Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d56f211863ec883c3029c65565732d474a631856.roa
File:                     d56f211863ec883c3029c65565732d474a631856.roa (raw, json)
Hash identifier:          t0PNXavAQnoThwTFwX7S2JwBYino/sjpMgjUFu6bLhs=
Subject key identifier:   46:2C:0F:50:7D:37:DA:FA:20:15:27:FE:26:CB:D2:AE:4A:12:D1:23
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       15E2EF
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d56f211863ec883c3029c65565732d474a631856.roa
Signing time:             Mon 07 Feb 2022 18:34:55 +0000
ROA not before:           Mon 07 Feb 2022 03:00:00 +0000
ROA not after:            Wed 07 Feb 2024 03:00:00 +0000
asID:                     15440
IP address blocks:        181.214.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434351 (0x15e2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb  7 03:00:00 2022 GMT
            Not After : Feb  7 03:00:00 2024 GMT
        Subject: CN=d56f211863ec883c3029c65565732d474a631856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:57:45:69:57:72:53:56:49:7c:0a:8c:cc:
                    19:33:90:24:54:24:19:39:77:f0:ff:3f:d0:ee:2f:
                    b8:b0:0d:fd:cd:9f:dd:f2:5c:92:db:75:47:71:71:
                    1e:18:44:a6:07:8f:60:9d:b6:44:fe:83:80:d9:bd:
                    8c:85:5d:91:8d:71:cb:18:12:d5:53:fc:f1:c2:39:
                    80:4b:52:fc:7d:2b:a4:58:1e:16:18:b7:53:51:9e:
                    33:ef:3d:ae:bc:e8:02:c6:ab:51:0e:c9:93:47:43:
                    4f:c0:42:bd:86:ef:a7:9a:8e:9a:d8:7d:a4:74:bd:
                    a1:2a:55:3c:1f:1d:cb:1c:49:e7:b5:34:42:91:b9:
                    7b:a5:86:13:18:8d:c6:4f:93:c7:e5:1b:08:dd:24:
                    2d:87:a2:11:c0:c0:f4:43:44:e6:4e:0f:12:9e:2c:
                    08:e6:8a:c0:9f:24:91:cc:f0:3b:1d:f7:03:b2:fb:
                    6a:b8:73:6e:f5:51:8c:df:ed:a5:56:b7:b5:9a:52:
                    29:69:6f:11:8d:42:8b:64:42:b4:23:9c:3b:42:26:
                    46:d3:c2:fc:ec:1b:7c:38:e0:bd:ae:1c:54:6e:19:
                    8f:d1:41:73:06:0a:cd:05:6e:b6:5c:b2:d5:e0:58:
                    4c:89:4a:32:ca:e3:6c:a6:2f:50:41:8e:cc:8c:8d:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:0F:50:7D:37:DA:FA:20:15:27:FE:26:CB:D2:AE:4A:12:D1:23
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d56f211863ec883c3029c65565732d474a631856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:4e:61:10:6e:98:2e:9d:fa:d3:17:64:28:ab:d1:36:b7:
         8f:df:d2:64:ba:78:b6:e5:b8:f9:fa:8a:34:18:25:92:70:54:
         9a:2f:bf:8a:22:52:06:4f:ef:b1:b1:82:ed:99:46:dc:d1:1b:
         24:fb:ac:b5:36:47:36:2c:fa:f4:6c:02:6d:9b:51:14:1b:15:
         16:aa:3f:f4:8c:e5:5b:25:3d:f4:81:43:8e:71:00:d9:f5:d8:
         7d:14:5f:71:58:8c:68:d5:ed:7e:46:e2:17:68:e8:57:e1:87:
         81:10:4e:b7:23:5d:97:03:a8:e1:4f:66:a0:45:d4:13:d1:73:
         ad:54:31:90:5c:dc:32:67:92:04:eb:61:fa:a6:7a:20:87:17:
         fa:fe:e8:54:cc:34:dd:e6:0f:5b:b3:58:40:da:13:f5:37:4c:
         b5:a1:49:7b:75:d0:90:9a:4d:e7:40:0b:f3:20:51:57:46:87:
         f3:f6:4d:d5:0e:e9:cf:c2:e7:e2:3c:6e:12:58:db:c4:44:c6:
         58:69:a4:03:d0:f1:25:6f:b9:b0:bc:a6:1e:84:5f:82:49:bc:
         8f:26:26:00:7d:2a:a3:99:44:99:b1:f0:44:6b:b2:0c:f5:5f:
         2b:3c:6e:e0:bd:2f:a8:1e:89:64:b4:ad:7f:89:9d:68:ad:e1:
         09:36:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org