Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f914b53b7ea46f3e89ba022b203d124c062b4a91.roa
File:                     f914b53b7ea46f3e89ba022b203d124c062b4a91.roa (raw, json)
Hash identifier:          4iOgWeu88MsiTYqW0sTFSZpDFUb7XyV9rf+M+dE9g8U=
Subject key identifier:   DA:2A:AE:69:5A:10:15:9C:23:4B:5B:43:F2:20:56:CC:9B:BA:2E:05
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       152A47
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f914b53b7ea46f3e89ba022b203d124c062b4a91.roa
Signing time:             Fri 28 Jan 2022 18:56:23 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     210356
IP address blocks:        181.214.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387079 (0x152a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=f914b53b7ea46f3e89ba022b203d124c062b4a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:cc:6e:8f:20:61:db:94:8e:45:bb:69:00:
                    55:54:4c:7e:72:ab:80:99:68:5d:56:26:fc:bd:5f:
                    1a:5d:53:e0:b3:67:14:42:fc:e4:42:8e:ed:6b:56:
                    bb:55:00:65:71:b0:42:3c:eb:62:a0:f1:b3:60:c6:
                    81:1a:66:9c:b6:89:a0:84:fa:0a:c7:20:22:3e:eb:
                    b3:66:89:50:39:2d:58:8c:e5:99:a5:17:af:6a:eb:
                    ac:4d:5a:37:a9:cd:f9:cc:51:7e:5c:33:7c:c9:a1:
                    1d:9b:39:b7:de:5e:8c:26:b3:bb:24:63:87:4c:46:
                    79:83:17:bd:18:4f:d4:69:7e:08:c2:dc:e1:d1:29:
                    94:43:94:43:42:ca:af:ab:d6:31:fe:b6:a2:9b:49:
                    d8:b2:34:17:bb:07:69:48:1d:c9:02:7b:00:25:b9:
                    8f:44:26:80:bb:24:82:27:33:64:41:91:7d:36:39:
                    3c:29:4a:a4:d0:19:2b:5a:13:62:cb:0d:fe:f4:5e:
                    c5:fa:d4:ae:0b:1d:72:1e:49:98:4d:92:db:3c:c5:
                    7a:41:ac:3e:c2:58:95:14:fc:17:24:7f:ec:c0:f2:
                    52:79:e5:b8:14:9e:61:df:f2:13:23:83:6e:e3:34:
                    5a:7c:fc:7f:72:d5:8f:7d:35:b2:ec:39:b6:95:37:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2A:AE:69:5A:10:15:9C:23:4B:5B:43:F2:20:56:CC:9B:BA:2E:05
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f914b53b7ea46f3e89ba022b203d124c062b4a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:75:71:6a:2b:96:34:f5:8f:09:79:e4:b2:0b:dd:dc:6d:
         6a:73:e0:8a:4c:79:e9:f3:c5:c0:a2:c6:5a:00:7a:a2:30:4e:
         34:17:c4:76:f8:59:a4:fd:de:43:b9:d4:07:20:86:fe:2d:ef:
         dc:d3:ab:b4:5f:05:03:04:b2:b3:61:da:b0:e8:0d:2d:cb:aa:
         13:a5:49:1e:71:f7:ba:fc:e0:c2:65:79:07:5e:1d:cc:3b:72:
         db:31:72:6b:31:90:af:dd:f9:46:85:39:4f:9b:9b:dc:fa:8c:
         3d:6d:a3:c4:6b:46:7b:3f:72:04:62:a7:c1:49:36:1b:5f:be:
         99:c8:ce:57:2d:d0:bb:7a:2f:f5:dd:72:cd:15:a3:93:ef:25:
         71:17:c2:df:4a:f0:f9:5b:26:22:ce:ff:bc:7a:13:4e:15:6a:
         19:40:75:5f:7a:60:15:d9:a0:f6:0e:86:81:b3:db:8f:1b:94:
         49:3a:a0:16:0a:57:d8:90:82:cb:b6:42:47:ed:ab:0b:20:bb:
         cc:ec:d4:2d:fe:8d:e4:b3:4d:d1:ee:2e:26:9e:3c:f2:0f:ba:
         e7:41:41:1f:2b:c0:93:b6:3a:e7:8a:04:a1:08:ac:76:df:88:
         c8:c0:28:03:33:88:e0:76:36:90:ac:1f:ea:fd:d8:72:2a:cc:
         4c:f6:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org