Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/80918139be0c27942271f6d5829430c431e234ed.roa
File:                     80918139be0c27942271f6d5829430c431e234ed.roa (raw, json)
Hash identifier:          3moWCWHaSj7vnT3t42wKkvOmT9aqYUEJscbb+4e5okg=
Subject key identifier:   3C:62:07:9F:2A:A0:5E:33:52:79:25:BA:22:17:71:4C:B9:E3:3C:D0
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0831CC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/80918139be0c27942271f6d5829430c431e234ed.roa
Signing time:             Sat 17 Apr 2021 12:58:33 +0000
ROA not before:           Sat 17 Apr 2021 03:00:00 +0000
ROA not after:            Sun 17 Apr 2022 03:00:00 +0000
asID:                     270014
IP address blocks:        191.96.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537036 (0x831cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Apr 17 03:00:00 2021 GMT
            Not After : Apr 17 03:00:00 2022 GMT
        Subject: CN=80918139be0c27942271f6d5829430c431e234ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:83:eb:20:f8:33:1f:8b:56:a1:be:30:2a:
                    bb:c0:60:4d:14:36:13:6e:d3:8f:39:e7:c6:4c:16:
                    e5:1d:f8:86:e9:f1:4d:c7:ad:e6:55:3a:b2:92:b0:
                    30:b6:80:e6:f3:29:d5:18:ad:53:20:76:5d:b1:0c:
                    45:de:26:bf:97:a9:68:b4:c4:58:5c:f7:67:3a:e5:
                    4d:cd:31:15:e6:09:3c:f0:90:cf:f7:fb:0e:ba:d7:
                    2d:3e:2c:59:12:f5:81:59:c0:6e:5f:29:b1:3b:02:
                    76:b1:10:b6:4c:14:9f:3c:56:1a:7e:80:98:c0:59:
                    ca:25:cd:f2:e3:f1:c7:22:a6:e2:62:13:34:9f:0c:
                    12:10:ec:d5:5b:90:1e:59:6a:a6:eb:22:b8:43:7e:
                    7c:4c:28:62:72:69:34:70:70:5c:47:45:34:78:ca:
                    a1:11:81:00:f9:45:08:66:12:2e:e7:83:64:b3:df:
                    60:60:18:1c:6e:54:42:b9:94:df:ad:12:c8:9f:3a:
                    8e:34:38:4b:cc:63:17:36:24:13:a9:80:f0:48:a6:
                    f2:44:09:19:a8:ce:ea:c0:ad:45:22:67:52:51:fc:
                    d3:f5:1b:8b:8f:32:3c:e1:40:a1:5d:de:88:19:46:
                    5a:8c:77:db:20:f8:2b:19:01:83:b1:13:23:5d:00:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:62:07:9F:2A:A0:5E:33:52:79:25:BA:22:17:71:4C:B9:E3:3C:D0
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/80918139be0c27942271f6d5829430c431e234ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:82:78:90:c1:54:63:6e:b1:f0:b1:c0:f9:4a:04:6e:09:54:
         56:4d:22:8a:de:c5:7e:f7:cb:12:37:4e:5c:15:10:39:1f:33:
         54:8c:08:75:8c:9b:d6:4e:75:e2:b2:c0:01:bd:de:93:df:24:
         a7:02:a0:29:f2:43:ad:15:e2:c6:92:4e:62:27:da:4d:ad:52:
         68:b9:b2:2d:15:ed:98:6e:3a:fc:8d:88:f2:ee:ea:07:d1:6b:
         67:01:7b:a2:77:42:1f:e5:70:5f:f5:43:98:9e:21:31:32:df:
         e4:2c:16:e3:d0:fd:45:65:52:c8:53:e5:3a:dc:18:db:77:83:
         95:5a:95:4b:ab:01:4a:03:c5:96:4b:93:83:1d:7c:ed:86:26:
         11:ab:78:d8:f5:78:fb:10:9a:12:32:c6:d6:8b:6a:47:7a:64:
         03:ab:09:0c:56:91:9e:26:50:b3:ad:06:c8:44:e2:ea:f1:e0:
         85:8f:b5:9f:03:19:9d:86:35:ca:54:5e:07:d5:da:d6:17:e6:
         2b:1e:d3:9c:55:39:b1:4c:98:1e:5f:76:d4:b4:20:16:db:36:
         78:b5:43:a4:47:2d:ec:8a:71:60:f9:ce:22:cc:6f:53:dd:e5:
         b3:56:30:38:86:1d:00:ab:55:64:a3:04:4a:05:b9:f6:3a:13:
         de:10:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org