Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/78e7d089df861c60b7f99405d5449f1d53c364f7.roa
File:                     78e7d089df861c60b7f99405d5449f1d53c364f7.roa (raw, json)
Hash identifier:          F6mMpzxcuEk/0Aw4+3YjEKd5GM7VTtj7fqLjFQtlvjY=
Subject key identifier:   F3:AB:6F:31:52:D3:3D:DB:F1:5A:0B:71:C4:FB:68:B3:58:DB:A6:D3
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       064116
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/78e7d089df861c60b7f99405d5449f1d53c364f7.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     210107
IP address blocks:        181.214.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409878 (0x64116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=78e7d089df861c60b7f99405d5449f1d53c364f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:05:70:8b:bf:9e:28:4a:72:5e:ef:18:d9:
                    3a:14:e4:40:c9:16:19:99:3b:5a:c7:0e:ad:b0:18:
                    00:18:21:b6:6d:fc:d8:5d:84:90:2d:aa:8b:b0:a6:
                    4c:17:52:ba:67:21:51:d7:ef:5d:d8:03:7c:aa:26:
                    1b:58:6f:a0:fa:0b:21:20:20:5a:1d:d1:ac:02:17:
                    b1:73:bb:62:64:28:30:93:38:5c:07:60:6c:1e:b9:
                    13:e5:7b:e9:26:75:f0:7a:db:6e:54:23:1c:92:ec:
                    3e:2b:c0:b0:a4:ee:ac:71:74:97:6b:91:2e:58:27:
                    04:0b:a9:b7:2d:95:9b:20:a1:bd:62:1a:14:88:df:
                    fc:70:b2:33:e4:a6:a2:9b:7f:1d:df:4f:47:66:a3:
                    1f:ec:56:aa:49:ee:ef:08:8f:cc:c0:10:c0:5d:a8:
                    f1:3c:21:70:eb:03:86:6c:7f:29:27:13:ce:f9:a0:
                    17:46:0c:c0:1a:cc:4c:a2:3c:05:f2:aa:d1:5e:72:
                    f4:71:8d:69:36:a0:4a:05:79:89:28:4a:cb:bd:48:
                    14:73:3a:3b:74:4e:1c:f2:14:0d:cb:43:1e:d6:7d:
                    67:a7:33:6d:27:56:95:c7:73:90:dd:ce:cb:0d:28:
                    47:ce:a1:2b:cc:ed:2b:76:49:a2:4f:5a:b3:7c:09:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:6F:31:52:D3:3D:DB:F1:5A:0B:71:C4:FB:68:B3:58:DB:A6:D3
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/78e7d089df861c60b7f99405d5449f1d53c364f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:28:c3:0d:d0:2b:fe:f8:74:92:06:bc:67:cd:15:d4:f9:
         8d:51:47:8d:07:d0:f4:cc:a8:d7:16:17:de:ff:65:0b:bf:40:
         e5:56:55:d4:d0:1d:c2:56:b4:0b:97:17:66:ef:7e:0c:e2:1e:
         bd:be:78:24:40:25:4c:98:6c:ad:95:ac:5d:4c:00:74:20:b4:
         b4:c4:6d:d5:6f:f8:75:d1:79:ac:3b:b0:62:b1:be:e4:89:1f:
         78:e9:51:c9:5e:ca:e5:97:39:eb:af:7b:24:70:6a:d8:b1:43:
         03:18:4b:82:be:64:37:67:68:5e:af:84:47:cc:af:7d:05:db:
         ed:ca:57:46:97:32:8e:0c:23:82:3c:2c:0d:89:dd:b2:60:e6:
         a1:c7:ec:77:6c:c1:f7:96:c1:87:fe:94:2d:c7:c1:17:e3:b5:
         12:86:a9:b5:be:37:18:0f:85:25:a0:83:b4:b1:6f:74:cf:a8:
         db:e3:62:ba:63:1c:c3:ca:d3:ae:47:3e:0c:c9:4c:27:95:a7:
         5d:74:b8:da:6c:26:94:e6:84:a8:2f:e9:78:2f:5c:d4:6d:a8:
         ff:0a:d8:95:70:84:8d:ac:18:83:c2:ad:0e:78:2d:09:de:dc:
         fb:fa:36:65:22:d9:e2:f7:64:62:a4:47:af:b6:bd:e5:79:61:
         89:c9:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org