Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7cf68523ca5f6eaa892dc64fbc5f51126dac44b7.roa
File:                     7cf68523ca5f6eaa892dc64fbc5f51126dac44b7.roa (raw, json)
Hash identifier:          t6dYuJKzG+PnoaIryDqm4n8AFwLgFq/pIQSrO5LsuGQ=
Subject key identifier:   61:F7:38:F3:CB:6D:2C:48:EB:04:A8:D9:FD:D7:F7:65:C6:20:3F:DB
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0E7C00
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7cf68523ca5f6eaa892dc64fbc5f51126dac44b7.roa
Signing time:             Mon 27 Sep 2021 17:47:39 +0000
ROA not before:           Mon 27 Sep 2021 03:00:00 +0000
ROA not after:            Wed 27 Sep 2023 03:00:00 +0000
asID:                     272160
IP address blocks:        181.214.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949248 (0xe7c00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 27 03:00:00 2021 GMT
            Not After : Sep 27 03:00:00 2023 GMT
        Subject: CN=7cf68523ca5f6eaa892dc64fbc5f51126dac44b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:42:8f:02:5e:d8:b4:07:4e:59:98:96:3c:
                    73:16:21:61:58:31:80:39:70:86:6b:cc:17:53:23:
                    4f:47:d0:92:6f:19:bb:df:e6:e0:9c:e5:f4:f2:42:
                    c9:5b:f3:3f:fc:01:f8:16:89:be:71:5e:1f:a3:af:
                    18:14:e1:12:00:c4:00:52:5c:14:ad:3c:59:ae:04:
                    5d:13:34:61:9e:1d:fc:16:ed:32:e5:87:e8:c9:88:
                    36:95:f3:28:c3:31:8e:f2:45:70:97:3c:4c:ce:8e:
                    06:28:a9:70:e6:54:21:d2:30:36:da:cc:f2:43:62:
                    5e:5a:67:e4:25:d1:05:31:80:01:54:57:76:c5:8a:
                    2a:c8:b2:14:42:e0:8d:29:6b:d1:36:c6:93:9f:33:
                    74:9f:82:1a:81:95:45:6a:7d:57:eb:5b:38:4c:7f:
                    ee:dd:c6:af:ab:dd:89:44:54:05:7b:74:12:dd:8a:
                    cf:4b:3c:a0:dd:d5:14:a8:84:68:da:9e:f0:2a:bc:
                    ea:69:9d:a4:3f:2f:df:e3:b5:34:2a:62:60:01:fa:
                    2b:3f:43:3c:be:37:df:ef:a6:7b:8d:e4:21:0c:fc:
                    80:bd:1a:72:44:59:01:d0:d1:49:84:89:5e:c6:ef:
                    da:4b:87:00:c5:be:95:5c:aa:39:c8:29:f0:bf:87:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:38:F3:CB:6D:2C:48:EB:04:A8:D9:FD:D7:F7:65:C6:20:3F:DB
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7cf68523ca5f6eaa892dc64fbc5f51126dac44b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:bc:74:e9:83:28:a3:dd:6b:55:10:d2:3a:18:e1:cf:6d:
         b7:4d:50:35:dc:00:1e:83:3a:61:84:e3:27:79:2c:cc:96:e5:
         0b:12:f0:15:46:99:ef:e0:b2:d4:86:2e:3d:a7:9c:dd:26:83:
         76:63:8d:c0:85:ed:3f:a1:8b:af:c9:cd:12:77:ca:cb:cf:15:
         b7:61:b9:cf:1f:c8:c0:ab:83:84:f2:2c:6e:a5:9f:e4:54:dc:
         69:0b:74:43:40:2c:6e:22:2e:16:00:e1:36:98:62:f8:78:cc:
         8b:51:3c:8b:87:3c:c1:56:66:c2:82:4a:8a:12:cb:51:83:c6:
         81:59:1a:38:ad:13:07:19:6f:a8:50:de:b8:e3:dd:30:01:23:
         7b:3b:32:5b:3f:12:6f:8c:d8:a1:e1:75:72:ed:6a:1a:82:db:
         53:18:a9:f6:5e:fb:ee:1e:8e:c8:bb:7f:f7:f0:8f:24:63:18:
         06:4e:1d:44:94:08:01:52:51:c8:03:b1:23:26:54:b8:71:d5:
         04:80:8f:7d:80:10:6b:66:5d:7c:5c:93:de:a8:d0:54:40:70:
         fd:e1:fd:79:de:c1:62:e8:91:b7:04:43:69:35:4e:69:7c:8a:
         fa:53:04:a9:2a:05:db:b8:b3:62:58:d7:f9:78:bd:b8:31:ad:
         f1:fa:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org