Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/72eb6fc32603b85b8ca72b530af3535c56aaf1e4.roa
File:                     72eb6fc32603b85b8ca72b530af3535c56aaf1e4.roa (raw, json)
Hash identifier:          uN0TPWxOZgtPzrWauO80LkX+z95RYZaVlB4Oqk9ijEU=
Subject key identifier:   C2:28:16:03:2A:20:A1:C6:DA:DA:59:6C:03:F7:A6:0F:00:4C:25:C4
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1553FE
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/72eb6fc32603b85b8ca72b530af3535c56aaf1e4.roa
Signing time:             Mon 31 Jan 2022 18:50:31 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     49999
IP address blocks:        181.215.73.0/24 maxlen: 24
                          181.215.53.0/24 maxlen: 24
                          179.61.217.0/24 maxlen: 24
                          191.101.185.0/24 maxlen: 24
                          191.96.36.0/24 maxlen: 24
                          181.214.160.0/24 maxlen: 24
                          181.215.186.0/23 maxlen: 24
                          181.215.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397758 (0x1553fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=72eb6fc32603b85b8ca72b530af3535c56aaf1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:53:d7:98:cd:38:7d:cb:44:e5:fa:9b:e8:
                    b9:80:dc:41:15:79:0f:63:c7:55:68:17:4a:72:cd:
                    f5:95:77:58:12:b5:f9:ae:1e:e2:84:e1:23:0e:70:
                    68:d8:9c:cf:c0:33:b1:2b:c2:61:66:7d:3e:44:c8:
                    50:06:03:d2:89:a7:42:3a:67:b6:c4:c9:bf:2b:54:
                    21:a6:f2:29:11:aa:0a:15:21:fd:1f:a7:70:f8:2c:
                    ac:04:20:03:5e:49:a4:53:0f:02:1c:a0:27:d4:66:
                    36:de:31:23:9c:91:f1:d6:ca:e4:03:10:0e:0c:10:
                    24:04:fa:76:8f:cf:38:e5:16:4d:54:90:cc:fc:ed:
                    9d:97:23:9f:ed:b6:be:bb:76:4e:35:c5:5c:b1:9b:
                    1d:04:b3:03:1d:8b:a9:63:c6:5e:0e:7c:0e:d5:00:
                    2c:ca:4f:66:c0:a4:a7:58:be:9a:33:c9:b9:75:d0:
                    24:ae:b2:2f:30:eb:37:8b:7c:46:87:07:05:1a:ce:
                    81:4c:12:3f:0c:d5:04:c2:69:d0:82:a5:36:ef:e2:
                    ff:63:1b:81:57:57:74:96:69:f7:f5:95:f7:5e:31:
                    15:fd:64:17:b7:97:dd:6a:2e:a2:e6:99:6c:d8:27:
                    d2:ef:d1:9e:78:3b:b0:04:fe:8d:7f:e6:bf:c2:e7:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:16:03:2A:20:A1:C6:DA:DA:59:6C:03:F7:A6:0F:00:4C:25:C4
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/72eb6fc32603b85b8ca72b530af3535c56aaf1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.217.0/24
                  181.214.160.0/24
                  181.215.53.0/24
                  181.215.73.0/24
                  181.215.77.0/24
                  181.215.186.0/23
                  191.96.36.0/24
                  191.101.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:07:c6:3f:2e:56:f1:f8:0b:aa:c7:df:7c:18:61:e9:a7:e7:
         08:50:42:51:bf:31:77:8e:e9:e3:31:90:a7:37:31:6d:8c:79:
         1f:0e:9d:12:3d:05:ce:56:26:4d:1f:c8:c7:04:46:9e:c0:a4:
         4b:7a:af:32:29:ec:38:24:be:df:f5:92:f8:7e:53:65:da:b2:
         13:21:40:d8:64:be:60:c0:d4:73:34:cd:7b:33:67:36:de:bd:
         9e:91:f0:14:0e:90:c8:1d:23:f4:57:e3:45:5e:b4:5f:80:74:
         32:0c:2d:ad:40:9a:5e:7f:ba:a5:1c:aa:74:9a:10:71:aa:d6:
         c0:9c:f9:4b:62:75:e2:26:65:04:e4:6d:76:9d:44:f7:36:41:
         a1:bc:b0:f3:00:ae:a9:f4:e3:3b:b9:dd:83:a6:ae:74:35:df:
         74:5a:c6:1a:5a:e5:72:a5:0b:91:de:eb:48:e3:2a:96:cd:2c:
         6d:4d:84:17:c0:56:6c:e7:40:75:db:56:a1:69:95:43:ed:fc:
         f7:b2:1e:d8:dd:72:7f:b0:d5:c8:81:02:0d:af:0d:f0:f5:2e:
         a1:36:81:e6:64:22:d9:7d:ec:18:53:7d:d4:90:6a:09:2d:49:
         6e:e8:d6:8a:b9:6e:8c:99:cc:ba:9e:68:d8:8c:13:c1:4d:a4:
         7d:c6:e1:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org