Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8ee53d4fff53ae545117b30db9442a2efd690e5f.roa
File:                     8ee53d4fff53ae545117b30db9442a2efd690e5f.roa (raw, json)
Hash identifier:          HxctjeYc8tkPTvpJq9YsHhUTkDhhxXQX/rz8RwZA0oM=
Subject key identifier:   3C:5F:41:ED:A5:28:CF:BC:FF:D7:CA:BF:90:98:83:17:BD:14:A1:D5
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0B0E6D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8ee53d4fff53ae545117b30db9442a2efd690e5f.roa
Signing time:             Wed 07 Jul 2021 14:33:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     9009
IP address blocks:        191.101.41.0/24 maxlen: 24
                          181.214.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724589 (0xb0e6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8ee53d4fff53ae545117b30db9442a2efd690e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:90:ed:37:08:6c:df:7a:20:f8:ea:4f:02:
                    11:fb:23:be:42:bb:7b:90:52:8c:4d:8a:a9:0a:9f:
                    3d:41:1c:0b:a5:cb:25:e5:e0:60:43:07:c9:30:3d:
                    4e:9f:61:49:64:f8:37:72:12:a3:87:7d:d5:b7:cb:
                    80:14:db:cf:19:30:86:6c:58:3d:67:ff:fa:ae:9d:
                    4c:0a:65:cd:4e:e8:ac:39:58:4c:24:04:d2:c4:4a:
                    26:4f:72:d6:c1:68:4a:d1:12:e5:b7:b8:c6:f2:bc:
                    53:a9:88:a8:b5:aa:9f:30:2c:86:82:64:aa:2f:e6:
                    48:7a:f8:b7:df:64:b8:5d:ea:49:93:27:45:37:92:
                    55:c4:7b:63:66:19:fc:2a:66:42:8a:65:3b:e5:55:
                    37:a4:24:72:d7:d2:4b:12:eb:85:54:c5:73:7f:fa:
                    a9:18:65:09:15:83:80:d4:63:9e:3c:bf:95:25:36:
                    c4:ef:a0:d7:62:f1:5d:48:02:16:a5:34:5f:fd:de:
                    d6:92:70:af:6c:50:dc:48:af:51:d3:39:30:b4:c7:
                    e0:32:d9:49:54:a7:71:ae:ea:47:4d:1d:b3:e0:52:
                    15:4d:c9:b9:66:70:80:87:e7:39:18:5c:ff:d2:49:
                    8f:a9:66:2b:d0:f0:a2:ed:a0:6a:9d:8d:c6:12:e8:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:41:ED:A5:28:CF:BC:FF:D7:CA:BF:90:98:83:17:BD:14:A1:D5
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8ee53d4fff53ae545117b30db9442a2efd690e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.55.0/24
                  191.101.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:ec:dd:15:21:32:32:31:c0:c1:f4:a5:bc:84:ed:e2:eb:
         db:e7:2b:50:c4:ab:5f:62:c1:c0:34:01:ee:89:04:4d:a2:e4:
         e5:b3:01:eb:a9:73:29:aa:22:6f:f8:76:19:69:bf:95:35:11:
         30:3a:89:3d:9e:98:f0:96:d1:f2:62:d1:34:4a:56:e2:36:fb:
         53:f3:46:cb:b7:3b:18:13:59:49:8d:83:64:16:0b:c1:7d:ac:
         f1:4a:02:dc:d4:20:a9:fa:94:0e:c2:64:46:97:d4:f8:35:24:
         9b:bd:8c:a9:0a:82:ca:2d:bd:2e:2a:26:90:e5:d0:4f:ae:cd:
         01:46:31:30:22:bd:e8:a2:6d:5d:af:74:ba:3b:33:10:bf:8e:
         b3:a1:ad:1e:23:2c:ec:a8:fc:23:8b:a1:06:65:80:6f:30:33:
         9c:ce:8c:73:ec:29:e8:c7:d3:9e:45:9d:0a:97:85:31:15:f4:
         36:04:69:fb:e9:71:8e:ec:0f:a0:83:e8:8e:42:f6:81:35:43:
         bd:8d:4e:25:be:db:03:74:f1:ae:7d:26:f8:d5:06:d7:a0:17:
         a1:28:cf:2c:ee:b5:16:84:62:2f:b4:4a:13:58:fe:77:f4:ab:
         8b:e4:aa:c0:f1:e5:f8:d7:f2:45:8e:b6:5a:6b:6d:90:5e:27:
         b5:dd:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org