Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e2e195fa69742964fe912e10a0fd6da4be95a9e1.roa
File:                     e2e195fa69742964fe912e10a0fd6da4be95a9e1.roa (raw, json)
Hash identifier:          lUK2GOIYAdnsdC/Udp4AF2v/z+SHS3MoCbl5u+6qwZU=
Subject key identifier:   76:4A:F2:B5:61:8C:6D:27:6A:B7:DF:48:DC:CB:AB:E8:E3:CC:22:2C
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       098435
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e2e195fa69742964fe912e10a0fd6da4be95a9e1.roa
Signing time:             Mon 24 May 2021 09:38:33 +0000
ROA not before:           Mon 24 May 2021 03:00:00 +0000
ROA not after:            Wed 24 May 2023 03:00:00 +0000
asID:                     270014
IP address blocks:        191.101.192.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623669 (0x98435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: May 24 03:00:00 2021 GMT
            Not After : May 24 03:00:00 2023 GMT
        Subject: CN=e2e195fa69742964fe912e10a0fd6da4be95a9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:f5:68:18:2f:b8:9f:9c:31:9f:3a:b9:e7:
                    3b:e7:0a:d0:1c:89:50:0e:3c:e8:ae:f7:1c:3f:00:
                    25:91:1a:54:de:07:0b:41:4c:83:00:4f:d8:71:14:
                    44:cc:7e:af:2b:fb:f5:bd:f1:0d:fd:7f:7f:ac:30:
                    9f:75:80:45:cc:5d:a0:d7:04:12:e6:d3:57:ff:ce:
                    94:b6:b0:1c:ae:a7:05:6f:52:a0:de:d0:79:7a:7e:
                    29:0c:a5:2a:23:25:9e:44:58:c1:bd:f0:fa:a6:8e:
                    b0:14:1e:6a:03:af:21:fd:ef:22:fb:e5:08:c8:8e:
                    58:6b:97:16:08:02:c6:9b:09:9e:15:b3:b9:0f:1a:
                    a2:6a:95:cd:07:0c:e5:32:05:df:f9:8a:b9:fc:25:
                    a0:0c:d2:59:b8:8b:21:92:cc:49:b1:2f:2b:79:87:
                    48:80:7f:ad:02:7e:2f:af:ad:6b:84:aa:9d:0a:7d:
                    e6:49:33:79:31:0f:ce:96:c8:2f:b9:50:0b:fa:7d:
                    87:de:59:8f:37:fa:64:e3:49:19:92:34:c0:15:8d:
                    08:a0:cd:8f:6e:21:14:68:63:ae:d9:0d:10:46:c4:
                    9a:52:a4:8b:b4:43:f9:bf:58:b9:a3:84:58:01:01:
                    08:ca:16:f7:0f:2d:26:04:e3:cb:47:92:ee:ec:a7:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:F2:B5:61:8C:6D:27:6A:B7:DF:48:DC:CB:AB:E8:E3:CC:22:2C
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e2e195fa69742964fe912e10a0fd6da4be95a9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:ec:1c:6e:ab:d4:03:5a:cd:31:28:a6:d8:80:e8:c6:43:
         bf:42:a2:5c:4e:d1:8c:ab:e0:b1:d9:4d:33:f8:c1:52:bd:66:
         e8:8f:a5:74:5e:ec:c8:49:23:d5:ed:53:11:df:f0:7e:8b:38:
         37:07:5e:29:c0:e6:bf:fe:74:87:ee:08:71:9c:82:37:70:41:
         4b:95:03:fd:00:40:1f:c8:5f:26:b1:1b:f0:51:ee:4f:4e:62:
         03:8c:5d:a3:f9:f3:1f:e6:82:0e:fd:20:cb:de:76:15:46:15:
         28:32:a9:8a:66:96:33:e2:a1:23:3c:ad:d7:e1:97:38:19:5f:
         f7:0d:82:40:b7:74:14:a2:76:ad:50:9f:d2:19:19:b6:30:81:
         99:4b:f7:99:c3:40:25:1c:f2:d0:a1:fb:bb:e7:ab:59:79:91:
         c3:7a:15:5a:19:25:8d:9b:68:5a:9c:08:c7:39:7f:d7:d3:a0:
         e0:1d:a8:92:30:a4:5d:5a:ef:59:d8:c7:30:1a:7b:3b:52:d0:
         e9:3a:f7:72:7c:cb:4a:9c:bb:4d:ab:84:d3:73:93:0a:5e:82:
         be:59:6c:47:38:e9:49:84:fe:97:e8:c8:79:2c:c9:1b:57:d1:
         84:d8:c5:4f:f6:7e:01:dc:fd:cd:6f:dc:75:6a:5b:e0:b4:a7:
         f2:27:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org