Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d578deed1e28352fb45923fccc92e55fdec7db7f.roa
File:                     d578deed1e28352fb45923fccc92e55fdec7db7f.roa (raw, json)
Hash identifier:          yhKL3wYDtd9xPuYLj6wr9a6QBaeufdbbRCFOJfLKx5U=
Subject key identifier:   11:B1:EC:EF:C4:C1:52:65:01:D6:31:3A:AB:00:BF:71:B7:73:97:9B
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       164B59
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d578deed1e28352fb45923fccc92e55fdec7db7f.roa
Signing time:             Thu 17 Feb 2022 07:05:34 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     399045
IP address blocks:        191.96.37.0/24 maxlen: 24
                          191.96.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461081 (0x164b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=d578deed1e28352fb45923fccc92e55fdec7db7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:66:57:e5:e7:3c:bc:3c:33:48:f0:55:94:
                    e0:9f:c2:75:c3:d2:13:85:b6:eb:23:5e:70:cb:39:
                    37:83:f0:39:1c:c2:a1:d8:e4:ab:74:7e:dd:68:2e:
                    85:c2:4a:82:ff:da:c2:d9:63:c7:97:90:93:af:6b:
                    3c:cf:0f:4b:b4:05:09:5a:0d:fb:f7:2d:fc:07:ac:
                    11:3c:a8:cf:81:33:b9:f0:db:6a:27:4b:a7:1a:b7:
                    df:10:d6:1c:df:1b:c4:e9:75:94:c3:f8:48:a2:f8:
                    62:53:2b:90:40:ca:f6:1e:e5:b2:bb:96:49:76:8a:
                    79:29:5e:54:11:de:4d:b4:f3:b5:eb:23:ec:71:72:
                    9c:72:bf:ae:4c:95:67:e3:20:8a:11:ce:20:91:cd:
                    1a:5f:80:00:13:86:b9:83:dd:26:ce:6d:4e:30:e1:
                    2f:15:6a:de:5c:83:e0:7b:86:15:6a:5c:55:13:d5:
                    a7:c7:67:8f:5f:52:b2:fb:ca:d1:63:52:ec:54:ec:
                    3f:3b:96:61:5e:82:17:8a:1f:92:4c:05:52:c2:ca:
                    ec:75:86:d4:5c:7d:77:46:ab:64:18:45:e9:f4:cd:
                    9f:f0:39:9b:17:5b:82:8f:82:ca:c5:32:fa:3e:d3:
                    fc:4d:e7:00:ee:aa:b0:4a:24:6e:93:a2:02:b6:37:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:EC:EF:C4:C1:52:65:01:D6:31:3A:AB:00:BF:71:B7:73:97:9B
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d578deed1e28352fb45923fccc92e55fdec7db7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.1.0/24
                  191.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:8e:4b:b6:c0:50:98:5f:9e:b5:eb:af:7b:76:56:d5:b8:
         18:5f:f4:2d:7a:22:8b:ef:ef:b8:b1:bc:4d:2e:19:71:34:d7:
         d1:2d:be:78:2f:ab:6a:0f:11:10:97:ee:ed:81:d4:c2:12:25:
         f0:da:18:01:c7:ed:72:82:9b:b6:c3:43:32:27:40:c4:31:1f:
         ca:74:92:1b:25:81:3b:6c:ae:c3:8e:d9:2c:4e:17:09:b3:09:
         81:b1:f6:5a:6f:aa:e3:e1:c4:17:be:5f:9e:36:b9:23:04:d4:
         4d:2c:91:6d:ad:fa:c5:48:03:1c:8c:0e:29:76:79:d2:11:08:
         ff:04:51:51:8a:f0:e5:82:dc:ff:ac:d7:16:63:77:fe:4c:a6:
         c3:71:b6:ba:74:08:43:7d:a0:79:27:42:e5:e9:d9:16:45:cb:
         4b:16:8d:7a:dc:09:2e:ae:6f:69:84:9b:69:d7:5a:f6:8b:53:
         3a:19:da:5a:36:33:bc:4a:b1:1f:fe:3c:57:b9:6d:5c:d2:c5:
         20:f9:8b:53:7f:d4:a9:03:96:3e:a7:d3:11:fc:75:dc:1b:47:
         35:a6:81:8c:b4:3b:83:0a:e5:43:16:df:ac:98:63:b2:a6:11:
         85:26:6b:a0:d0:25:0d:68:ea:0d:da:6d:0a:b9:09:30:a5:f9:
         56:0a:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org