Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf0ec23589cdc94fd5d4e2d85d6084d45e20c64b.roa
File:                     cf0ec23589cdc94fd5d4e2d85d6084d45e20c64b.roa (raw, json)
Hash identifier:          +fGWgFHjbCiBcpYiboWy8UR1oO0c98hGgkSviLWRbBk=
Subject key identifier:   C2:53:B3:2C:42:06:A1:74:26:B5:FC:99:23:22:C1:E4:4F:95:1C:AE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1082D3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf0ec23589cdc94fd5d4e2d85d6084d45e20c64b.roa
Signing time:             Mon 01 Nov 2021 13:35:00 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Wed 01 Nov 2023 03:00:00 +0000
asID:                     271945
IP address blocks:        181.215.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082067 (0x1082d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2023 GMT
        Subject: CN=cf0ec23589cdc94fd5d4e2d85d6084d45e20c64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:97:25:4d:04:12:fe:c7:ed:cc:e9:65:a0:
                    eb:5c:6e:32:39:b5:51:0a:5a:14:3e:fc:07:43:a7:
                    b0:24:be:b6:d3:3c:f0:aa:98:fc:b2:5a:72:20:87:
                    fd:c5:3e:0d:82:e6:f0:bf:de:89:91:01:02:5c:82:
                    5a:bd:c1:00:6d:7a:31:62:24:81:e8:7d:7b:23:20:
                    60:5f:70:5e:42:24:7f:fb:5d:36:b1:20:e6:d5:6b:
                    ac:5f:66:54:b3:e8:c7:9d:6f:28:a2:ce:78:2b:1a:
                    d6:f7:ae:0f:39:e6:c1:42:d6:4f:eb:75:7f:0f:47:
                    be:45:52:ff:8c:3f:cc:fd:8b:c3:40:cd:67:22:c7:
                    8d:6f:74:fc:45:d2:9c:2e:ed:5f:b9:46:69:30:66:
                    78:e1:8a:51:5c:39:f4:4b:9b:29:9b:d2:76:f6:aa:
                    9d:0a:17:15:6b:b2:a2:84:01:86:ad:9c:4d:13:4b:
                    65:41:f8:fd:b5:ed:79:ca:ac:50:c1:e6:7a:68:f6:
                    56:61:d8:07:7b:56:92:8b:fe:76:cc:21:18:93:f6:
                    36:e1:b0:11:16:d2:18:02:77:e6:03:de:58:8d:3d:
                    2e:61:2e:15:df:59:c3:67:d5:2c:2c:45:cf:c0:5d:
                    d1:cd:b6:90:2e:07:5b:13:ff:86:0c:e2:91:7f:ad:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:53:B3:2C:42:06:A1:74:26:B5:FC:99:23:22:C1:E4:4F:95:1C:AE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf0ec23589cdc94fd5d4e2d85d6084d45e20c64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e0:77:0d:a3:70:86:27:6b:b4:3e:fd:2a:73:e3:f8:0f:31:
         a8:6b:9e:27:d6:23:0d:16:df:54:bf:d3:fc:83:96:d8:a6:0c:
         54:63:2e:ae:03:2d:22:40:17:78:1a:08:ee:b5:69:93:28:2d:
         f6:33:0f:ff:4e:68:b0:63:eb:f5:dd:a4:21:b9:aa:2b:2b:da:
         96:5c:e6:d0:1b:54:03:ea:20:3b:b6:f7:20:e6:56:56:1c:19:
         31:e8:47:86:9d:41:f8:32:e4:2e:1f:50:57:e0:42:32:3b:cb:
         ef:5f:17:d9:95:2e:8b:a4:26:52:9e:4d:ea:f1:b5:d8:63:63:
         6d:85:be:f0:dc:21:f8:db:ae:7b:d5:77:b0:fa:10:5d:45:ff:
         b3:bb:1a:64:a5:53:36:e7:0e:b4:25:98:36:66:c6:93:aa:45:
         b7:8f:97:ee:43:d8:0a:61:7d:73:f3:57:7c:dc:f5:03:16:c7:
         08:00:13:d9:7a:aa:f4:b7:2f:e6:18:71:80:bc:6a:73:23:cc:
         f8:0d:f7:58:73:86:07:20:4c:f3:9c:01:5f:3b:88:58:56:0b:
         b4:6a:71:c1:dc:b2:0c:77:05:f4:79:e9:ea:02:1a:3d:93:bf:
         8a:09:e8:c0:a1:de:29:94:13:bb:6e:15:b6:13:8a:8e:35:4c:
         47:70:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org