Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5117f1363c4a1240992cf43a1656aec748b2662.roa
File:                     c5117f1363c4a1240992cf43a1656aec748b2662.roa (raw, json)
Hash identifier:          4Kbesbw31VGPdVL7V9wc75W4djN7Dp3+1X2U1Nj7PmI=
Subject key identifier:   71:8A:C5:10:1F:E2:CF:B5:33:2C:2B:FE:73:86:B6:C2:CC:0E:6C:85
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       168547
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5117f1363c4a1240992cf43a1656aec748b2662.roa
Signing time:             Wed 23 Feb 2022 19:59:34 +0000
ROA not before:           Wed 23 Feb 2022 03:00:00 +0000
ROA not after:            Fri 23 Feb 2024 03:00:00 +0000
asID:                     271965
IP address blocks:        181.214.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475911 (0x168547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb 23 03:00:00 2022 GMT
            Not After : Feb 23 03:00:00 2024 GMT
        Subject: CN=c5117f1363c4a1240992cf43a1656aec748b2662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:4f:ff:3d:58:96:50:ab:ce:61:b3:b5:a6:
                    0a:18:62:ef:94:b9:e6:be:9d:37:b2:c2:db:99:c0:
                    17:b1:5f:a4:69:a3:0d:91:e0:92:2f:88:71:f3:f3:
                    9b:9f:cf:6d:d7:d8:46:cf:c0:c5:39:de:76:08:4d:
                    42:c2:a9:dc:13:5c:12:c2:ca:87:e1:fa:85:99:fc:
                    75:da:d4:6f:af:b3:df:b6:b3:8c:20:35:e6:8d:b9:
                    7a:ad:43:f5:6d:54:00:1c:a9:8b:64:86:a7:3c:81:
                    38:ba:fe:ec:d2:11:bd:a0:91:4e:de:8d:90:70:56:
                    dc:41:37:bb:f9:f0:03:0e:ea:e4:26:5b:26:83:45:
                    99:c1:c8:7c:71:b3:93:53:2d:fc:ee:48:9c:fa:cf:
                    de:cb:dc:45:89:7e:13:4f:89:9b:5a:02:36:28:77:
                    42:b9:52:00:3c:2e:cd:39:0f:ab:f9:b6:2d:5a:7c:
                    82:cb:07:be:68:09:00:0d:72:f9:8e:e0:0c:83:5d:
                    42:a0:af:7e:95:d6:03:c5:45:e9:c6:a1:78:57:4d:
                    8b:2a:3c:f9:a8:06:ce:62:00:7d:de:99:6a:1a:04:
                    ed:98:a3:5e:ce:81:5a:4c:15:54:2c:dc:31:68:5d:
                    69:5c:4e:7d:bf:88:8d:6d:df:c3:ea:8e:1c:00:cc:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8A:C5:10:1F:E2:CF:B5:33:2C:2B:FE:73:86:B6:C2:CC:0E:6C:85
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5117f1363c4a1240992cf43a1656aec748b2662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:c8:2a:c8:5f:13:81:5d:a0:0d:4c:04:75:d4:4b:15:d9:
         57:29:97:63:03:58:81:da:b5:e3:51:4f:5d:51:33:cc:5b:c8:
         65:de:ba:5a:d9:6d:d6:c9:b0:f3:d7:51:4c:ed:70:2b:c1:b4:
         01:f5:c7:ca:5b:16:d7:8c:10:00:8e:7f:8c:f5:f8:62:45:9c:
         e4:a2:3c:1b:af:36:06:c5:0e:bc:e0:fc:50:82:da:34:d7:df:
         a5:b4:59:0c:e4:6b:db:8a:2b:59:88:bb:e9:ee:bf:c2:73:af:
         01:b4:90:3d:9e:d5:51:20:fd:e5:21:15:c3:55:73:29:d1:fd:
         a3:48:fa:7c:a4:6f:81:82:03:57:e2:6e:83:9b:7b:28:d7:5e:
         dd:57:82:70:45:b9:cf:ee:3d:14:aa:5d:43:24:4f:94:64:4f:
         53:aa:a8:6a:c3:6b:f4:e6:16:b4:77:84:fd:4d:3c:db:f9:3a:
         9d:70:03:69:28:3f:82:68:ef:40:7e:cf:a5:f0:c1:d1:52:69:
         a1:58:8d:04:69:a8:0b:cc:34:80:4b:4b:ea:96:7f:73:71:07:
         c2:a8:8f:d7:94:57:dc:e6:82:da:4a:2d:de:df:a4:5f:eb:e5:
         e8:d3:94:3c:d2:3e:e4:3f:b4:17:9a:6c:7a:52:8b:c2:60:5e:
         67:81:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org