Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e013cfaba0c6042a49da5b5bfee014d1c44e96f6.roa
File:                     e013cfaba0c6042a49da5b5bfee014d1c44e96f6.roa (raw, json)
Hash identifier:          LjYcxlZqLLVLyEoJp0okk40v7kf25a4/1okDNwsjbrk=
Subject key identifier:   92:77:B1:DE:8B:0C:EA:D3:16:84:8E:D0:BB:C0:86:56:D3:B2:A9:5A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06DBBF
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e013cfaba0c6042a49da5b5bfee014d1c44e96f6.roa
Signing time:             Wed 24 Mar 2021 14:33:38 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     20860
IP address blocks:        191.96.208.0/24 maxlen: 24
                          191.101.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449471 (0x6dbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=e013cfaba0c6042a49da5b5bfee014d1c44e96f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:99:54:df:41:37:0a:27:3d:d7:e5:7d:e0:
                    f8:75:37:42:ea:66:6b:52:54:67:8c:4e:2f:c9:4d:
                    fc:e6:18:65:82:7a:70:4a:97:89:4e:5e:22:a0:43:
                    51:7c:12:5c:e4:bb:40:dd:59:5a:2e:88:85:44:de:
                    ea:2c:93:e7:85:8f:de:ec:c9:bd:a9:bc:23:40:e1:
                    2a:17:1e:dc:e8:3d:65:24:dc:c1:a9:7e:59:01:24:
                    ff:eb:ed:34:78:1b:38:19:db:9b:15:3e:bd:be:32:
                    8f:46:9b:e7:3a:e8:3a:8e:d2:d2:b2:a4:b9:f9:8f:
                    bf:ce:28:66:58:62:bb:af:3c:92:d9:c1:00:7c:2c:
                    81:16:4c:9d:39:e1:36:b1:64:de:cf:b4:91:77:64:
                    cc:cc:59:6d:7c:5a:78:e0:bb:6e:08:1c:3f:f5:2b:
                    c3:4b:39:ae:85:62:26:d5:45:d3:1f:f1:df:98:54:
                    09:89:68:34:23:55:e0:db:cb:a0:0e:84:a5:69:b0:
                    ce:32:c6:d4:f6:b0:ee:a2:ad:5d:3f:f0:4d:96:9f:
                    0a:cf:49:33:f1:d6:5f:ab:5f:e9:d7:ff:ff:93:4d:
                    d9:7e:44:24:bc:1c:90:13:e1:73:11:c3:a5:eb:3d:
                    d2:65:d4:0e:be:9e:17:b5:00:cd:fa:44:51:28:8b:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:77:B1:DE:8B:0C:EA:D3:16:84:8E:D0:BB:C0:86:56:D3:B2:A9:5A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e013cfaba0c6042a49da5b5bfee014d1c44e96f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.208.0/24
                  191.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:2e:57:b7:0e:ec:4b:3c:51:48:80:b2:7f:66:fb:83:85:
         04:05:9a:f4:3c:ce:a5:6f:81:8c:28:e6:ef:93:dc:e4:81:b3:
         3f:4c:18:3d:26:0d:21:88:26:35:df:5f:1d:a3:72:cd:21:fc:
         a8:48:1f:b9:b1:d2:f4:3c:65:31:73:01:be:16:b6:d6:62:4c:
         bf:51:0b:40:80:26:28:8a:6c:4f:65:6b:ef:21:03:f4:67:24:
         1a:d5:69:21:3b:06:70:a3:22:2a:8e:76:84:69:72:3a:f7:25:
         0c:1e:79:42:9b:a8:81:43:d7:02:78:e3:f1:b4:8a:c0:33:79:
         86:33:3f:50:2a:4e:83:75:f7:ad:ac:38:fa:a0:6a:93:11:56:
         46:29:c2:a5:14:6a:5d:05:13:5c:91:fe:95:1b:95:88:fc:a5:
         4e:e6:86:1c:0f:8d:7a:44:c4:56:ce:86:2b:3a:f1:ff:44:8a:
         79:ad:14:c3:2a:b8:5e:c1:b2:83:57:5f:f2:ff:fd:9f:42:ed:
         da:de:b7:d6:5b:7d:fa:68:e9:2e:a0:81:9f:e1:7f:50:28:ed:
         59:17:c1:e5:bb:ea:8e:38:bb:f9:91:92:b1:e6:d0:fb:32:06:
         dc:3f:7d:15:01:5b:c6:f9:a5:37:b6:3b:e1:79:e3:c0:05:79:
         31:38:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org