Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5698588a538de7c7a164ca4a2e40afcd6c13f24.roa
File:                     c5698588a538de7c7a164ca4a2e40afcd6c13f24.roa (raw, json)
Hash identifier:          8GDfS/UR4jg6x537zV53RslM/0lzN7EXzE+Xf72r6+Y=
Subject key identifier:   24:A5:DA:86:89:A1:79:D5:8D:06:A5:7C:B7:F5:E4:9D:86:03:A4:E6
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06A44F
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5698588a538de7c7a164ca4a2e40afcd6c13f24.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     24875
IP address blocks:        181.215.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435279 (0x6a44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=c5698588a538de7c7a164ca4a2e40afcd6c13f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:f0:5e:66:d8:5e:78:27:03:05:39:4f:30:
                    3c:a1:38:26:28:7f:b3:3c:a6:72:45:3a:c8:35:9b:
                    4e:c1:17:6b:fd:04:41:b1:2a:bc:8e:14:1f:38:0d:
                    0b:59:58:25:ba:bf:d9:c5:39:0d:4b:db:27:2a:ae:
                    c5:8f:e2:71:57:94:59:96:27:b0:0c:00:10:ef:a4:
                    9e:3c:79:59:bb:9d:85:62:90:1b:87:0c:bb:de:a0:
                    45:b4:db:f5:f5:0a:41:69:3c:a5:d1:5e:53:09:24:
                    b3:38:37:2f:f8:e5:4d:68:fd:52:dc:e2:f0:d4:06:
                    42:ce:fd:58:06:55:77:77:d8:55:d8:c4:4f:82:f3:
                    a7:7d:96:8a:f7:64:26:a1:97:42:44:8a:6d:9c:60:
                    1d:94:ee:8d:f3:55:fc:df:fb:96:b0:76:26:bf:61:
                    79:d6:03:5d:22:29:61:89:13:92:2f:75:af:0f:4c:
                    26:48:a9:f1:d2:b9:20:87:94:c4:e9:00:53:03:c5:
                    16:a7:ff:ce:f4:e6:56:f9:b2:b4:0c:31:13:19:e3:
                    01:d3:27:59:6b:62:60:65:3f:d3:0a:f6:2b:74:11:
                    77:9b:a3:41:62:7a:d6:8c:37:05:e6:06:7b:a8:44:
                    80:2c:bf:6d:b9:7f:2e:d9:71:e8:2f:ab:cf:b1:a3:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:DA:86:89:A1:79:D5:8D:06:A5:7C:B7:F5:E4:9D:86:03:A4:E6
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c5698588a538de7c7a164ca4a2e40afcd6c13f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:c2:ea:7f:4b:c2:29:8d:91:4f:80:68:23:3f:14:74:26:
         2a:24:7e:53:39:d8:b1:b8:99:69:6d:94:1c:a2:ab:b9:4e:ad:
         55:30:e7:2e:17:49:69:fe:9e:a2:76:0f:65:4c:f6:2b:46:68:
         5d:8a:79:ff:fc:61:13:15:b3:67:97:5b:d5:a3:07:b3:83:18:
         b6:b3:0a:1c:83:7e:a7:b0:65:12:ed:19:14:0d:96:52:d9:39:
         74:00:d8:2d:e5:6a:0d:6a:9a:6b:97:68:74:4e:68:e8:39:a8:
         bc:01:c2:de:5a:5a:00:c5:6e:17:2c:ce:87:f3:37:b6:04:75:
         47:af:bf:a5:50:d8:67:89:3a:88:97:22:c4:88:5e:cd:2c:0b:
         1c:2b:b5:cb:3f:1c:ac:2e:bd:05:36:d5:df:cd:32:d3:00:55:
         ef:3e:74:67:20:ca:d9:c6:8b:5b:48:7d:5d:b0:f5:b5:57:3b:
         cb:e8:ad:c4:a7:ed:92:83:50:a5:5d:82:df:a1:f0:c3:9d:ad:
         48:93:72:18:a0:90:0c:47:52:de:e4:68:00:58:88:ad:09:e5:
         db:17:5c:84:04:1a:62:e6:3d:90:cc:a8:da:d5:c8:30:9c:dc:
         e6:a7:50:54:e2:ff:1a:ea:4b:4c:c8:7c:71:7d:e8:7b:ce:fe:
         fd:a8:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org