Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7f1448b0530aa8e55f8966941979107d63ff4c4f.roa
File:                     7f1448b0530aa8e55f8966941979107d63ff4c4f.roa (raw, json)
Hash identifier:          qRgZh5iKalSOsZDyHYU0/bTQ377eLY6cSwt4ZjY9MdI=
Subject key identifier:   F2:4C:47:D6:23:67:FF:76:1E:58:49:3A:2A:EC:3B:13:7D:5A:49:A6
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06B6DB
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7f1448b0530aa8e55f8966941979107d63ff4c4f.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     29854
IP address blocks:        191.96.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440027 (0x6b6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=7f1448b0530aa8e55f8966941979107d63ff4c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:36:80:75:a9:d0:49:a8:4f:58:2a:15:0c:
                    4b:33:68:fc:54:82:78:e2:c3:bc:e1:b6:c0:e6:e6:
                    66:af:25:65:4e:41:f6:1c:96:93:47:f5:26:15:b6:
                    32:b8:f3:7a:93:d3:0f:a0:c6:aa:71:e6:49:1a:3e:
                    08:01:ee:42:ce:5c:85:4d:e2:cb:fe:93:96:87:1d:
                    6b:41:a2:26:be:54:68:33:5c:07:f9:54:f7:03:f7:
                    11:25:44:cd:11:dd:ed:7c:00:80:a7:9d:c2:53:99:
                    8d:60:88:08:f7:9d:2e:cb:cf:c1:63:9a:aa:ba:3a:
                    41:6c:df:9d:ea:0d:4b:97:62:98:85:9b:43:29:af:
                    ce:6c:46:35:5e:62:c0:7b:92:de:78:c0:88:e0:80:
                    b1:70:e3:04:bb:64:26:15:4f:f6:e3:53:f5:6c:14:
                    d2:d1:aa:88:81:c3:76:a6:db:75:08:80:bd:09:e9:
                    3a:5e:66:52:bd:c6:7a:1a:04:2c:2b:3f:5c:8a:4c:
                    db:2a:bd:a4:9a:a4:ac:6c:16:b3:5c:db:bd:15:9f:
                    ba:e7:45:f7:f4:99:17:10:17:14:77:20:7b:69:4e:
                    f2:2d:fc:23:30:ce:75:8d:16:e3:86:c9:dc:0c:49:
                    99:be:4c:c1:bf:36:c1:2e:61:48:9e:c5:d8:5f:ac:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4C:47:D6:23:67:FF:76:1E:58:49:3A:2A:EC:3B:13:7D:5A:49:A6
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/7f1448b0530aa8e55f8966941979107d63ff4c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:70:b0:c7:40:37:fb:d7:0c:7f:22:db:42:40:23:61:e1:96:
         5d:a6:ee:48:c3:fd:e2:65:1d:9b:29:5f:d3:07:2c:df:66:b0:
         bc:15:83:7a:ee:f1:c2:e7:cf:69:25:62:57:10:f7:35:55:1d:
         1b:18:c6:f1:db:aa:94:b3:78:9a:7f:00:a9:53:b9:a9:ee:49:
         28:47:33:ba:62:cc:ea:11:2a:2e:e8:c4:b1:26:45:fd:35:7c:
         46:a2:02:c3:ee:ec:e2:3f:1d:1a:2a:cf:fc:f5:2b:bb:92:5b:
         02:41:88:64:e0:ff:4c:37:dd:64:f6:8d:b3:97:d4:f7:97:41:
         2f:66:2b:c2:61:67:94:d1:bd:eb:6d:c3:7c:6b:4e:17:79:8d:
         6b:c9:e7:f6:eb:10:37:0d:52:1b:03:9d:44:99:1d:9e:60:3f:
         12:ed:37:e1:1d:36:ef:16:6b:58:c9:79:97:25:37:15:19:c7:
         da:99:00:c7:74:8a:0e:70:cc:65:b3:e5:05:c8:82:38:ae:30:
         82:0e:18:9a:4d:cc:b3:2a:ed:c6:29:6a:70:27:e9:28:14:1b:
         da:11:83:85:85:6f:c3:57:e0:76:aa:3d:78:86:02:72:5f:3f:
         e2:2f:34:a4:9b:9b:c9:5f:6c:93:6d:63:84:6b:d8:ee:5b:78:
         ef:d0:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org