Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7754147a4c942b0b527d39e1be23685a7a3a9350.roa
File:                     7754147a4c942b0b527d39e1be23685a7a3a9350.roa (raw, json)
Hash identifier:          XXqVarsdDUPiBe0TDx6o990vI0srh9BERjCIauYe+AU=
Subject key identifier:   FC:D8:B6:E0:56:91:52:D6:7A:F7:44:FD:48:B2:EE:97:80:7B:40:28
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       117DE9
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7754147a4c942b0b527d39e1be23685a7a3a9350.roa
Signing time:             Tue 23 Nov 2021 12:00:30 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     271996
IP address blocks:        181.215.234.0/24 maxlen: 24
                          181.215.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146345 (0x117de9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=7754147a4c942b0b527d39e1be23685a7a3a9350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:ed:97:56:ed:2c:59:8c:34:3b:9b:99:b5:
                    87:c5:3f:f8:6b:7c:27:23:e9:a3:75:fa:f5:8e:c5:
                    7e:f2:d8:a7:9c:7c:e8:2f:8d:74:25:3f:fd:9f:a5:
                    d2:ae:9b:1b:61:df:f9:93:e3:04:f2:fd:93:67:cb:
                    ad:63:b7:94:39:35:e8:71:1b:10:31:1c:fc:48:f2:
                    9a:26:bf:e4:ad:4b:c4:9c:52:80:ea:d9:52:ea:ed:
                    6e:3e:dc:57:70:92:07:e1:ad:98:8c:41:0a:1c:05:
                    22:1b:94:85:f2:7c:bc:1b:96:a2:17:9e:a4:71:ad:
                    c2:ae:7d:12:52:fa:9b:75:fc:78:30:33:e9:e7:21:
                    33:f6:96:b8:7a:73:b4:d9:03:52:b6:fd:e5:bf:da:
                    02:22:b6:90:0f:c0:ea:62:66:13:e8:e9:1f:ac:9e:
                    2f:f9:78:30:52:fd:91:71:70:f0:63:3f:25:43:04:
                    b6:24:b2:c6:7e:91:03:60:9f:bb:e1:aa:34:66:2f:
                    2c:6b:df:a6:87:d5:7c:d7:81:a8:16:5d:2a:ff:4e:
                    d6:bb:93:fb:94:15:93:98:77:d2:01:74:03:05:5c:
                    ce:40:45:65:87:7c:c4:c1:69:d3:b9:f8:55:6b:58:
                    11:20:08:4f:25:b0:aa:2a:6e:a0:2d:3a:00:ba:dd:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:B6:E0:56:91:52:D6:7A:F7:44:FD:48:B2:EE:97:80:7B:40:28
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7754147a4c942b0b527d39e1be23685a7a3a9350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.231.0/24
                  181.215.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:37:7b:91:82:57:29:09:5e:17:ce:56:c5:92:20:69:e3:ed:
         e9:98:80:39:ad:ba:56:6d:d8:e7:be:15:3f:35:aa:8b:e1:15:
         04:35:15:4f:95:43:3d:a3:de:39:e3:ad:f5:27:51:cc:7d:23:
         4a:bf:2d:6b:6e:6a:29:ce:81:58:c5:3a:0b:a3:c0:bb:7c:bb:
         2e:ef:28:4e:9e:1d:f0:4c:44:99:6a:02:ca:c0:f1:47:63:81:
         85:66:58:59:e4:fb:9c:66:be:c4:bb:e3:3c:52:09:22:d4:bd:
         e8:25:f4:1c:92:88:63:07:88:2f:c6:54:d6:bb:2e:1b:f9:72:
         5f:30:5b:9e:8d:68:b1:38:eb:de:6c:4f:e8:ff:41:67:91:90:
         60:c0:68:8d:0e:d0:fc:97:d6:f1:98:50:9a:5e:8d:2d:aa:81:
         1b:b4:f9:55:bb:d1:6f:99:7d:43:b0:42:96:0f:83:58:7a:84:
         5a:d9:c7:36:c4:cc:99:d9:c4:96:a1:5b:e5:1e:33:14:f2:c9:
         88:aa:7b:e1:ea:c7:f7:ea:1d:5e:81:ef:49:e3:31:1a:c2:f3:
         17:1a:77:89:11:c2:8a:a9:19:c8:14:6f:b2:da:20:c7:3f:d8:
         22:e8:01:04:55:8c:ee:46:ea:21:b9:66:30:16:45:89:e3:03:
         ca:2b:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org