Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/918319b5950a5d252060883cdf920fb5f00ad923.roa
File:                     918319b5950a5d252060883cdf920fb5f00ad923.roa (raw, json)
Hash identifier:          6oSfYQ/1QX9dHszYD+Qvhdvakgru/eTJH+HVXWn49xU=
Subject key identifier:   39:82:D9:16:5E:CD:94:4C:B4:6C:42:46:41:79:6A:7E:A7:02:8B:88
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1072BB
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/918319b5950a5d252060883cdf920fb5f00ad923.roa
Signing time:             Mon 01 Nov 2021 04:54:18 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Wed 01 Nov 2023 03:00:00 +0000
asID:                     64134
IP address blocks:        191.101.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077947 (0x1072bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2023 GMT
        Subject: CN=918319b5950a5d252060883cdf920fb5f00ad923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:03:69:01:bd:5b:b5:7f:f9:9c:ea:fb:62:
                    49:51:a7:e4:5d:80:aa:8c:7e:b1:fa:48:64:e8:61:
                    9b:3e:87:9f:cb:52:54:8e:32:55:f2:99:4d:c4:76:
                    de:34:d7:0a:d9:d0:b2:56:b4:9b:91:3a:0b:fc:e6:
                    f1:1f:a5:a9:bc:75:20:22:08:53:e1:62:3f:ac:7a:
                    c5:9a:77:ef:6b:1a:34:b7:2e:58:7f:8c:f1:8c:b1:
                    b7:57:39:a1:43:ab:9f:40:33:5b:5d:1b:45:69:2b:
                    7f:c2:b7:1d:19:35:b7:d6:e8:70:8a:98:de:8e:15:
                    f6:76:03:f2:11:77:33:e2:6c:c1:5b:8f:f5:9e:80:
                    88:60:f9:3f:64:a8:ae:52:67:45:27:5f:7f:93:82:
                    a1:a1:ac:f0:f7:0b:ca:52:9a:b5:e1:6d:5a:d2:e8:
                    3d:d6:98:20:50:77:df:ac:9b:98:4b:78:64:bd:c9:
                    dc:91:27:c6:6e:7a:c3:8d:b9:ca:da:6a:be:f9:33:
                    ea:53:7d:1f:10:eb:32:4f:d1:74:b4:08:a5:8f:f6:
                    63:6e:41:84:b5:bb:75:4b:0a:1b:ae:5c:ad:aa:53:
                    67:7c:bf:7d:90:d4:dc:85:47:27:62:4b:74:13:d7:
                    d7:08:12:c7:85:98:4d:87:4d:97:3f:9c:7c:b2:64:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:82:D9:16:5E:CD:94:4C:B4:6C:42:46:41:79:6A:7E:A7:02:8B:88
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/918319b5950a5d252060883cdf920fb5f00ad923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:d4:36:e5:97:8b:80:90:39:97:32:20:76:6e:ea:28:c4:
         66:3d:5a:c1:21:67:5b:36:b8:00:7c:9b:7b:ad:f3:42:8b:71:
         03:40:3e:28:70:b5:80:b8:0c:b4:7c:e7:10:da:59:39:db:24:
         10:82:0d:3c:e5:c8:a3:55:ad:c1:b8:d6:f4:c8:5d:1f:ba:cf:
         7f:2a:1a:62:ec:96:80:3f:4a:fe:b6:9e:65:01:0b:4c:07:8f:
         d7:e6:c7:30:8a:61:80:9f:fa:74:03:54:d3:87:b4:16:8b:c4:
         d5:ac:1f:5a:2d:80:e6:d0:0a:c8:98:4a:25:b0:be:9e:8e:e3:
         c7:cc:33:95:2b:47:a5:1f:c8:05:1e:65:77:e5:9a:8b:16:dd:
         3c:80:1a:76:79:e6:14:fb:74:9e:94:9b:f1:74:aa:7c:6f:35:
         36:f1:07:a0:9c:14:45:44:1a:8e:76:95:3c:59:53:94:44:c7:
         6e:a8:dc:4a:7c:12:29:30:02:ce:54:3c:0b:47:16:16:9c:13:
         6e:1b:6b:46:c4:a9:15:51:db:32:19:0a:ed:52:d9:0b:30:86:
         d9:a3:25:c1:33:52:d2:d4:ea:99:e6:01:6e:fc:1f:d0:d2:de:
         0f:cd:7b:7c:e0:ec:ab:7b:d3:02:de:14:92:b5:8d:68:97:51:
         02:9a:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org