Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5898f0b2b93b24f06f9c7a6d7d4fb58124505dde.roa
File:                     5898f0b2b93b24f06f9c7a6d7d4fb58124505dde.roa (raw, json)
Hash identifier:          OWF8eTMHdr0zpOwKBBgd258TDhG6X3FZ9cFOs6C8nKU=
Subject key identifier:   AB:71:61:F5:29:54:31:08:9D:76:6F:EB:01:8E:96:B3:3D:7D:72:A6
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       13685B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5898f0b2b93b24f06f9c7a6d7d4fb58124505dde.roa
Signing time:             Thu 30 Dec 2021 17:49:03 +0000
ROA not before:           Thu 30 Dec 2021 03:00:00 +0000
ROA not after:            Sat 30 Dec 2023 03:00:00 +0000
asID:                     54252
IP address blocks:        191.96.84.0/24 maxlen: 24
                          191.96.85.0/24 maxlen: 24
                          191.96.86.0/24 maxlen: 24
                          191.96.87.0/24 maxlen: 24
                          191.96.157.0/24 maxlen: 24
                          191.101.17.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271899 (0x13685b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Dec 30 03:00:00 2021 GMT
            Not After : Dec 30 03:00:00 2023 GMT
        Subject: CN=5898f0b2b93b24f06f9c7a6d7d4fb58124505dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:94:9b:83:ef:90:0a:46:13:47:80:d9:da:
                    1c:1a:10:f3:27:f8:18:6b:b4:29:e2:1b:d8:f3:34:
                    7b:9a:65:9a:03:b8:ab:d6:44:1a:d6:56:75:e3:b5:
                    15:cb:2a:0c:aa:6a:e9:c4:11:7f:2c:d6:5c:32:4f:
                    b3:3a:80:ff:c4:74:e1:6a:0b:24:c9:6e:a4:40:ea:
                    9f:b0:16:17:4e:d1:e3:cf:ef:20:b6:31:a9:a3:9d:
                    ed:8c:e1:37:a5:5a:ac:82:c1:cf:14:be:4a:7e:e6:
                    e8:79:87:56:36:ef:59:9e:29:fa:8a:b5:af:76:52:
                    29:e7:fa:3a:ef:dd:1a:b6:36:30:27:ab:1c:c4:db:
                    57:f7:8d:4c:aa:2c:c8:68:a4:93:42:c4:d0:80:7d:
                    15:c3:54:af:36:7c:eb:fe:9d:54:b8:38:fa:4b:89:
                    a9:7a:76:29:c9:85:9d:70:ec:0e:5b:77:c4:98:c5:
                    fb:1a:2b:8f:c9:6c:b6:75:0e:7e:ea:dc:54:3f:ae:
                    7c:59:cd:3a:ba:95:14:4e:05:9d:19:d6:e6:19:c2:
                    01:e7:d4:27:65:de:23:9a:c6:11:1f:6e:36:1f:52:
                    4b:01:21:8c:bd:b9:79:de:a1:e5:bf:57:88:6e:e5:
                    30:af:d2:ba:e2:5c:77:4b:0e:fe:98:ee:d0:f7:5c:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:71:61:F5:29:54:31:08:9D:76:6F:EB:01:8E:96:B3:3D:7D:72:A6
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5898f0b2b93b24f06f9c7a6d7d4fb58124505dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.29.0/24
                  191.96.84.0/22
                  191.96.157.0/24
                  191.101.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:36:1e:fc:e8:9e:c2:ce:36:c8:8d:54:2a:03:c5:8b:24:
         ec:80:ab:6d:66:83:fe:56:f5:1c:95:7a:5d:e8:38:68:09:f6:
         04:78:7e:cd:54:bd:4a:ee:e6:08:ab:b3:01:dc:bd:fa:1e:61:
         7a:62:26:1d:e6:b5:95:8a:64:00:29:cd:20:d5:68:2c:b4:90:
         f0:0e:c2:18:06:13:37:d8:f9:fb:a0:61:9a:59:fb:c2:d8:c9:
         d5:ff:05:78:0f:cc:bb:72:5b:0a:50:f9:c3:88:68:e9:d9:c0:
         b2:72:25:67:9f:f3:77:9c:a8:af:ea:b0:80:46:5c:76:7e:39:
         c9:78:a3:35:01:fe:15:f2:74:e5:b9:c3:9e:43:b8:82:82:82:
         68:7e:bf:bb:68:c9:09:75:e4:a1:64:d3:55:4d:81:98:4a:b4:
         50:5f:fb:06:e0:d9:8c:00:dd:d2:3f:2b:95:ce:b1:01:99:00:
         53:c2:dc:4c:63:86:33:a0:ad:05:c0:f6:8c:9c:0c:6a:32:2f:
         e5:1a:51:3a:69:30:dd:c7:f7:0d:7b:ae:1e:5f:f0:cb:b6:c6:
         f4:ca:2c:a6:2a:f8:a1:9f:f1:14:03:d9:60:27:28:6e:a9:57:
         05:54:95:8a:4e:44:91:47:32:78:e4:e2:50:99:50:86:1a:0e:
         5d:96:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org