Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/94fa7919aab522395310fca406e1f3a2756e9c21.roa
File:                     94fa7919aab522395310fca406e1f3a2756e9c21.roa (raw, json)
Hash identifier:          RMP1JgWvcErNEAUN/aQn4SvcY/8nj5ZjmziSTvvJX78=
Subject key identifier:   F1:88:D4:14:4E:97:1F:64:02:6C:58:28:A8:B4:64:B2:24:35:BF:9E
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       163587
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/94fa7919aab522395310fca406e1f3a2756e9c21.roa
Signing time:             Tue 15 Feb 2022 19:37:45 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     7922
IP address blocks:        181.214.198.0/24 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          191.101.187.0/24 maxlen: 24
                          181.214.78.0/23 maxlen: 24
                          181.214.84.0/23 maxlen: 24
                          181.215.252.0/23 maxlen: 24
                          181.214.53.0/24 maxlen: 24
                          181.214.143.0/24 maxlen: 24
                          181.214.146.0/24 maxlen: 24
                          181.214.216.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.214.0/24 maxlen: 24
                          191.101.30.0/23 maxlen: 24
                          191.101.202.0/23 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.67.0/24 maxlen: 24
                          191.96.94.0/24 maxlen: 24
                          191.96.108.0/24 maxlen: 24
                          191.96.122.0/24 maxlen: 24
                          191.96.134.0/24 maxlen: 24
                          191.96.154.0/24 maxlen: 24
                          191.96.167.0/24 maxlen: 24
                          191.96.168.0/24 maxlen: 24
                          191.96.206.0/24 maxlen: 24
                          191.101.161.0/24 maxlen: 24
                          191.101.167.0/24 maxlen: 24
                          191.101.183.0/24 maxlen: 24
                          191.101.254.0/24 maxlen: 24
                          181.215.244.0/23 maxlen: 24
                          191.101.194.0/23 maxlen: 24
                          191.96.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455495 (0x163587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=94fa7919aab522395310fca406e1f3a2756e9c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:ac:6c:48:d6:0a:93:9a:e8:3e:27:96:9b:
                    24:5f:29:c3:02:e4:33:a7:bd:64:30:c5:24:3e:b6:
                    33:43:0b:34:a1:31:a6:e9:aa:f9:75:e3:db:67:0e:
                    c6:bf:bb:04:02:72:82:c9:33:4d:8a:3f:b2:21:7e:
                    22:60:dd:cf:05:a3:36:90:05:e5:27:c6:ca:0c:20:
                    30:88:1f:98:97:c7:82:51:13:46:75:67:70:57:47:
                    21:24:73:ce:9a:2a:5d:c3:7a:15:c3:24:37:5e:e4:
                    02:34:e5:ad:c4:e4:3f:d1:37:37:b7:1e:96:e7:63:
                    0e:38:76:60:63:45:8c:df:2c:45:54:98:1d:a3:8e:
                    5e:1f:e1:68:db:4a:82:2a:d1:e8:08:f5:3a:71:c1:
                    2f:2e:73:a3:94:ec:b1:e5:ea:b4:63:ef:c7:7d:ae:
                    4a:64:74:d3:dd:d0:94:04:78:20:61:b4:fe:9e:a8:
                    32:7a:45:58:ec:3d:f0:13:2a:fa:82:47:cf:35:06:
                    ba:3d:4f:1d:c9:cb:7b:81:8e:e5:6e:43:80:3a:dc:
                    70:a0:e6:80:3e:b5:d8:2c:fd:ee:14:a6:f2:42:77:
                    35:41:30:e9:5c:4b:a5:a2:e6:54:aa:e1:fa:20:5b:
                    99:be:33:b5:05:cd:d1:28:ac:39:1e:79:ec:65:27:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:D4:14:4E:97:1F:64:02:6C:58:28:A8:B4:64:B2:24:35:BF:9E
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/94fa7919aab522395310fca406e1f3a2756e9c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.53.0/24
                  181.214.78.0/23
                  181.214.84.0/23
                  181.214.143.0/24
                  181.214.146.0/24
                  181.214.198.0/24
                  181.214.216.0/24
                  181.215.31.0/24
                  181.215.35.0/24
                  181.215.214.0/24
                  181.215.244.0/23
                  181.215.252.0/23
                  191.96.29.0/24
                  191.96.34.0/24
                  191.96.61.0/24
                  191.96.67.0/24
                  191.96.94.0/24
                  191.96.108.0/24
                  191.96.118.0/24
                  191.96.122.0/24
                  191.96.134.0/24
                  191.96.154.0/24
                  191.96.167.0-191.96.168.255
                  191.96.206.0/24
                  191.96.233.0/24
                  191.101.30.0/23
                  191.101.161.0/24
                  191.101.167.0/24
                  191.101.183.0/24
                  191.101.187.0/24
                  191.101.194.0/23
                  191.101.202.0/23
                  191.101.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:bd:62:77:72:b1:1d:03:44:a5:09:65:30:64:34:dc:26:
         f6:0e:30:78:b5:4b:2e:4d:65:48:33:08:4b:a3:e2:b9:66:cf:
         ef:57:32:ed:68:4f:dc:39:32:04:60:8b:9c:8a:f9:6e:ae:3b:
         2f:bb:4f:3d:66:30:c2:95:34:69:91:89:bb:ea:1e:44:fa:e5:
         84:8b:27:e9:7d:40:39:4c:c7:7f:68:ae:1a:fd:0d:f7:af:30:
         bd:59:65:f3:96:8b:96:51:ce:88:24:e1:b6:fd:7c:ea:38:22:
         d0:70:ab:96:8c:c1:61:7b:1d:74:fb:7b:da:5b:4d:88:77:be:
         e8:dc:1d:2c:03:2a:16:27:82:97:80:1c:ba:5b:f3:9e:89:7e:
         64:97:f5:29:92:01:05:f7:5f:c8:12:ec:31:cd:68:c9:5a:f1:
         37:86:ee:d4:de:65:a1:1a:90:ff:ac:2a:de:4b:43:cb:60:44:
         67:c6:bd:5d:5b:fb:3f:63:6d:e1:d7:db:68:43:8c:37:ea:50:
         02:63:26:c1:d1:ba:89:7c:26:d6:64:19:3d:7d:4a:df:1d:5f:
         14:70:33:57:f4:8b:48:ba:d0:02:be:b6:d4:32:89:44:47:7d:
         01:be:2b:17:28:3a:89:cc:43:32:12:a1:e7:3e:64:d0:c3:37:
         50:fa:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org