Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e414fc3231805dc06c6cec90beaa1ffe5790e18c.roa
File:                     e414fc3231805dc06c6cec90beaa1ffe5790e18c.roa (raw, json)
Hash identifier:          upn/ayeJDvvyvIYhzaP3Mh6sYFsMCVgBy7U5bQCqySI=
Subject key identifier:   3C:D9:43:73:C6:79:7D:69:DC:10:63:53:2A:7C:06:8B:43:18:03:DD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       067F78
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e414fc3231805dc06c6cec90beaa1ffe5790e18c.roa
Signing time:             Wed 24 Mar 2021 14:33:36 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     53340
IP address blocks:        191.96.178.0/23 maxlen: 24
                          181.215.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425848 (0x67f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=e414fc3231805dc06c6cec90beaa1ffe5790e18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:e1:7c:bf:6f:b9:1d:2d:3c:f7:3d:b3:4e:
                    c9:6c:36:3d:37:1f:c3:75:d4:77:a4:7a:f4:24:1f:
                    0f:48:f7:a3:3c:6f:ae:bb:16:5f:a1:18:9f:d1:2d:
                    44:90:64:6e:26:6e:cf:ad:0b:88:56:72:0f:f1:2d:
                    a4:d2:ed:0a:5b:f6:30:2d:55:76:57:23:62:15:98:
                    96:95:12:71:4d:02:2c:6d:05:75:27:1f:4c:ce:49:
                    41:71:93:28:fc:b0:7b:7d:7c:4e:9d:16:63:1c:e1:
                    6d:3a:5b:08:a7:ed:3f:2a:47:6c:c0:80:85:84:12:
                    7d:5e:75:aa:0e:b8:cd:7c:e7:5c:f9:11:63:2c:55:
                    ed:8a:45:fd:ed:e1:83:4f:34:7d:34:98:40:cf:da:
                    6f:ec:b7:25:24:83:44:b8:17:b1:72:b6:0a:8d:00:
                    33:48:f0:67:0e:d4:e5:98:cf:71:1d:1c:de:33:16:
                    74:63:2c:5c:a5:95:15:a8:c0:0e:81:bf:93:3a:36:
                    42:99:ce:e6:72:51:d1:b3:42:f1:24:d3:5c:63:f2:
                    74:e9:f3:e8:45:13:15:57:2c:82:57:8a:f5:d0:83:
                    6a:46:11:a2:40:83:8d:7b:81:bd:3b:27:92:e5:90:
                    66:99:a5:b1:2c:57:12:e4:b3:65:27:24:07:fc:a4:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:43:73:C6:79:7D:69:DC:10:63:53:2A:7C:06:8B:43:18:03:DD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e414fc3231805dc06c6cec90beaa1ffe5790e18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.249.0/24
                  191.96.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:8b:c2:6b:02:4e:13:81:81:9e:0d:a9:89:51:ee:d3:e6:
         d5:c8:53:1d:4e:7c:db:da:01:10:a0:c8:09:65:95:e5:54:b0:
         71:27:12:b0:c8:1c:67:ee:5b:cb:57:75:4f:9a:45:37:c8:9d:
         e4:1f:c4:b8:f8:8d:14:f8:45:fa:19:4a:20:8f:f9:b1:19:61:
         fc:6b:01:b3:b7:1c:07:38:20:06:da:7e:73:f1:67:09:ce:f2:
         76:83:f7:b1:f8:ca:e6:98:b5:86:d3:87:a6:25:ad:f0:b9:87:
         0b:0f:31:4a:d6:9a:89:d5:37:b8:d8:34:0b:18:83:f9:4c:31:
         92:9b:dd:22:7b:7c:dc:f7:d3:c9:9c:5c:8e:e3:57:2a:48:c2:
         75:1f:cc:f8:b9:f9:ab:61:06:37:56:ba:b1:d4:f7:82:70:41:
         c6:12:29:a1:ee:05:79:16:d9:49:00:01:9f:77:41:85:df:52:
         1a:d7:89:14:50:6a:5e:e6:fe:e0:54:5a:41:94:99:d4:6c:e6:
         d7:fe:21:dc:65:61:69:5d:09:14:4f:81:84:0d:95:01:1f:e9:
         aa:a0:8c:10:4b:1b:eb:0f:a6:95:54:47:9a:6b:8f:e7:79:99:
         8a:7a:40:56:b4:37:cd:81:38:bc:8d:f7:eb:e1:2c:47:c5:0a:
         35:cd:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org