Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f5d2745ebb6c035dc4cc096b42f7b10d090b0e77.roa
File:                     f5d2745ebb6c035dc4cc096b42f7b10d090b0e77.roa (raw, json)
Hash identifier:          +cPONnrndF42Eob1j4dKiIRpUlGSUM4wP5T9FSq3b8A=
Subject key identifier:   02:74:7E:89:C6:A2:FD:A0:75:2D:34:8E:BA:3B:84:17:8A:E9:FE:60
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       136F6A
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f5d2745ebb6c035dc4cc096b42f7b10d090b0e77.roa
Signing time:             Thu 30 Dec 2021 17:51:56 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     207326
IP address blocks:        181.215.245.0/24 maxlen: 24
                          181.214.161.0/24 maxlen: 24
                          181.215.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273706 (0x136f6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=f5d2745ebb6c035dc4cc096b42f7b10d090b0e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:c5:a0:b5:5a:36:bc:bd:ed:c1:dc:d3:b6:
                    97:ff:1b:f1:2a:08:81:ce:7d:43:cb:b3:f7:2d:74:
                    c8:f7:45:f6:4d:ba:2e:ff:7f:f5:61:c0:be:a9:9e:
                    b8:25:a3:a9:6c:cc:69:36:82:64:24:e9:52:e0:68:
                    6a:72:b3:e1:a8:f7:66:1e:ba:2f:d3:5c:00:52:d2:
                    17:08:e9:cf:11:6d:86:a0:e9:e4:6c:a3:1e:a1:f4:
                    43:89:96:f6:72:83:20:10:44:63:91:70:3b:ec:a4:
                    02:de:c9:59:09:3e:10:65:8c:7c:73:e3:9a:a2:7f:
                    46:14:4c:8a:25:cc:be:4f:49:d0:b9:3f:e8:9e:ce:
                    42:1f:f7:22:65:92:80:21:3d:d6:54:7f:53:62:2c:
                    da:f6:9f:07:3b:81:1a:33:dd:ed:65:94:33:20:03:
                    1c:f0:d3:cc:a8:9d:73:36:9d:f6:c7:fb:10:aa:86:
                    53:00:d3:fb:e2:90:bb:7e:3a:32:96:70:fd:2c:cf:
                    90:88:34:02:3b:f6:ac:cf:e7:fb:eb:b7:98:75:46:
                    7d:80:e8:64:52:8b:32:fc:f9:85:14:d0:b4:7a:c7:
                    05:ce:f5:32:b4:58:b1:e3:00:41:3c:5d:ff:ba:0b:
                    2d:04:ec:ee:ed:ee:e7:24:0f:cd:e6:81:98:d1:dc:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:7E:89:C6:A2:FD:A0:75:2D:34:8E:BA:3B:84:17:8A:E9:FE:60
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f5d2745ebb6c035dc4cc096b42f7b10d090b0e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.161.0/24
                  181.215.221.0/24
                  181.215.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b5:c9:87:fe:12:9e:b1:a1:19:c8:d0:af:68:0d:fc:87:d7:
         e2:8b:57:a9:c3:bf:79:2b:6a:a1:df:72:3d:4e:08:f3:93:eb:
         80:d5:65:cc:86:31:47:1e:ae:e7:cf:ce:37:58:08:73:10:1e:
         16:45:26:46:c6:b9:bd:ad:f1:cf:08:7c:a1:a3:bf:ac:0e:eb:
         b5:ff:78:2a:7f:c0:83:e5:12:16:ec:b4:b0:0b:5e:cd:9b:3b:
         aa:09:84:8d:08:f9:3f:11:b1:90:4a:3c:2a:ff:6d:39:f9:e6:
         74:b5:1c:0c:69:45:17:96:2a:7d:51:41:2c:69:8f:98:29:e0:
         11:53:09:bc:8c:ce:f8:19:df:47:5b:cb:22:45:29:8f:65:72:
         59:e3:01:a5:71:fa:12:d0:49:cf:16:ac:db:2c:06:f8:4a:c8:
         b9:5d:a7:6c:67:08:5e:35:08:90:6c:9b:89:6f:dc:03:55:2e:
         fc:b2:78:97:c1:73:13:bb:10:f1:ac:77:b6:0d:fd:ae:f7:0d:
         e4:8f:78:44:f6:eb:51:92:a6:d5:b7:72:05:4a:ab:c5:f0:f2:
         65:23:14:eb:af:d3:51:fc:72:2c:f3:b4:9d:55:49:58:7c:56:
         22:45:85:95:fa:1a:8e:b6:65:9f:74:bd:4b:f3:83:98:07:31:
         37:13:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org