Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8b78cd05e2c4b2c80be19ac56e884f063db8f267.roa
File:                     8b78cd05e2c4b2c80be19ac56e884f063db8f267.roa (raw, json)
Hash identifier:          pKEXClsqMcbxIP/wKIMa5TzLxCAuwEUE6x0sv2T2Ogk=
Subject key identifier:   70:A2:80:BC:94:EC:64:99:CD:DC:D7:6E:F0:BD:FF:4F:08:0E:16:B1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1419C0
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8b78cd05e2c4b2c80be19ac56e884f063db8f267.roa
Signing time:             Wed 12 Jan 2022 20:37:37 +0000
ROA not before:           Thu 30 Dec 2021 03:00:00 +0000
ROA not after:            Sat 30 Dec 2023 03:00:00 +0000
asID:                     54252
IP address blocks:        181.214.220.0/24 maxlen: 24
                          181.214.232.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.73.0/24 maxlen: 24
                          181.214.105.0/24 maxlen: 24
                          181.215.190.0/24 maxlen: 24
                          181.214.250.0/24 maxlen: 24
                          191.101.223.0/24 maxlen: 24
                          181.215.219.0/24 maxlen: 24
                          181.215.174.0/24 maxlen: 24
                          181.215.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317312 (0x1419c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Dec 30 03:00:00 2021 GMT
            Not After : Dec 30 03:00:00 2023 GMT
        Subject: CN=8b78cd05e2c4b2c80be19ac56e884f063db8f267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:07:da:86:68:ab:02:09:47:9f:45:00:fc:
                    62:c5:d3:f0:68:e4:e7:a2:6c:e7:3e:bd:15:97:5a:
                    04:fc:c1:08:fb:df:32:7b:59:dd:d8:6f:d7:9a:c5:
                    38:aa:1d:c0:ad:a6:f8:62:a2:bb:0b:f1:f0:b9:5b:
                    40:61:fa:c1:7d:ab:d6:c8:0d:e6:a2:b4:db:60:a4:
                    b7:a1:62:17:2c:5d:ed:8c:07:5b:bf:b4:36:76:d8:
                    96:5f:1f:ec:7a:54:9b:89:cb:1e:0f:42:6d:bd:98:
                    75:14:ae:e2:97:31:ee:2f:7d:1a:06:e7:1e:08:7f:
                    71:97:93:ec:bf:99:f1:09:17:44:3a:17:f9:14:7d:
                    f8:4f:34:af:a5:fd:49:a1:39:39:ce:7e:ab:a4:3e:
                    a3:dc:dd:a9:54:18:e4:d1:f5:ac:02:98:9d:ba:8f:
                    2f:4a:08:a8:8d:fd:09:ac:f4:ed:29:b3:d2:f2:84:
                    00:25:8a:7c:74:1e:a3:10:66:9c:13:de:e9:12:cf:
                    a8:7e:0d:f5:f4:da:cd:3a:f0:e1:ab:64:36:88:02:
                    08:34:39:e2:a9:7a:27:03:4b:3c:2d:5c:25:67:b6:
                    f7:d2:89:c7:e4:65:1a:d9:59:81:05:e2:ca:82:ad:
                    59:cd:74:b6:a8:19:50:5a:b8:8f:62:4b:66:fc:2e:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A2:80:BC:94:EC:64:99:CD:DC:D7:6E:F0:BD:FF:4F:08:0E:16:B1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8b78cd05e2c4b2c80be19ac56e884f063db8f267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.105.0/24
                  181.214.220.0/24
                  181.214.232.0/24
                  181.214.250.0/24
                  181.215.35.0/24
                  181.215.73.0/24
                  181.215.174.0/24
                  181.215.190.0/24
                  181.215.208.0/24
                  181.215.219.0/24
                  191.101.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:ef:90:df:3d:98:a0:3e:b6:7a:1a:9d:0f:d5:27:28:16:
         61:cb:0b:e1:32:f8:a9:95:10:36:ce:45:11:f5:92:cd:82:1b:
         50:d3:33:0a:d8:f1:a6:d6:26:9d:cc:53:85:2f:0b:86:4a:5f:
         27:c9:3d:8f:a8:74:f8:86:d4:12:84:6f:b3:28:17:e0:a4:a7:
         b8:c3:7d:2a:84:a7:a5:c9:27:de:1a:bb:6c:50:95:cc:bf:57:
         c4:70:36:75:83:85:23:7a:71:90:d9:f9:6f:8c:73:b4:f5:3c:
         72:1e:80:5b:77:06:08:97:56:4c:73:ae:7b:50:43:ec:c8:76:
         be:a0:92:98:ff:0a:6c:a7:40:f7:47:01:10:cf:45:79:e2:f2:
         ab:6e:48:cf:82:17:6c:7d:4e:0d:63:fa:d1:d0:2d:4c:0b:5d:
         bb:e3:2f:21:f3:71:f0:e2:0b:67:9b:3d:11:25:aa:e9:a2:36:
         b7:da:a2:4f:98:b7:ca:d3:23:01:34:8c:31:e5:cd:bc:80:cc:
         56:1a:1e:f2:24:44:c0:57:58:d7:14:20:bf:d0:cf:2d:40:a8:
         e4:1c:c6:fd:cc:2d:75:8d:34:ba:5a:c4:49:ae:59:8f:d1:71:
         79:e1:f0:21:82:67:f3:1d:a7:dc:b6:83:99:df:4d:9d:09:52:
         62:72:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org