:b4:b6:00:f1:
         14:39:e4:7e:54:b1:6d:ee:4f:a6:8d:87:db:b1:8e:fd:86:6e:
         c7:53:2d:c2:7a:1e:38:cb:f3:31:23:54:38:85:28:d8:c9:7c:
         08:28:0b:4c:0a:a1:0f:a8:de:1b:1c:6d:1b:73:41:fc:89:59:
         9f:2c:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org