Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3201eabcad372f0b3730405fd15a778b8220ddb3.roa
File:                     3201eabcad372f0b3730405fd15a778b8220ddb3.roa (raw, json)
Hash identifier:          GMzx9r4IBAwxQsnOuOQc7+pjGPYqDP0ZiRQgJyYwjfw=
Subject key identifier:   6A:70:E8:03:E5:FC:F5:BD:E7:C1:C9:F7:C1:00:B2:F1:48:79:93:AE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06404E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3201eabcad372f0b3730405fd15a778b8220ddb3.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     262191
IP address blocks:        181.215.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409678 (0x6404e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=3201eabcad372f0b3730405fd15a778b8220ddb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:d1:b5:e7:ef:7e:15:cd:b3:f1:00:97:be:
                    75:46:d2:df:bd:4f:bb:9c:ee:77:39:26:fb:58:f4:
                    30:00:60:95:dd:57:c2:3f:7f:91:ba:fa:40:43:c5:
                    cd:97:c8:f7:49:bf:3f:ad:69:6c:15:a1:88:b4:92:
                    17:3b:fa:ae:81:b6:31:10:ca:13:b7:14:51:91:ac:
                    ee:8c:e5:85:07:f4:22:b7:f0:1b:e5:7b:c8:09:dc:
                    69:bc:59:fa:f6:99:e0:db:75:6d:93:77:54:4c:99:
                    76:6e:88:3f:52:00:c3:a2:8b:84:54:cc:00:55:1c:
                    86:62:e2:e3:bd:e2:66:3e:6e:78:72:47:2e:a3:8d:
                    15:38:48:8d:e4:c0:fd:f6:22:cc:25:0f:14:f0:77:
                    4a:61:09:e1:49:12:9f:3a:c3:b9:52:84:54:27:57:
                    eb:d5:d6:90:b9:a7:db:90:27:83:e7:7c:f3:ab:14:
                    5a:93:76:82:54:ec:27:a9:1e:34:22:c8:5f:d6:c5:
                    f9:3f:e7:c7:47:9d:0a:a0:eb:2b:f5:1c:97:bc:e7:
                    d5:c2:e6:e4:b3:73:7e:e4:cb:a3:ed:51:8e:69:54:
                    ca:18:d7:43:91:2b:23:dc:61:21:a0:94:08:a5:f5:
                    2e:26:33:a7:78:da:f7:62:16:65:6b:75:87:bd:50:
                    43:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:E8:03:E5:FC:F5:BD:E7:C1:C9:F7:C1:00:B2:F1:48:79:93:AE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3201eabcad372f0b3730405fd15a778b8220ddb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:58:8d:c2:a0:ca:bf:05:a0:37:ad:7b:0b:1a:68:0a:7b:c7:
         7a:fd:9f:2b:91:32:34:a3:35:60:e1:3b:a6:e6:3d:40:c9:1b:
         e7:07:02:34:91:f6:37:75:f3:4f:9f:f5:34:b2:1c:84:2c:21:
         3f:af:f1:7d:5d:f6:40:45:a6:8c:a6:b1:0b:98:cf:d6:25:cb:
         59:85:76:44:f2:ba:18:1c:f1:56:4f:66:e2:f3:b7:4b:4f:e4:
         73:6f:58:57:98:f2:8f:e9:82:44:9e:41:94:31:c1:f1:19:8e:
         d1:e2:50:2b:14:a7:93:f6:02:e9:c5:45:5a:e0:fd:2a:1a:62:
         ac:ee:a0:93:e9:8d:63:e2:43:d3:47:18:63:03:56:4b:9f:a4:
         17:c0:cd:5a:e4:22:c8:51:19:0a:4e:cf:98:93:a0:e2:28:f2:
         c0:0b:32:63:48:4f:e6:3a:2b:6a:ba:65:04:da:90:fe:c8:45:
         f0:41:91:a3:a8:51:67:0c:a8:c0:d3:40:d1:9a:d1:23:d0:b6:
         ee:96:87:e2:3a:d5:2e:7e:99:21:03:c4:b2:89:eb:da:25:5e:
         2f:19:9a:05:0c:df:4b:9a:65:25:66:a2:8c:5e:92:f2:81:1d:
         b0:44:bc:6b:33:b4:b6:12:d9:ce:e5:b6:0f:14:65:f8:35:97:
         86:95:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org