Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/549aabb4872e35b73c54dc3efd467e554a7020ab.roa
File:                     549aabb4872e35b73c54dc3efd467e554a7020ab.roa (raw, json)
Hash identifier:          VwiLDcgZTxql00TXFiKn99A5fyayS0DpaBl+vNgL9Mg=
Subject key identifier:   88:4C:5D:7E:49:BE:0A:A7:B6:CF:D2:4B:8E:A5:5A:CA:1D:F2:37:FA
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       095B0B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/549aabb4872e35b73c54dc3efd467e554a7020ab.roa
Signing time:             Tue 18 May 2021 16:40:56 +0000
ROA not before:           Tue 18 May 2021 03:00:00 +0000
ROA not after:            Thu 18 May 2023 03:00:00 +0000
asID:                     397540
IP address blocks:        181.215.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613131 (0x95b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: May 18 03:00:00 2021 GMT
            Not After : May 18 03:00:00 2023 GMT
        Subject: CN=549aabb4872e35b73c54dc3efd467e554a7020ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:81:12:1d:ec:fd:43:2b:86:ab:4a:9b:6c:
                    c8:c7:d4:6f:21:10:d5:ff:07:3a:94:7a:eb:59:1a:
                    09:67:48:51:23:52:35:a2:2b:a7:dd:3a:48:37:93:
                    90:3c:46:1b:5f:48:dd:45:fb:c5:6e:77:36:bb:14:
                    0a:42:3e:d8:76:53:8a:da:53:f3:77:d3:bf:0f:78:
                    72:87:dd:0d:49:38:7f:46:6b:0d:1c:6a:61:cc:3b:
                    a3:0f:ac:7d:cc:8c:2b:7e:7b:ab:44:cc:2a:ad:b0:
                    70:89:30:ec:ee:66:c6:7b:76:5e:54:32:f7:07:d8:
                    a7:f0:58:e9:83:b6:50:52:c4:8f:b0:c8:1e:1a:82:
                    3a:8e:8b:33:76:f7:32:08:27:4d:d9:a9:7d:2c:aa:
                    76:70:a5:50:d8:ac:c1:2f:bc:1c:d2:1d:01:12:e0:
                    dc:bd:15:ed:e0:1a:b1:56:36:20:78:a0:50:d9:8c:
                    74:8b:ed:f4:a7:dc:b9:c1:68:d2:b2:e4:5c:54:a2:
                    85:fa:25:04:d5:45:fa:40:46:e3:f4:02:86:35:3b:
                    0b:d7:b2:d5:46:e7:18:80:45:cb:8d:77:bd:38:4d:
                    6d:c7:39:0f:a6:fe:e4:d0:a6:2c:5c:bb:e3:31:e3:
                    2e:e7:5c:26:74:6e:e5:d0:7e:d7:1a:cb:af:88:13:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4C:5D:7E:49:BE:0A:A7:B6:CF:D2:4B:8E:A5:5A:CA:1D:F2:37:FA
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/549aabb4872e35b73c54dc3efd467e554a7020ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:63:fb:88:65:e8:7e:09:4d:7f:c8:8b:3e:9e:15:9b:c6:
         c9:71:5c:e1:0d:90:87:e1:53:1b:79:d7:ab:fc:8c:42:df:bd:
         b8:a9:c1:72:06:b3:66:a0:05:d5:7e:65:60:9a:8e:d3:fa:6c:
         10:4e:ef:96:33:e8:cb:2a:aa:fc:fc:30:23:fc:a4:c2:97:69:
         14:7f:cc:fe:eb:4e:7c:97:27:36:76:9c:16:6a:9b:c1:8f:69:
         ce:f4:0f:09:34:b9:2b:e2:32:1b:40:81:83:a3:55:a4:7b:9f:
         c8:4b:ec:7a:10:cb:99:88:2e:89:b9:36:58:86:c1:4b:44:9f:
         7c:b2:f0:f9:d2:1a:bb:02:fe:79:ac:32:01:7d:0e:c7:be:d4:
         d5:55:51:d3:67:a5:08:e2:a1:0a:dc:89:34:3f:a8:c5:0a:0b:
         17:45:8c:c8:71:6e:d4:ca:3d:48:6c:7a:39:35:8f:84:0a:2f:
         5c:ae:99:ee:2b:93:cf:63:05:ae:5c:e2:a6:17:89:4b:9a:af:
         2c:72:42:d4:1e:82:84:f6:d5:5a:44:e3:3b:2b:65:64:56:38:
         5f:9d:6c:ad:de:ce:22:06:c2:31:a8:69:d4:a4:ac:25:49:fd:
         19:ef:0d:af:3d:16:5d:be:92:e1:47:21:83:bf:d3:03:4c:79:
         13:32:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org