Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/368eb70d607b514f1a8123d3327db3b08ae1771f.roa
File:                     368eb70d607b514f1a8123d3327db3b08ae1771f.roa (raw, json)
Hash identifier:          Pz2LMJyVdoxcpmvw3nmUDWgQbaH6N4OrHMlQtOdeJ4M=
Subject key identifier:   05:27:D0:28:8A:E4:9A:C5:2F:B9:4E:09:5F:34:63:AA:5C:90:59:15
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       15FD44
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/368eb70d607b514f1a8123d3327db3b08ae1771f.roa
Signing time:             Thu 10 Feb 2022 11:15:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     62240
IP address blocks:        191.101.22.0/24 maxlen: 24
                          191.96.128.0/24 maxlen: 24
                          191.96.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441092 (0x15fd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=368eb70d607b514f1a8123d3327db3b08ae1771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:fa:24:0d:4a:ed:9a:d3:49:85:bb:7e:49:
                    e2:2e:8b:f9:f9:b1:12:92:dc:2b:06:75:61:5c:1c:
                    47:e7:26:cd:0e:01:fe:87:86:56:31:3c:7e:32:23:
                    90:63:7e:1a:00:4a:5e:fe:48:25:ab:5b:98:18:47:
                    d0:e0:fd:7f:37:11:5b:45:dd:de:48:41:72:0f:68:
                    82:b3:a5:d9:64:3f:db:40:99:bc:63:6a:f7:5a:15:
                    a9:53:c0:0b:66:9a:75:7c:0a:47:5f:ee:5b:3e:b1:
                    6d:c3:12:13:6c:75:35:3b:0a:8f:d9:66:11:0e:e6:
                    f5:0d:cc:28:f4:e2:e7:8f:e8:f3:50:fa:da:a6:f6:
                    8b:73:a0:a8:fc:ed:aa:35:ca:02:64:6e:c2:51:49:
                    b4:4f:aa:f2:94:f0:eb:b4:26:df:d2:3b:2c:5b:22:
                    6f:0a:b7:b4:6a:b0:b6:bc:26:a2:8e:a8:34:2d:0b:
                    2d:34:87:80:37:67:7b:1a:bf:74:87:d4:d6:62:3c:
                    eb:fc:73:98:e3:a3:66:1b:ef:3f:61:bb:72:fb:6f:
                    52:5a:d5:f8:1f:a7:31:04:35:35:4e:ae:0b:a4:ca:
                    35:f2:08:48:9a:fb:89:76:82:20:bb:80:fe:34:50:
                    18:81:b0:a6:ad:75:37:e3:74:40:15:fd:32:f6:e0:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:27:D0:28:8A:E4:9A:C5:2F:B9:4E:09:5F:34:63:AA:5C:90:59:15
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/368eb70d607b514f1a8123d3327db3b08ae1771f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.90.0/24
                  191.96.128.0/24
                  191.101.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:56:c5:cc:89:53:64:ad:ae:4f:28:d1:84:0b:e6:65:a8:49:
         1f:84:76:e9:86:be:3b:52:2e:e7:3f:f1:81:4c:8b:55:c2:a1:
         f8:80:f8:e8:e2:c1:97:c0:10:cf:b9:81:29:1b:71:b8:e4:21:
         6f:0b:a4:51:78:f1:5d:17:37:84:39:b2:18:77:c7:b9:4b:a5:
         04:2e:50:72:70:14:18:ce:88:18:f3:79:85:0a:81:ee:ff:65:
         a3:6d:29:5d:37:b3:81:8a:8c:fc:e7:85:07:76:7f:f5:81:7c:
         51:14:ee:64:99:7e:4e:a1:cf:40:a8:6c:3d:dd:7c:0c:e9:72:
         50:04:2b:32:f8:49:09:d5:26:47:9c:41:23:15:3d:75:bb:b7:
         49:6a:b3:d6:16:7f:f9:d8:2f:5c:08:44:0b:8b:e8:da:9c:d1:
         51:12:c5:68:e7:41:a1:80:dc:9c:8c:7f:4a:2a:9f:ba:fb:5d:
         e0:ff:82:7f:5b:1a:9d:c8:ab:c2:1c:77:2b:15:3a:13:1a:e3:
         c5:14:db:55:10:3a:94:30:c4:04:6f:a8:75:90:19:5a:14:e8:
         a9:8f:f6:28:4a:16:63:42:72:c9:11:9b:2e:d8:d2:2e:5f:be:
         03:5b:12:af:c6:ce:1d:a6:60:a8:ea:43:1c:92:8c:0e:2e:40:
         e5:2c:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org