Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9a4e6653b8f510ee23aaa719c18f560f53bbe545.roa
File:                     9a4e6653b8f510ee23aaa719c18f560f53bbe545.roa (raw, json)
Hash identifier:          0eoMw6s6chOQbzN/hgqBN7fS5bQtw6+ZMQbAn6UoUYA=
Subject key identifier:   1E:09:19:52:BB:B4:91:2D:10:D4:5A:78:0C:6C:63:15:92:EF:21:D1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       143749
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9a4e6653b8f510ee23aaa719c18f560f53bbe545.roa
Signing time:             Thu 13 Jan 2022 15:27:10 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     50588
IP address blocks:        181.214.72.0/22 maxlen: 24
                          191.96.112.0/22 maxlen: 24
                          191.101.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324873 (0x143749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9a4e6653b8f510ee23aaa719c18f560f53bbe545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:e5:9c:45:14:4b:0a:fd:84:20:43:b8:6c:
                    ed:89:9d:f2:a9:d3:fa:af:0b:13:49:d3:f7:1b:4a:
                    fd:81:e1:26:ac:c7:41:81:ee:ab:0b:97:08:13:ef:
                    ff:60:3f:dc:2b:e6:cc:86:45:63:16:9d:83:36:41:
                    f7:d7:e2:ba:8b:c1:6a:f4:16:e5:d8:49:c3:7e:bd:
                    59:98:2e:c8:27:ed:cf:85:f2:1a:8d:dd:bb:ca:41:
                    5f:22:0b:a8:08:43:3d:a6:77:d5:b6:92:9b:80:58:
                    c7:0d:e7:e9:4a:83:8d:ff:e4:97:02:9d:e9:40:ae:
                    c9:13:30:3e:1e:31:62:b5:b7:9e:e0:09:ad:e3:16:
                    9e:fb:7b:fa:78:4a:0a:c2:d1:25:d6:49:8b:e7:39:
                    35:2e:47:ba:72:aa:f7:69:88:1c:07:f2:33:ed:a2:
                    4d:8e:88:98:c7:b5:d5:29:0a:f5:d3:a4:92:a1:4a:
                    00:61:03:67:de:60:1c:f9:4e:a5:59:44:fe:5b:9f:
                    23:78:0d:e6:98:9e:52:21:d2:2d:3a:b2:72:8c:d1:
                    0a:64:26:9a:b6:06:9f:55:67:9e:02:1d:5e:e9:66:
                    60:45:62:c8:f2:1a:62:91:c1:2d:1a:f4:5f:fc:e9:
                    48:81:51:10:2b:45:d9:16:5d:1d:72:29:f8:c8:45:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:19:52:BB:B4:91:2D:10:D4:5A:78:0C:6C:63:15:92:EF:21:D1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9a4e6653b8f510ee23aaa719c18f560f53bbe545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.72.0/22
                  191.96.112.0/22
                  191.101.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:37:52:bb:74:cc:a4:05:2c:53:e1:00:3b:fe:7d:d9:db:
         5b:db:08:0f:d2:27:f4:65:6d:6e:59:1e:28:e3:63:c6:fc:e3:
         a5:3a:8b:75:7f:cf:aa:89:4d:9d:d0:20:47:e7:8a:71:84:50:
         c3:3b:aa:c9:19:0c:f0:f6:67:73:e5:88:96:ec:22:d2:70:31:
         7a:b8:c9:3e:ef:3f:ed:a3:9d:bd:bd:b0:53:39:5b:4c:31:2b:
         9a:a4:5c:25:c4:45:2c:1a:2b:26:74:ae:3e:eb:6f:6b:2a:1c:
         0a:43:d9:ff:07:50:79:0a:eb:4e:dd:43:29:56:5c:96:00:96:
         18:13:6c:c8:d6:ae:8b:77:05:aa:9f:0e:06:cd:7b:22:7c:65:
         18:90:ec:32:c8:ef:34:95:9a:a9:12:b2:f6:7f:8e:11:b0:aa:
         f6:d6:dd:8a:ca:f3:30:35:c5:da:c8:ea:42:1a:75:3a:b0:e1:
         35:28:54:34:77:f9:be:8d:ed:30:b9:21:ed:96:70:36:ef:59:
         a7:68:17:5e:e6:57:38:48:99:22:2c:a9:3c:58:f7:c1:be:2c:
         10:ab:5c:8b:46:bf:9f:e9:f7:86:0c:2a:6a:a7:e0:80:58:f2:
         af:b0:5f:ce:96:3a:f8:a6:7a:29:34:ee:7b:98:df:7c:ff:3d:
         cc:91:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org