Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/902d9ad7b9da4910655537f696bad81adeabb23d.roa
File:                     902d9ad7b9da4910655537f696bad81adeabb23d.roa (raw, json)
Hash identifier:          6ZJb3BkdRsT3OYaUs6n9ku1Y/8Fcf3w42E9aKw/PGqo=
Subject key identifier:   88:A7:D1:E0:60:E9:57:26:F9:55:92:5D:E0:58:90:3E:4E:0C:9C:79
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       13C5B2
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/902d9ad7b9da4910655537f696bad81adeabb23d.roa
Signing time:             Thu 06 Jan 2022 19:14:48 +0000
ROA not before:           Sat 30 Oct 2021 03:00:00 +0000
ROA not after:            Mon 30 Oct 2023 03:00:00 +0000
asID:                     139660
IP address blocks:        181.214.197.0/24 maxlen: 24
                          191.96.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295794 (0x13c5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 30 03:00:00 2021 GMT
            Not After : Oct 30 03:00:00 2023 GMT
        Subject: CN=902d9ad7b9da4910655537f696bad81adeabb23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:fc:7c:d4:73:87:e0:6c:22:0a:db:e2:b9:
                    f8:2f:e8:f8:40:9a:9c:f2:c6:5d:c5:f9:48:b6:2e:
                    24:fa:cc:06:4b:94:61:d1:63:9d:bd:dc:33:bd:d6:
                    46:b5:c6:5f:ed:e9:02:f6:bd:33:28:25:42:6e:b4:
                    ef:a0:a8:e4:e0:cd:d8:de:81:5c:fb:21:2b:fb:fb:
                    b3:af:60:5d:b7:bd:62:f9:fb:72:96:62:25:de:d6:
                    6b:af:e8:e8:53:ae:c5:60:74:88:10:82:e3:59:93:
                    bf:f1:f3:c9:e8:c3:f5:ae:07:6e:02:9d:d4:3a:f6:
                    33:2f:26:e2:db:6e:2c:b4:4b:52:ba:cf:e9:06:b3:
                    fb:85:87:38:14:8f:68:77:c8:5f:34:dd:0d:5b:3f:
                    d3:01:a6:d5:9d:f5:d6:65:8c:32:93:2e:d6:5c:f3:
                    de:0c:f4:ee:2e:96:62:71:a6:1c:75:36:25:62:46:
                    94:92:b4:58:7d:8f:d9:a5:7a:42:60:fe:d4:15:34:
                    af:13:a1:d2:05:b6:00:78:b4:6b:4f:75:ae:17:e1:
                    a6:ea:60:38:b9:3f:56:b7:4a:90:f3:5e:54:53:5e:
                    c4:6c:06:2c:2f:be:90:2d:b9:48:79:43:e8:d8:1a:
                    4f:cf:52:1c:2b:e9:49:d3:e1:ce:c3:e3:ec:4f:b3:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:D1:E0:60:E9:57:26:F9:55:92:5D:E0:58:90:3E:4E:0C:9C:79
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/902d9ad7b9da4910655537f696bad81adeabb23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.197.0/24
                  191.96.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4f:2c:aa:51:32:96:22:35:f6:a6:45:ac:99:52:32:df:6c:
         94:7d:eb:36:9e:72:4b:ca:24:b6:1e:1f:d9:44:77:88:f5:cb:
         2c:6d:7b:6b:ac:cc:d6:28:11:8b:25:1d:d0:bb:52:c9:a0:55:
         9e:c1:44:dd:bf:dd:7d:62:2f:7a:45:54:90:d6:2a:56:3d:01:
         9b:43:f7:e4:0f:0a:d2:10:4f:9a:35:c2:e4:13:fe:c3:29:c6:
         8b:3c:55:3d:fa:08:44:28:2c:d9:b1:6b:a8:53:91:b4:b2:01:
         e5:e3:58:5c:58:4e:05:81:42:0c:2b:6a:98:0d:81:bb:5a:31:
         17:2d:65:96:4f:c1:11:d0:8d:b3:e1:68:66:0b:a1:37:8b:90:
         39:4a:20:94:af:25:10:91:19:0c:39:8f:99:52:6a:23:98:a9:
         73:49:9a:9d:2b:cf:2c:53:3f:ae:1d:df:25:ed:4b:32:11:bf:
         5f:85:1e:91:7f:4b:6a:44:c1:2b:32:82:82:01:fc:e7:76:24:
         ef:bf:53:64:fb:12:11:e1:00:7b:a9:72:2b:95:0a:3c:e9:b2:
         44:c1:5e:0e:4b:28:7c:62:2b:48:a7:de:81:67:d0:31:74:d9:
         6d:ca:a0:c7:6c:1c:69:2f:db:79:ec:7f:42:89:84:fe:d6:34:
         04:e9:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org