Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e51681b84ff7687c588e200a64a2ba384a6ac88.roa
File:                     5e51681b84ff7687c588e200a64a2ba384a6ac88.roa (raw, json)
Hash identifier:          0FNLyAPjXpNCCRawX3JoCYhKegNb1EDWO2mnKDwXkmQ=
Subject key identifier:   C3:CF:A4:E4:88:33:FA:F0:BA:63:3A:F3:AE:DC:A3:88:F4:00:94:E9
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       15A893
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e51681b84ff7687c588e200a64a2ba384a6ac88.roa
Signing time:             Thu 03 Feb 2022 09:03:15 +0000
ROA not before:           Thu 27 Jan 2022 03:00:00 +0000
ROA not after:            Sat 27 Jan 2024 03:00:00 +0000
asID:                     139660
IP address blocks:        181.215.168.0/24 maxlen: 24
                          181.215.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419411 (0x15a893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan 27 03:00:00 2022 GMT
            Not After : Jan 27 03:00:00 2024 GMT
        Subject: CN=5e51681b84ff7687c588e200a64a2ba384a6ac88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:23:bb:23:36:1c:a5:7b:ed:7c:ee:1a:02:
                    14:c6:3a:f1:bc:28:a2:16:55:14:16:1f:36:36:16:
                    e2:71:51:3a:85:6d:f9:ef:d5:15:ba:7e:cf:ed:78:
                    21:f1:c4:59:1c:24:81:9a:c5:45:a8:c0:30:e3:d8:
                    f6:30:4f:d3:0f:95:9c:88:00:cd:66:be:39:d4:07:
                    51:24:5b:20:4c:2d:10:26:2e:89:34:e5:07:e0:8b:
                    ea:01:80:3c:4e:b9:35:ce:ff:91:00:e7:e3:41:4b:
                    d7:c2:52:a3:db:66:84:17:13:42:94:e1:99:8d:9d:
                    a2:57:60:62:59:6a:d3:0f:33:bd:2a:38:92:3d:10:
                    36:1a:94:e6:22:46:fb:72:a5:e7:73:c9:3f:12:2d:
                    65:c6:45:6e:8c:88:fd:67:0f:1e:36:ed:8b:c7:1d:
                    86:82:1b:0a:c9:12:b1:74:db:d1:4b:76:5f:12:9e:
                    48:df:7a:af:f5:d2:cf:30:43:b0:1a:78:01:c5:2c:
                    93:34:37:31:95:36:46:cb:4b:61:a5:b3:6b:eb:2c:
                    e2:ad:d2:4d:e0:6e:37:e3:75:9d:51:b3:c3:0f:c3:
                    2f:0f:d8:bb:fe:26:d4:49:5d:14:fe:3b:7c:a4:05:
                    f6:e1:db:23:05:5d:44:d3:00:28:05:f1:02:11:f2:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:A4:E4:88:33:FA:F0:BA:63:3A:F3:AE:DC:A3:88:F4:00:94:E9
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5e51681b84ff7687c588e200a64a2ba384a6ac88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.79.0/24
                  181.215.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:21:09:9a:65:4d:2c:b9:c6:d4:f0:5c:52:61:a5:b6:bb:33:
         eb:72:63:77:3d:ae:ac:16:42:a6:a9:74:1e:09:cf:47:68:5d:
         38:43:3c:91:da:e2:4e:56:d8:f4:26:2a:3b:94:b6:0e:d0:86:
         64:64:2d:9a:4d:44:ef:6c:57:3b:2d:ce:3e:e9:8c:fb:ad:90:
         14:f8:40:58:99:19:ff:d6:90:19:a5:41:92:d3:28:a7:7e:a8:
         1c:ba:64:be:40:ba:d5:58:71:f8:22:56:73:db:d0:46:46:d1:
         dc:4f:b2:c4:a9:78:71:f1:16:ce:e1:44:33:a9:62:0c:6d:b1:
         52:17:9e:8c:a9:91:df:1b:b8:b3:df:28:56:16:c2:fe:7a:e0:
         7d:b9:56:7d:5d:1a:16:92:e4:47:39:00:3c:b8:4a:ee:8b:ae:
         31:d5:39:b0:dc:ab:e0:e2:9b:fe:c0:57:0a:ad:40:67:f8:43:
         08:46:b9:46:4e:83:6b:9d:ad:a4:7d:e9:86:98:9e:29:9c:ab:
         9e:36:df:03:8b:40:47:2a:52:47:d2:62:5a:15:e1:64:2d:8b:
         d6:05:42:55:db:54:b0:bd:2f:b4:80:06:29:53:91:9f:6a:a4:
         99:4b:56:f2:5a:d4:01:3a:3c:2e:a8:b6:43:61:35:a8:21:cc:
         80:eb:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org