Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e01dbd7646d5a7ce68b08113e8bb70825eea2f85.roa
File:                     e01dbd7646d5a7ce68b08113e8bb70825eea2f85.roa (raw, json)
Hash identifier:          Y022jLArCW6T1ur8suympsvoJ4wguyGeV+lx4mAGxbo=
Subject key identifier:   FA:F0:5D:1D:7B:C3:01:FC:7D:D6:84:13:A6:E5:FE:BA:56:90:EB:88
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       066B4C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e01dbd7646d5a7ce68b08113e8bb70825eea2f85.roa
Signing time:             Wed 24 Mar 2021 14:33:36 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     61317
IP address blocks:        181.215.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420684 (0x66b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=e01dbd7646d5a7ce68b08113e8bb70825eea2f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:4b:38:49:ea:80:44:0f:0e:2f:da:77:b9:
                    01:23:b8:68:fe:f4:53:5c:15:6d:40:69:b3:f2:6d:
                    2b:35:81:bc:c9:d0:b1:d5:09:02:bc:d0:3d:95:48:
                    cf:20:ff:9f:4b:ff:80:c7:27:ef:35:96:0e:c3:6c:
                    c1:38:d9:33:e4:61:58:e9:04:aa:96:d1:42:d8:f0:
                    90:f2:6b:a4:f7:fd:59:c4:a6:60:1a:a9:7e:d2:36:
                    cc:4b:ba:30:4e:27:17:2c:56:93:28:64:5d:41:6d:
                    64:eb:57:b1:e2:1a:06:4a:8d:74:87:14:c5:6c:be:
                    ba:76:34:a5:bd:53:9a:19:5d:2a:0e:17:40:5c:3f:
                    c9:07:7e:65:05:c1:68:01:37:b6:7a:14:ca:f4:70:
                    e2:55:4f:f4:b7:e5:54:8a:8c:8a:a0:11:52:fb:82:
                    9c:84:5b:09:92:e8:dd:94:ad:11:f1:29:63:83:26:
                    f0:31:76:78:9e:a1:8f:84:d0:c7:38:e7:bf:1d:27:
                    5e:b2:ff:af:30:08:66:fe:2f:c2:dc:36:13:12:d4:
                    ee:fe:4a:31:b7:02:e4:11:74:b5:9b:08:b6:5a:cd:
                    09:f8:ed:8c:13:a9:75:e6:12:63:3f:2a:50:c3:bc:
                    b0:da:c4:1d:fe:83:e2:1f:ee:89:96:8c:87:54:78:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F0:5D:1D:7B:C3:01:FC:7D:D6:84:13:A6:E5:FE:BA:56:90:EB:88
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e01dbd7646d5a7ce68b08113e8bb70825eea2f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:9c:f4:5c:4b:2d:7f:69:bf:36:89:c8:c8:69:64:6b:b5:
         39:01:31:d4:60:dc:64:52:f1:c5:61:99:b9:77:c8:b6:90:3a:
         7f:64:de:b0:00:1b:f2:35:0e:42:1d:5a:85:e5:43:a4:df:d8:
         b7:83:a3:96:ef:51:03:08:10:65:55:44:2d:19:b1:03:c0:bf:
         b6:d7:60:af:50:ee:3e:68:a3:9a:2c:f1:14:3b:a2:63:0a:80:
         aa:38:26:1e:44:af:42:8b:52:a4:af:25:51:51:96:12:51:2c:
         db:a8:18:cc:c4:2a:81:7f:5b:99:fc:ea:ca:10:f7:8e:eb:1c:
         ae:ef:b9:33:7c:e3:6b:29:23:32:95:c3:80:46:55:23:4b:16:
         d6:60:52:c7:83:96:24:a1:d1:d0:f2:9e:8b:14:d0:15:49:79:
         85:92:aa:76:52:59:2b:9c:57:ae:f9:23:99:fd:47:04:04:8b:
         54:e3:8b:ea:21:49:5c:e6:7a:e2:55:4d:4d:f2:0d:66:d0:d4:
         7d:29:a9:cc:b6:31:f7:23:02:44:bf:66:fe:db:7f:40:7d:f2:
         50:f8:8b:a2:0f:c2:1c:d6:f8:88:31:b5:8d:29:d2:c7:d3:a9:
         ee:c9:8a:8b:c9:e7:02:53:0c:45:38:e0:41:3c:7c:0c:af:d1:
         e9:f7:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org