Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a3979b0db705140f72cae10c4bef9d4a38f0e8a8.roa
File:                     a3979b0db705140f72cae10c4bef9d4a38f0e8a8.roa (raw, json)
Hash identifier:          xWl5G9vITq2FCr8iB0rJo7DS4Tz9pz6BNiRztXz8/C8=
Subject key identifier:   7B:E2:EF:EC:2B:2B:02:57:40:AB:A8:BD:62:1C:0E:6A:6E:A9:12:86
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0F7BA3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a3979b0db705140f72cae10c4bef9d4a38f0e8a8.roa
Signing time:             Tue 12 Oct 2021 18:11:34 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     174
IP address blocks:        191.101.38.0/24 maxlen: 24
                          191.101.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014691 (0xf7ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=a3979b0db705140f72cae10c4bef9d4a38f0e8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:f6:12:bd:35:83:7e:39:4d:39:2b:b5:8d:
                    05:5c:6d:e7:c4:df:67:bd:e0:e4:07:2e:90:c6:32:
                    9a:b3:b2:bc:f1:b7:26:ac:c1:6d:e5:d8:e5:80:5d:
                    f0:39:ab:20:f6:8c:20:6c:5b:d3:61:da:d5:b7:d7:
                    43:1e:12:7a:1b:28:3a:c9:31:bf:64:14:c1:00:bd:
                    97:97:29:d8:53:c3:84:ae:09:a1:25:f1:6c:ee:f6:
                    32:a3:3b:03:2e:d3:ee:01:3f:a5:5a:8b:dd:a1:f5:
                    e7:e2:2c:f0:50:13:12:2e:5d:34:49:1a:5e:2d:04:
                    04:ad:88:9b:3f:90:e7:08:10:c2:34:00:25:71:15:
                    a2:36:8a:e7:f0:29:5a:0d:f1:25:15:77:11:90:03:
                    6e:e2:08:f8:b8:92:e7:43:6b:d2:57:d1:d0:09:58:
                    1e:de:6d:53:4a:15:8a:9c:4a:f1:bc:a5:86:a4:ff:
                    43:b5:43:29:e5:1b:56:dc:24:2a:cd:f3:eb:37:66:
                    a9:ca:5c:ad:dd:c7:55:24:b1:56:2b:79:be:91:d7:
                    1e:ea:6b:3f:d1:44:79:7a:41:5d:c3:d3:0d:c0:98:
                    bf:09:ed:54:39:b2:32:27:28:be:66:1d:a4:1a:dd:
                    7d:35:2a:57:1b:5b:32:c1:62:52:88:94:8f:26:5e:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:EF:EC:2B:2B:02:57:40:AB:A8:BD:62:1C:0E:6A:6E:A9:12:86
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a3979b0db705140f72cae10c4bef9d4a38f0e8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.38.0/24
                  191.101.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:1d:82:a0:5f:49:37:e4:40:87:46:28:18:61:f5:2d:14:
         7b:6d:a2:7b:c0:c2:de:1b:89:bc:b0:31:4b:89:fc:0f:c9:cd:
         b0:51:99:76:d5:a8:00:02:0f:66:7d:94:05:22:1c:22:53:a4:
         a1:7b:79:6f:67:43:0c:5f:a2:92:da:a9:09:5b:4b:96:71:80:
         d5:ac:c4:53:25:9b:5b:27:90:75:05:23:e1:b1:90:12:b7:ed:
         27:05:72:e5:e0:ce:b4:41:d4:c8:8d:33:4b:38:2c:53:6c:ed:
         d2:ca:85:6f:0d:46:72:9c:fd:33:57:47:3e:d9:ac:3e:4b:bc:
         05:dd:e5:fc:59:23:ee:40:fd:be:4b:95:97:ff:da:f8:37:cc:
         e2:23:b2:35:2c:12:e9:4c:47:2d:d0:65:b2:d7:ba:2f:f6:4c:
         79:47:e2:cb:ae:45:52:c2:62:bc:3f:5f:fb:00:c8:b9:7f:fb:
         8b:53:28:b1:a3:17:35:f6:05:bf:f8:23:e1:62:0d:ab:7a:dc:
         d9:10:86:f8:46:85:c2:2d:16:a4:91:63:9e:10:e6:68:10:12:
         e6:1f:25:5e:9b:6f:95:02:33:11:2e:12:71:f7:7a:37:9e:2e:
         eb:20:1b:0d:88:76:37:bb:52:31:d3:fb:87:e9:08:49:dc:b5:
         bc:3e:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org