Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf4d8afe7ebb6d82f83ebf065f621c0a98415a05.roa
File:                     cf4d8afe7ebb6d82f83ebf065f621c0a98415a05.roa (raw, json)
Hash identifier:          XwHGQePDlbNMRwe088F5ROBuwTFuOoJTuskAMu+Ou1k=
Subject key identifier:   F2:01:D7:4D:6A:57:40:62:E2:DE:48:74:B7:02:39:A5:27:74:D6:22
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0638EC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf4d8afe7ebb6d82f83ebf065f621c0a98415a05.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     395787
IP address blocks:        191.96.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407788 (0x638ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=cf4d8afe7ebb6d82f83ebf065f621c0a98415a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:19:f9:f5:82:2c:45:1f:9c:97:38:66:eb:
                    b1:27:24:d6:a5:da:44:2e:73:52:d8:91:5c:13:3b:
                    8b:ec:fb:13:0c:5b:3b:8e:bd:44:6f:f3:49:56:de:
                    36:1a:9b:cc:4c:bf:9d:ef:6d:f9:10:c2:2d:c4:e6:
                    48:fc:06:f1:1b:96:0e:25:61:f9:66:2c:4f:82:b1:
                    b9:a2:2a:ce:02:62:dd:dd:0a:79:60:33:cd:cf:f8:
                    df:59:6f:45:0f:5c:f5:a3:f5:f2:52:37:19:01:7b:
                    47:86:16:a9:fb:82:ee:5f:8a:af:d4:88:e2:0f:58:
                    70:6c:87:37:ed:12:52:58:26:a2:12:69:54:16:59:
                    79:d1:db:aa:81:91:c9:b4:c5:c9:d5:25:31:f6:54:
                    a2:82:76:4d:65:bb:49:66:f5:5e:0a:23:64:94:7f:
                    3e:68:e2:8a:d5:a2:e9:d9:96:ac:83:8a:6c:bf:1f:
                    78:c2:29:7a:e3:40:a2:c7:69:43:a7:15:48:dd:35:
                    dc:c7:1f:73:65:fb:43:dc:32:6a:1b:6d:3b:8e:8a:
                    72:e4:03:40:32:11:c4:f3:cf:38:67:79:88:73:c1:
                    69:e6:d6:7b:21:6a:2d:30:ec:42:c1:2c:00:b6:d4:
                    0f:11:7d:15:41:96:d3:fd:69:43:6b:5a:f2:be:c8:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:D7:4D:6A:57:40:62:E2:DE:48:74:B7:02:39:A5:27:74:D6:22
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf4d8afe7ebb6d82f83ebf065f621c0a98415a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:27:d9:7e:3d:7e:1d:51:ee:d5:6b:c4:e8:23:f9:db:ab:
         a0:6b:8d:0b:44:c5:c6:aa:d4:9d:72:49:d6:b9:c4:fa:aa:10:
         23:97:5e:49:5b:7c:ce:82:f2:68:40:55:d2:aa:d9:48:08:67:
         0e:a9:47:62:ff:4a:de:18:8f:6d:da:d2:7d:67:b1:07:a5:a8:
         65:5b:c1:e3:70:26:7c:a0:e2:8f:07:1c:cd:27:84:91:35:c0:
         b2:f3:3f:99:c4:6a:1b:a5:2c:c3:6a:2d:90:1f:26:66:52:b9:
         ab:f1:f5:68:65:08:e8:d5:8b:14:e2:66:1f:0c:02:7e:8e:80:
         50:8f:ec:6e:a6:02:74:2e:e6:a7:d4:aa:50:be:ef:fc:52:a8:
         f2:6e:bc:13:72:3a:e7:67:ea:28:4f:93:56:89:c3:31:09:98:
         ae:5a:c7:cf:bc:6f:5f:73:8e:0b:c7:60:10:7b:20:e2:f5:ee:
         58:0c:c8:17:78:b4:e5:fe:4c:89:1a:79:fb:82:74:8b:82:f6:
         e7:69:57:8a:75:c0:b9:13:f7:b5:ed:f4:a9:82:8e:99:26:b0:
         f1:12:e5:2c:c1:51:f2:37:79:20:7d:4a:a5:54:e8:6a:5b:75:
         d4:e4:24:9b:de:d6:c1:96:66:17:3b:da:02:e9:14:f5:b2:81:
         b4:94:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org