Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b618c3683036ffae18ddb9dba929ac64e85afb16.roa
File:                     b618c3683036ffae18ddb9dba929ac64e85afb16.roa (raw, json)
Hash identifier:          unBVtC3qRodNpkIjpOs449/ndAZ6ozecyyoBdifqxTo=
Subject key identifier:   18:94:D1:9A:71:9F:0F:6B:54:16:63:8F:05:62:8C:5C:B7:46:68:C1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       16311A
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b618c3683036ffae18ddb9dba929ac64e85afb16.roa
Signing time:             Tue 15 Feb 2022 19:36:07 +0000
ROA not before:           Sun 02 May 2021 03:00:00 +0000
ROA not after:            Tue 02 May 2023 03:00:00 +0000
asID:                     1239
IP address blocks:        191.96.122.0/24 maxlen: 24
                          191.96.129.0/24 maxlen: 24
                          191.96.134.0/24 maxlen: 24
                          191.96.62.0/24 maxlen: 24
                          191.96.167.0/24 maxlen: 24
                          191.96.31.0/24 maxlen: 24
                          191.96.38.0/24 maxlen: 24
                          191.96.154.0/24 maxlen: 24
                          191.96.193.0/24 maxlen: 24
                          181.215.21.0/24 maxlen: 24
                          181.214.146.0/24 maxlen: 24
                          181.215.31.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.34.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.94.0/24 maxlen: 24
                          181.214.78.0/23 maxlen: 24
                          181.215.252.0/23 maxlen: 24
                          181.214.84.0/23 maxlen: 24
                          191.101.202.0/23 maxlen: 24
                          181.214.197.0/24 maxlen: 24
                          181.214.198.0/24 maxlen: 24
                          191.101.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454362 (0x16311a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: May  2 03:00:00 2021 GMT
            Not After : May  2 03:00:00 2023 GMT
        Subject: CN=b618c3683036ffae18ddb9dba929ac64e85afb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:37:72:5b:d0:a3:59:7f:7a:df:2b:ba:64:
                    5e:29:79:dd:77:c9:1b:8f:ed:f8:6d:68:6b:b3:06:
                    3c:f5:8c:a4:72:09:b5:3b:c8:d3:a4:a9:fe:b4:99:
                    a2:f6:2f:db:f8:f5:79:aa:a0:ca:9e:02:7f:a6:6f:
                    16:b9:c6:f4:69:8d:bd:95:94:e4:a7:bc:3d:4f:3e:
                    aa:4f:13:89:fc:b4:84:67:51:d1:42:28:af:a6:7b:
                    b9:46:ba:a5:1a:42:b6:ca:ad:51:62:b6:eb:b2:d4:
                    e5:d3:e0:f1:14:dd:41:82:e4:fa:80:5d:c6:45:7e:
                    07:53:ee:72:8f:5f:eb:0d:56:b5:2e:24:df:b0:41:
                    c5:41:17:96:2b:47:2a:38:d8:fd:79:c1:e1:e4:1a:
                    d1:4b:54:db:5e:81:94:f8:2f:e0:cc:f7:60:a1:72:
                    a2:f8:9d:37:03:27:66:e2:53:c6:dd:ea:47:7f:11:
                    54:a8:50:ea:56:e8:3c:e3:c3:e9:a3:94:f4:f3:08:
                    37:66:82:13:49:c8:24:b1:10:81:00:79:b1:be:40:
                    92:ab:a6:cb:2d:36:cc:30:96:49:8c:31:60:87:8a:
                    57:fa:c5:53:37:51:fe:d1:c2:d6:6f:b7:11:d9:e3:
                    b9:84:c9:96:9c:5d:2b:69:21:f2:01:1e:89:b7:73:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:D1:9A:71:9F:0F:6B:54:16:63:8F:05:62:8C:5C:B7:46:68:C1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/b618c3683036ffae18ddb9dba929ac64e85afb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.78.0/23
                  181.214.84.0/23
                  181.214.146.0/24
                  181.214.197.0-181.214.198.255
                  181.215.21.0/24
                  181.215.31.0/24
                  181.215.35.0/24
                  181.215.252.0/23
                  191.96.29.0/24
                  191.96.31.0/24
                  191.96.34.0/24
                  191.96.38.0/24
                  191.96.61.0-191.96.62.255
                  191.96.94.0/24
                  191.96.122.0/24
                  191.96.129.0/24
                  191.96.134.0/24
                  191.96.154.0/24
                  191.96.167.0/24
                  191.96.193.0/24
                  191.101.187.0/24
                  191.101.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:75:b7:b2:ab:75:3a:cd:a8:21:e3:5f:ea:a6:67:e7:ce:
         ce:72:81:45:39:bb:03:79:c6:91:ed:24:17:f7:7c:28:de:fe:
         93:ca:15:16:8f:86:fd:4f:da:9d:00:a0:e0:5c:0d:82:50:49:
         d8:72:eb:cc:8d:ad:8f:02:1b:c6:36:b3:b1:b6:b1:0d:cc:91:
         9a:4f:20:86:f4:b1:ce:9e:9d:8e:50:dd:a5:e5:63:1b:bb:37:
         07:78:6e:27:1b:fb:4c:a0:6b:98:2c:b3:d9:a9:f0:60:32:04:
         8b:f9:a3:bc:18:97:82:61:4a:a0:dc:aa:dc:5b:ba:59:56:13:
         86:b7:85:e0:8b:78:d1:bc:ac:7f:51:17:93:f9:5d:f7:6b:4b:
         7d:80:0f:dd:84:98:20:58:1e:89:45:45:4e:b0:7f:3d:f5:35:
         ab:e3:81:66:4a:f2:71:15:14:a7:2d:6e:d1:de:a0:4c:1e:87:
         58:bb:de:6d:47:c0:aa:68:d7:79:1e:19:9f:d9:8e:78:14:29:
         bf:21:6c:20:cf:e2:f1:67:7f:5a:9a:bb:ed:00:59:b7:a2:c3:
         42:a8:3e:33:95:f4:92:02:44:d6:51:b2:aa:11:9b:33:64:14:
         8e:82:3e:3f:b9:70:d1:fe:f4:f0:2f:84:78:91:31:0b:56:16:
         95:42:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org