Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d94013e7c7f3cbcf3198a6265019f778d3f377fb.roa
File:                     d94013e7c7f3cbcf3198a6265019f778d3f377fb.roa (raw, json)
Hash identifier:          gfSRbJgfrYZZqjghT52tKxl705AeUcbE8gpMy0lYnXg=
Subject key identifier:   84:76:5C:99:C1:E8:1D:35:26:92:E5:84:3A:C9:5B:21:D5:F1:D1:A7
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0C8591
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d94013e7c7f3cbcf3198a6265019f778d3f377fb.roa
Signing time:             Fri 13 Aug 2021 17:51:37 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     210979
IP address blocks:        191.96.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820625 (0xc8591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=d94013e7c7f3cbcf3198a6265019f778d3f377fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:3c:2e:16:72:07:58:f4:b0:a6:f6:2a:6b:
                    32:0d:c7:52:a6:ea:e2:95:83:7a:c6:ed:92:84:6a:
                    af:06:8e:5e:fe:65:05:a8:54:57:63:99:21:7f:45:
                    f9:eb:4c:39:c2:e1:d8:9b:6b:02:ed:46:2a:d1:8d:
                    71:b8:63:f8:61:7e:e2:6a:9a:c5:95:cc:49:58:10:
                    9c:12:50:1b:a4:75:e3:dd:f4:f1:8e:3d:22:cc:d3:
                    23:a0:df:ff:4e:5a:bb:91:97:7a:fe:9a:5d:ee:d3:
                    68:a7:84:71:c7:39:f6:13:6f:36:02:f8:7e:1c:4f:
                    cb:8a:0c:ce:1b:27:c0:2f:72:9b:38:0a:51:af:b2:
                    bd:61:0b:8e:14:62:0a:06:31:05:1a:27:50:0f:09:
                    f8:de:b4:da:46:d6:b4:84:87:6e:e1:9d:36:e1:06:
                    f9:33:03:95:ba:c8:a9:06:1d:8b:c6:68:42:9d:b2:
                    e7:bd:d0:b4:43:7c:8f:ea:21:3c:79:db:35:38:c2:
                    dc:a2:4c:0d:46:15:f4:47:bb:ac:ef:6b:38:a5:b2:
                    ac:11:2f:e6:a0:39:5a:f8:3c:53:23:b6:6c:65:0e:
                    9f:64:c5:8e:7b:9f:08:59:4c:87:ae:97:18:0b:f0:
                    56:65:45:b3:e2:6d:ac:40:16:dd:a0:d0:89:c7:c5:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:76:5C:99:C1:E8:1D:35:26:92:E5:84:3A:C9:5B:21:D5:F1:D1:A7
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d94013e7c7f3cbcf3198a6265019f778d3f377fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:aa:97:72:a1:ae:9e:ab:7e:1d:66:2a:db:5b:5d:2d:e5:1d:
         68:59:12:e4:87:6e:71:0e:a1:d8:ba:9c:b3:bd:8c:3e:23:12:
         4b:f0:1f:f6:23:62:77:80:b1:7c:bb:5a:53:0b:ee:91:5a:c8:
         db:34:0a:64:1b:7c:b3:c9:25:b2:85:79:93:86:f4:b7:5b:15:
         74:40:c0:cb:0d:11:a7:e2:ba:4d:a8:69:5a:d8:6f:50:35:c7:
         9c:e3:95:16:38:1c:40:7e:d3:2a:a4:c8:72:1d:42:14:09:a9:
         6e:a4:9b:e9:30:6b:15:2f:ba:e2:a1:f7:0b:f6:08:c0:84:d0:
         d4:a9:14:72:20:5c:a8:91:cc:70:49:05:c6:de:0b:69:65:de:
         2a:6a:6b:ae:d6:76:0a:65:8c:99:be:3a:8d:66:55:f7:c4:70:
         f7:34:80:bf:40:6a:eb:d0:2e:4b:53:5d:a4:be:e0:8f:b5:9a:
         3f:d5:57:c9:10:4c:20:c6:ff:1b:46:ba:a0:16:d0:77:ee:14:
         0c:ab:03:51:4f:ed:70:0a:42:6a:53:ea:a8:42:42:e4:67:69:
         6f:72:7b:ed:b0:db:fb:9a:af:e5:ad:8f:43:cb:6c:ae:17:f6:
         a3:9a:c3:31:47:f2:85:31:4f:c3:fb:70:f2:0e:aa:44:ed:ce:
         b7:80:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org