Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36592ac22e17a3e5da7c8cb5701c9cecbf42117d.roa
File:                     36592ac22e17a3e5da7c8cb5701c9cecbf42117d.roa (raw, json)
Hash identifier:          QphmMyrWs1f5aEFd9Q7pBTkh4CwlWD2PNEH0E1QX5WU=
Subject key identifier:   56:9F:02:3B:CB:7D:9D:A3:57:CE:B4:1B:99:34:6D:35:AF:B6:B8:06
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       064797
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36592ac22e17a3e5da7c8cb5701c9cecbf42117d.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     15510
IP address blocks:        191.101.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411543 (0x64797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=36592ac22e17a3e5da7c8cb5701c9cecbf42117d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:b9:09:3a:4b:cf:c7:9f:81:53:d1:d8:3a:
                    95:0e:69:a2:db:49:35:02:2f:6d:98:29:53:c8:a5:
                    28:15:40:f4:9f:25:d4:9a:cf:4d:62:33:53:e7:67:
                    d7:df:e2:67:78:11:5c:6d:a4:3b:1c:4d:ea:21:22:
                    8c:e7:02:d7:fe:11:a0:fa:0e:be:2e:7b:bf:fc:6b:
                    8a:55:88:2a:81:dd:04:18:77:17:bd:1c:83:c1:f2:
                    34:9f:d9:8c:26:2c:43:c8:c1:d4:45:0d:83:be:85:
                    dd:10:25:4f:81:f4:10:2b:40:c9:84:38:ea:6f:8d:
                    d0:fa:68:59:87:81:1c:50:47:62:e5:12:aa:42:21:
                    ac:ee:97:9e:ab:69:2a:09:c6:47:5a:31:96:e7:54:
                    1e:65:08:88:58:9a:38:0e:db:6f:37:c1:8e:07:6a:
                    a3:3e:20:9a:82:83:b4:5f:bf:f7:4b:05:a8:df:18:
                    c5:57:39:ab:7b:fa:da:22:9b:65:43:1e:ac:b9:8b:
                    92:91:b5:e5:3f:1d:a8:42:11:2c:22:3c:25:55:8d:
                    48:c1:2f:12:cb:28:94:65:15:30:5b:b2:95:b6:93:
                    4b:fc:bb:aa:fe:f7:bd:29:04:0a:ad:00:f8:1f:b8:
                    50:52:92:52:7a:30:39:7c:5c:0a:f2:07:01:44:94:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:02:3B:CB:7D:9D:A3:57:CE:B4:1B:99:34:6D:35:AF:B6:B8:06
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36592ac22e17a3e5da7c8cb5701c9cecbf42117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:ae:99:29:ee:05:fe:a6:ed:52:67:fc:da:1e:5f:4d:2b:
         d5:1e:7c:16:4a:e2:c5:67:a9:78:d6:dc:a8:ce:2d:de:4b:f4:
         4c:ca:75:62:98:8f:09:72:f7:9a:21:13:99:ea:aa:f2:35:e5:
         e9:c1:57:41:5b:3f:0c:d0:d2:b1:21:7f:bf:ff:9e:01:71:e4:
         7c:7b:92:9d:0e:8a:3c:c1:d8:c2:b1:99:e0:bc:b4:08:6a:e8:
         61:5c:bd:bc:c0:b3:79:7c:fa:1d:bb:71:a6:93:12:b5:0d:9b:
         b0:60:d1:80:83:35:a4:bb:5b:11:a9:52:f1:51:12:56:fd:88:
         19:5e:f4:57:d9:52:cb:8b:2a:97:5a:e8:7c:7c:90:63:33:e4:
         e3:9e:29:94:7b:be:22:40:4d:69:e1:b2:52:fe:56:02:e9:43:
         67:b4:1e:84:b4:7b:a4:58:1a:da:b4:1f:73:53:13:2d:fa:16:
         22:05:2a:65:00:e3:22:b6:7e:b1:a2:16:8c:4e:e2:0d:ee:12:
         19:35:63:c5:28:64:82:bb:dd:cd:bc:b8:a0:b0:ba:9a:0b:de:
         5e:ba:85:6f:fb:1c:95:97:a7:3f:c5:5c:fb:01:05:a6:1e:db:
         ee:d0:44:be:90:3d:cd:6d:0c:4f:5d:7f:a4:e3:ec:dc:f8:3d:
         92:6f:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org