Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f14514f23dc5f43c1c529cab30cf590f1f738a87.roa
File:                     f14514f23dc5f43c1c529cab30cf590f1f738a87.roa (raw, json)
Hash identifier:          30TOH5TH+Pu1zFabXV9LRMxUJiAsfwoGRr5nZ7VQMD0=
Subject key identifier:   5F:5D:CB:AD:A9:2A:19:F7:BC:E7:E3:19:5D:A4:BF:B6:6A:4A:CA:73
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1597BA
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f14514f23dc5f43c1c529cab30cf590f1f738a87.roa
Signing time:             Tue 01 Feb 2022 18:29:29 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Thu 01 Feb 2024 03:00:00 +0000
asID:                     43260
IP address blocks:        181.215.75.0/24 maxlen: 24
                          191.96.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415098 (0x1597ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2024 GMT
        Subject: CN=f14514f23dc5f43c1c529cab30cf590f1f738a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:d6:38:16:b0:ca:1f:1d:14:d9:84:a4:4c:
                    3c:78:09:91:3a:42:a3:b3:53:50:81:7b:c2:19:15:
                    1e:98:d9:b3:6f:32:75:80:2b:28:0c:62:44:31:09:
                    58:ff:9a:2f:22:48:1c:10:98:17:66:3b:61:21:90:
                    2e:0e:3f:82:29:6c:e2:f8:b2:ce:a8:7a:b6:4a:7e:
                    ce:33:a7:57:ba:50:1f:6e:4b:9a:eb:e3:37:eb:ba:
                    c4:1e:ee:68:f6:49:72:5c:7e:c1:ee:a4:26:9f:a7:
                    9a:cf:79:ed:b8:38:79:7c:ca:39:da:cf:6e:b8:ec:
                    80:59:bd:b6:ad:e4:75:55:50:b4:f4:f6:4f:04:4e:
                    26:4e:aa:87:68:ff:66:22:76:e6:3c:cc:29:02:8b:
                    fd:41:b6:08:ca:2b:73:2c:79:69:b8:c4:5c:1e:aa:
                    fe:f2:6d:cc:4e:3d:fc:05:a8:d3:ae:b1:56:9b:29:
                    41:55:9a:b8:d8:8a:f2:7f:70:af:8a:77:3b:df:39:
                    8c:56:ba:c7:43:96:d9:29:d8:c6:88:bb:7d:e7:fe:
                    40:3f:d9:6f:0e:dd:11:27:7b:c1:e7:05:62:d9:00:
                    5c:63:41:43:cb:16:bb:e5:f7:84:16:3f:24:a7:d4:
                    50:23:22:2f:be:da:83:d6:3e:ca:c9:c4:4e:c1:6c:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:CB:AD:A9:2A:19:F7:BC:E7:E3:19:5D:A4:BF:B6:6A:4A:CA:73
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f14514f23dc5f43c1c529cab30cf590f1f738a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.75.0/24
                  191.96.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:44:65:a6:41:63:91:f3:ce:c7:1a:4a:d2:c3:c0:46:1e:5d:
         f4:83:a6:1a:a0:9d:a9:88:7b:04:55:f7:a0:18:1c:53:62:e1:
         81:32:64:2f:ee:c5:2a:b3:56:72:56:eb:9b:9a:5f:b8:10:ab:
         53:5c:bc:fc:c8:cc:f9:5a:7e:e1:d4:94:48:2a:f8:96:74:63:
         e2:a1:a2:99:5f:f5:7a:f2:4c:37:8d:06:0a:5b:90:f6:1a:c0:
         7a:0e:db:fa:20:26:0d:21:7b:4a:7f:91:53:dd:f1:5c:cc:10:
         a1:c6:61:48:2d:52:18:ac:fa:cc:16:ce:46:b5:20:18:73:ca:
         7e:b5:5c:5b:8f:35:c6:49:92:d6:58:b0:b2:4f:9d:73:f2:bd:
         1c:aa:73:f3:27:f5:32:05:4a:9b:14:95:2a:78:a8:ff:17:0b:
         ff:91:23:8a:a3:00:d6:6c:75:69:7c:3e:39:87:3a:e9:dc:6a:
         f8:1e:be:f1:57:bf:78:ff:92:c0:2e:2f:db:c2:dd:4e:47:f4:
         0c:35:f1:e4:a0:c6:ae:30:3e:21:34:e6:1b:d7:ff:d5:56:b9:
         da:e3:3d:81:48:d4:60:d6:cc:0b:b8:e6:c2:e3:47:42:83:9b:
         b1:3f:97:d1:a9:c7:e4:38:ac:36:05:d7:12:1d:e0:9c:be:f5:
         d0:ae:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org