Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7a8174e1c03774b1d53256d150903149d8331a8c.roa
File:                     7a8174e1c03774b1d53256d150903149d8331a8c.roa (raw, json)
Hash identifier:          Uf/lQEFvE3A5KwfXFd8DNdsT9fC+ya8J50Poa+4Ldvk=
Subject key identifier:   A7:37:A1:7C:F2:3A:C8:90:B4:B6:7C:A4:1E:ED:6E:E8:CD:AA:EB:1D
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       075765
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7a8174e1c03774b1d53256d150903149d8331a8c.roa
Signing time:             Tue 30 Mar 2021 21:32:45 +0000
ROA not before:           Tue 30 Mar 2021 03:00:00 +0000
ROA not after:            Thu 30 Mar 2023 03:00:00 +0000
asID:                     54138
IP address blocks:        191.101.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481125 (0x75765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 30 03:00:00 2021 GMT
            Not After : Mar 30 03:00:00 2023 GMT
        Subject: CN=7a8174e1c03774b1d53256d150903149d8331a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:55:51:04:d5:fc:c9:c9:12:bc:4f:c2:17:
                    fc:68:6d:ac:f9:a9:71:51:6e:92:44:50:c6:20:c8:
                    aa:3d:88:43:c4:84:42:ae:07:19:2d:0e:d8:8b:f6:
                    4d:9c:63:f6:7c:89:24:9d:e0:22:79:6f:d6:2f:27:
                    25:83:ad:c8:06:16:99:cc:e1:de:cd:69:d8:52:3a:
                    99:8a:db:5d:cd:ca:c3:ed:47:40:67:6f:88:2d:74:
                    89:f5:e1:bd:dd:49:a4:91:f8:6c:6d:87:4b:14:d4:
                    b8:d0:a1:50:f4:cc:ab:17:4c:31:43:91:5b:1e:36:
                    0b:78:3d:0e:74:88:e0:4d:c6:bd:a9:b1:e8:b7:db:
                    b2:86:01:19:24:6b:ab:a1:08:65:77:ea:f8:86:6a:
                    7c:31:ba:8e:d2:95:39:bd:17:0a:57:17:9c:50:f5:
                    72:1f:eb:76:ae:fb:87:76:91:ee:e0:60:d5:ae:6d:
                    08:0d:20:00:5f:de:82:d2:7d:a2:f3:89:6d:4c:bb:
                    fd:6a:35:74:03:86:62:66:41:69:70:35:a7:27:f4:
                    db:33:7b:70:ac:f3:e4:47:51:a7:74:d7:15:27:8c:
                    e9:d6:f8:e2:9a:49:d0:d2:a4:1c:91:12:3c:10:5c:
                    d5:a3:9f:c4:04:69:f3:83:a7:48:70:2f:46:e5:ff:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:37:A1:7C:F2:3A:C8:90:B4:B6:7C:A4:1E:ED:6E:E8:CD:AA:EB:1D
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7a8174e1c03774b1d53256d150903149d8331a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:25:c5:2e:65:45:91:05:2e:67:97:f6:41:2c:6c:43:ba:
         6c:7e:71:a8:43:24:f9:9e:e4:12:38:0d:62:55:25:17:ed:1f:
         0a:3c:b0:34:03:0f:94:28:c5:fa:f8:50:34:c9:29:e5:40:6d:
         f0:7e:59:a6:24:f7:1d:17:9a:80:64:85:e7:e0:b8:c4:8a:3d:
         2c:90:b6:81:08:b0:35:b2:f4:91:84:4e:b4:68:73:bd:e5:f6:
         58:7f:1a:25:55:de:26:4a:89:f7:e9:67:b9:34:68:95:e9:68:
         6f:86:14:7a:3e:a0:8a:27:38:0b:b3:6e:06:74:b0:a9:90:1a:
         bf:5e:0d:af:60:aa:99:83:58:e2:36:2c:ea:9a:46:91:44:42:
         c1:1d:9f:00:e1:6d:48:7e:83:6c:80:5a:42:f1:7c:60:1f:46:
         9c:64:ed:30:ea:42:e7:c5:46:3e:54:d6:bd:c4:34:f7:2f:e8:
         1f:2f:47:b2:8e:b5:8b:26:b3:4e:47:c3:5c:16:a4:c7:10:01:
         61:32:42:04:f2:c3:d1:2b:0b:4a:7b:1d:88:d7:b3:92:d5:de:
         93:c9:c4:92:d1:83:8d:e2:4a:05:3a:02:9a:4c:b3:3f:ed:2c:
         01:02:e5:0f:3d:c9:c1:5d:f6:92:c7:bd:cf:f9:8e:5c:da:34:
         62:07:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org