Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c0965e02fe5aa84ea672b42b51a01c2f9ed3690c.roa
File:                     c0965e02fe5aa84ea672b42b51a01c2f9ed3690c.roa (raw, json)
Hash identifier:          IjBQU/NTUzYw7WlFvQWCzQZSWejal7AYOt3NrlklPG4=
Subject key identifier:   D3:1E:1A:82:7E:AB:DB:D9:D9:4D:90:C4:DC:24:48:11:24:4A:89:07
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0EC7BB
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c0965e02fe5aa84ea672b42b51a01c2f9ed3690c.roa
Signing time:             Fri 01 Oct 2021 18:19:30 +0000
ROA not before:           Fri 01 Oct 2021 03:00:00 +0000
ROA not after:            Sun 01 Oct 2023 03:00:00 +0000
asID:                     20473
IP address blocks:        191.96.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968635 (0xec7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct  1 03:00:00 2021 GMT
            Not After : Oct  1 03:00:00 2023 GMT
        Subject: CN=c0965e02fe5aa84ea672b42b51a01c2f9ed3690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:3a:72:0f:b1:23:8c:27:e8:0e:e5:0f:ac:
                    f6:a6:fb:89:4c:50:37:d9:10:59:80:8d:3e:bf:57:
                    f3:c7:75:fd:37:d1:43:ae:47:ef:b3:01:13:b8:fa:
                    79:9a:c8:f8:ef:ba:82:ea:67:76:6e:2c:7a:47:21:
                    c3:0b:5d:1a:d0:36:3b:5b:d3:de:8e:d0:1c:5c:c6:
                    9b:00:9c:ae:a5:76:f0:08:b6:a4:21:18:4a:46:a2:
                    64:84:6e:94:9f:72:ca:fb:04:33:50:d1:80:31:b5:
                    c6:e1:3e:60:f3:d0:cc:fa:ac:51:41:8f:42:dc:9d:
                    d1:7c:21:1d:af:c1:ea:51:12:96:0f:f5:d5:66:d1:
                    eb:9f:c6:00:1b:2b:67:5f:be:22:61:13:bc:46:4e:
                    fa:3d:fc:88:83:d3:4c:e8:c3:6b:da:10:52:bb:c1:
                    52:88:7d:97:3f:2e:d9:7c:c6:dc:14:57:a0:e7:35:
                    b6:a2:d4:ae:aa:cf:cf:a9:4f:a6:55:c0:cf:39:99:
                    c7:59:e2:3b:45:57:2e:3f:9e:30:65:2b:f2:2f:f2:
                    cc:9c:49:45:1f:2e:fb:f8:c1:92:4c:f2:02:09:c4:
                    0c:9d:8d:4b:c8:e2:58:74:63:21:27:4d:a0:8b:b9:
                    a6:d3:bd:1f:b7:a9:2c:c9:0e:89:f9:85:fe:71:83:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:1A:82:7E:AB:DB:D9:D9:4D:90:C4:DC:24:48:11:24:4A:89:07
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c0965e02fe5aa84ea672b42b51a01c2f9ed3690c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:16:4f:7c:e9:e6:4b:84:1a:b3:b9:73:14:34:cb:a8:d6:0f:
         6c:26:58:43:f6:b5:7a:a1:bc:34:79:02:96:e5:21:02:e8:5a:
         19:8a:63:03:61:08:f8:7e:df:2e:e3:14:de:a1:0e:c1:96:eb:
         71:dc:37:0a:7e:7f:26:27:04:c5:e0:50:e9:42:41:71:d3:0c:
         25:2d:f8:b5:b4:6e:c2:03:60:ff:d5:eb:4a:a9:3b:3a:af:28:
         8a:17:9b:9f:82:87:2a:53:25:42:f4:c3:45:4f:4b:b0:00:30:
         15:42:16:88:f5:7a:7e:e4:a8:1c:08:10:d2:90:e9:83:2f:86:
         50:22:aa:0e:a4:cb:c4:56:da:18:40:c2:cc:14:a2:ad:73:dc:
         c9:0e:6b:a0:21:59:54:80:20:9a:45:4b:ad:40:85:1e:f2:53:
         8c:73:8b:5c:e9:8e:60:e4:8f:3b:d0:87:32:b3:8f:35:96:23:
         96:13:7e:d6:86:04:e7:16:87:de:d6:20:95:df:47:71:89:7c:
         d3:43:df:4b:d7:14:39:cd:c5:ab:19:1a:27:c6:8b:7f:67:bd:
         a3:50:90:46:22:79:e6:7b:fd:65:c9:95:5b:e4:2a:56:92:71:
         f0:61:30:ce:68:43:31:e6:3f:7c:4d:bd:96:82:db:69:f1:fc:
         65:9c:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org