Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9339b3b1e0d4668b284cf97034ca9973f9470539.roa
File:                     9339b3b1e0d4668b284cf97034ca9973f9470539.roa (raw, json)
Hash identifier:          BwdA3t/41H8nioPMczhJEpiMnRFuC8Grl68UUmBrQ0E=
Subject key identifier:   4E:F5:64:8B:90:44:B7:25:2C:24:D5:DA:2E:78:09:5E:F0:A0:1D:34
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0C076A
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9339b3b1e0d4668b284cf97034ca9973f9470539.roa
Signing time:             Mon 02 Aug 2021 15:20:30 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Wed 02 Aug 2023 03:00:00 +0000
asID:                     26548
IP address blocks:        191.96.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788330 (0xc076a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Aug  2 03:00:00 2023 GMT
        Subject: CN=9339b3b1e0d4668b284cf97034ca9973f9470539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:0b:76:4f:33:bf:92:7e:09:25:2d:a4:ed:
                    74:b1:06:ad:e7:a7:23:61:09:f9:15:fd:30:59:48:
                    6d:9d:a9:46:51:52:c7:19:a7:03:2a:18:d1:a2:7e:
                    2b:35:7b:0f:b9:93:f0:b5:e0:cb:53:e7:4c:0f:01:
                    d3:26:a6:7b:f5:bb:2c:3c:ce:8f:47:2d:27:6b:99:
                    5f:d1:78:60:7d:8a:93:2d:f1:68:23:fc:fe:34:68:
                    02:23:bf:fe:49:ef:80:2f:30:ca:4e:88:32:9f:ab:
                    8e:4d:ee:2f:0d:5c:74:16:03:6d:ce:31:df:7a:32:
                    35:73:e2:30:aa:72:22:a6:30:28:e3:ed:d3:34:b1:
                    b0:3b:a7:8d:3a:86:84:db:fb:7b:e6:c6:95:6b:47:
                    b1:0f:aa:b6:79:a0:62:6b:2a:0f:f4:32:e0:86:d4:
                    94:d6:cf:cb:38:01:b6:43:1e:67:0a:11:48:8b:22:
                    9d:c4:8d:ed:7c:98:05:e6:fb:23:7f:b3:59:7f:c9:
                    98:8a:70:24:4c:76:39:be:6e:53:da:e3:e9:77:e9:
                    75:dd:4d:92:6e:80:b0:ac:1f:80:a6:c8:77:52:05:
                    7e:12:a7:ed:f9:bd:c7:a9:95:0f:d2:bc:79:b8:3b:
                    51:31:06:43:49:e5:a0:dc:9a:35:fe:b2:2d:45:49:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:64:8B:90:44:B7:25:2C:24:D5:DA:2E:78:09:5E:F0:A0:1D:34
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9339b3b1e0d4668b284cf97034ca9973f9470539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:46:65:ed:37:fd:2d:c2:f4:5b:03:c8:ee:20:79:78:74:
         7a:cd:2e:d8:fd:95:20:f8:49:6c:47:ed:7c:1c:c3:6f:5f:4b:
         78:57:c3:7a:e9:bd:07:79:78:e1:2c:b6:46:e8:73:57:ea:d3:
         b2:ef:82:f0:31:a4:0c:d5:7d:19:b3:df:ba:43:31:47:4c:70:
         3e:b5:31:64:1f:82:ea:5a:63:83:75:6b:d6:1a:d5:fd:c3:04:
         ef:73:bd:b8:b4:5e:21:a6:ad:a3:84:b3:52:8b:50:37:c1:04:
         f5:c5:e7:b0:4c:6f:3a:c9:37:fa:ef:8a:16:8e:2a:65:16:d0:
         64:5b:e1:e9:2a:79:05:d1:42:85:80:60:21:ab:38:08:37:53:
         10:35:4a:4d:d9:ad:60:a8:9c:33:ca:a6:7a:70:96:bd:c7:3a:
         fd:c6:b4:1d:4f:88:26:44:96:06:d3:82:9c:b0:51:04:b4:92:
         d4:8f:28:40:84:20:e9:3e:e7:9e:97:52:18:50:1b:96:42:7f:
         d4:45:e0:33:9a:5a:2a:37:eb:63:1e:24:86:ca:3e:45:cd:69:
         70:31:55:75:7d:a8:79:70:bc:a8:fa:e8:2d:ad:f1:53:fb:15:
         09:15:3c:09:81:8b:f4:a5:cd:67:6f:b5:5e:fa:7e:ad:e6:62:
         0c:fb:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org