Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa
File:                     4f379ab8542675ace1c4bf4ae21d63848a207dde.roa (raw, json)
Hash identifier:          E/KpcEh8lxHo91XphCfvjaqAm2D2JUKzJJx3Ebl2ldU=
Subject key identifier:   6F:A2:0F:39:C7:C8:49:9D:3F:0F:6A:06:19:A4:4A:C4:01:A9:2D:62
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       153EBC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa
Signing time:             Sun 30 Jan 2022 13:14:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     133752
IP address blocks:        181.214.242.0/24 maxlen: 24
                          191.101.205.0/24 maxlen: 24
                          191.101.240.0/24 maxlen: 24
                          191.101.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392316 (0x153ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=4f379ab8542675ace1c4bf4ae21d63848a207dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:e0:c4:b5:ca:ce:36:0c:44:f1:49:99:f3:
                    42:08:78:89:57:27:cd:e2:e2:d4:35:cb:40:ed:f4:
                    b8:a8:65:41:ea:4a:47:49:7c:35:a3:9d:f9:fe:4a:
                    07:91:7b:e2:9a:70:8e:bd:0c:88:18:5b:38:25:4a:
                    49:4d:13:e3:55:e0:17:7e:97:f1:53:34:70:fe:c4:
                    33:7b:51:ab:45:48:10:a9:f2:dd:60:31:de:f2:ae:
                    52:e4:20:b7:5c:4b:41:ab:89:ac:a9:db:9f:45:2e:
                    9d:06:7d:12:c1:7f:d5:d5:c7:ce:53:2a:e2:4f:cc:
                    a7:47:e8:a3:7b:91:56:ae:f4:46:1e:f0:e9:47:56:
                    34:39:13:f8:a3:76:f7:6a:3f:fe:6e:25:ee:09:ea:
                    5a:a6:0e:2a:9d:1c:4a:08:01:61:7c:da:05:86:6d:
                    f4:79:9c:b4:d1:8d:fe:f6:e4:8f:f0:0e:b5:9d:26:
                    30:30:04:1f:de:6e:4d:aa:05:af:3b:1e:34:39:50:
                    83:4a:d0:0b:fb:47:21:d0:3e:33:38:a2:29:1a:44:
                    b2:ff:d7:b3:da:84:f8:b0:2a:c2:f0:3a:27:c7:ad:
                    83:37:da:79:fa:62:81:a5:0a:9a:9c:53:a5:1d:24:
                    af:9e:56:dc:1b:3f:58:aa:9a:c4:18:09:9e:d5:4c:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:0F:39:C7:C8:49:9D:3F:0F:6A:06:19:A4:4A:C4:01:A9:2D:62
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4f379ab8542675ace1c4bf4ae21d63848a207dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.242.0/24
                  191.101.205.0/24
                  191.101.240.0/24
                  191.101.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:3e:41:d4:fd:88:a2:18:d8:f8:2d:f6:63:1f:de:b4:b9:
         e1:04:0a:a4:81:ed:7c:22:b7:1d:f5:c3:76:a5:40:c3:d7:8b:
         46:13:22:1d:6d:ab:54:20:bc:2b:d6:2d:bb:bd:e9:18:3c:99:
         72:db:8a:d3:fe:4e:64:07:ea:35:04:49:9e:57:b6:67:cb:0b:
         cc:7a:fa:22:aa:fa:f0:30:2a:6f:d8:62:34:69:0c:40:af:8d:
         c4:dd:52:96:8d:62:9b:03:66:57:6f:ca:0c:69:71:5b:17:df:
         84:2e:c8:87:d1:d8:38:bb:83:22:19:f0:0f:62:5f:93:2c:01:
         f5:94:a3:e8:74:56:d3:f9:ee:8b:32:16:13:61:18:ae:5a:c7:
         52:3a:d4:72:4c:cb:5d:17:e5:c5:5b:4f:46:a7:47:3b:ab:05:
         42:35:85:a0:be:cd:75:a5:b6:89:34:d5:0d:86:90:95:1a:d2:
         1e:e2:1d:32:46:cb:09:1f:2a:22:af:ae:1d:e6:1b:dd:84:ae:
         69:5a:8e:be:dc:df:1e:f6:3b:5f:ee:09:ae:31:93:66:71:bb:
         70:3a:8a:84:7e:cb:9c:3f:47:82:ec:01:95:39:cf:de:66:89:
         5f:b4:bf:cc:59:be:6a:4e:12:ed:53:a4:52:04:25:74:de:0e:
         ca:ba:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org