Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a8e84fa4d63fbc6dcf6031b66b79128b21e80f88.roa
File:                     a8e84fa4d63fbc6dcf6031b66b79128b21e80f88.roa (raw, json)
Hash identifier:          MJbDw8HWpOjENArguWa7u/uiG05N4YnKWZv+xGnrxjg=
Subject key identifier:   58:2B:1F:4A:EE:95:4E:02:83:86:89:B3:5E:64:14:AE:05:FD:1D:B5
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       16816F
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a8e84fa4d63fbc6dcf6031b66b79128b21e80f88.roa
Signing time:             Tue 22 Feb 2022 13:42:07 +0000
ROA not before:           Tue 22 Feb 2022 03:00:00 +0000
ROA not after:            Thu 22 Feb 2024 03:00:00 +0000
asID:                     271978
IP address blocks:        181.215.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474927 (0x16816f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb 22 03:00:00 2022 GMT
            Not After : Feb 22 03:00:00 2024 GMT
        Subject: CN=a8e84fa4d63fbc6dcf6031b66b79128b21e80f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:cd:a9:38:8d:89:03:94:ca:da:d9:ab:09:
                    3b:0c:57:2d:15:5c:7a:2f:f7:18:0c:55:fd:ee:36:
                    43:30:7d:b9:4c:ff:3d:f0:3a:1d:6b:6c:da:5c:b6:
                    09:14:2f:b5:04:33:c6:43:8d:fe:f0:d8:0f:4d:d3:
                    bb:01:a1:fe:56:87:49:e9:86:20:e5:06:71:86:02:
                    ab:d9:bc:97:6c:de:41:ec:b6:7b:d9:48:c9:56:4e:
                    55:5b:02:04:eb:f7:c9:cb:e5:8d:7a:2a:cb:4d:93:
                    0b:4b:f4:06:dc:93:46:89:a3:fc:4c:89:66:d7:60:
                    54:25:66:d7:f9:31:c0:08:98:97:6d:6a:9c:f6:ca:
                    39:10:a3:60:a3:59:88:20:4c:44:2b:0b:d0:09:a2:
                    f4:67:89:cb:da:53:22:c9:a7:e5:69:fd:b5:ff:23:
                    f6:ac:6c:6c:11:60:39:11:7c:ac:28:38:a7:9a:b1:
                    08:fb:ad:b9:a0:f3:0e:bc:6f:bc:22:0b:32:cf:d0:
                    fb:7a:dc:5e:1a:22:b9:9f:11:ea:48:f1:ca:a3:1f:
                    40:29:e7:2b:63:84:e2:12:ee:35:97:31:b6:bd:0d:
                    65:c7:41:74:11:2b:1b:d7:6b:cc:fe:56:cd:7e:79:
                    5a:90:5d:06:9b:1e:23:c7:c1:0a:e8:e9:3b:bb:a0:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2B:1F:4A:EE:95:4E:02:83:86:89:B3:5E:64:14:AE:05:FD:1D:B5
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a8e84fa4d63fbc6dcf6031b66b79128b21e80f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:0d:87:be:4d:03:00:cd:cf:a4:04:13:88:50:97:0c:ab:01:
         86:0c:71:9a:09:21:d2:49:25:a0:bb:ab:e7:60:17:a1:91:6e:
         fe:88:44:11:2d:c1:5c:2e:cf:ae:24:3f:0b:0a:f5:a6:92:c4:
         46:1f:cf:d5:d1:35:ee:c9:bb:a7:b9:8f:01:ab:a0:1c:02:ff:
         fa:8f:fc:28:84:a3:4c:e1:9f:4c:dd:b8:b2:fc:e5:87:fd:c0:
         33:04:ca:9f:50:07:63:a5:c6:8a:1c:76:27:cd:3b:60:fa:cd:
         3e:6c:b7:d0:cd:81:4b:2d:2b:75:88:d6:6a:8e:ca:13:60:5d:
         84:4b:30:50:84:d4:47:7e:c4:12:5a:b9:75:aa:e1:ad:bd:6e:
         79:ac:65:54:42:c5:74:38:4e:32:35:49:c8:66:37:5e:a4:69:
         6d:d5:17:08:af:cc:33:ff:50:5e:0e:e5:f2:6a:a7:1d:46:3e:
         5d:0b:04:e0:b6:3c:af:76:21:43:23:76:b3:e7:eb:db:5a:84:
         27:03:1d:c5:2a:b3:65:a7:08:0e:a9:53:10:d6:30:7d:12:54:
         b3:c8:98:0e:d6:bd:d6:12:71:e0:c4:0b:a3:28:90:9a:d3:e5:
         c1:81:03:82:d0:01:3a:30:e4:8e:2a:0f:d9:8d:bc:01:02:f4:
         da:82:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org