Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd85e6198385fad9f32457d8aa912c8ab6680dd2.roa
File:                     fd85e6198385fad9f32457d8aa912c8ab6680dd2.roa (raw, json)
Hash identifier:          WGoDADwq/gsDXGesHW32FufpQ8uT2z5rbnjHENVlU/w=
Subject key identifier:   B2:65:5C:BC:4A:62:6D:99:C1:FE:F1:E4:F4:24:64:4A:2F:E3:6B:EE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       16898D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd85e6198385fad9f32457d8aa912c8ab6680dd2.roa
Signing time:             Wed 23 Feb 2022 20:57:45 +0000
ROA not before:           Wed 23 Feb 2022 03:00:00 +0000
ROA not after:            Fri 23 Feb 2024 03:00:00 +0000
asID:                     400229
IP address blocks:        181.215.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477005 (0x16898d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Feb 23 03:00:00 2022 GMT
            Not After : Feb 23 03:00:00 2024 GMT
        Subject: CN=fd85e6198385fad9f32457d8aa912c8ab6680dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:63:14:b2:9a:3a:3a:ac:71:6e:35:54:eb:
                    09:38:1f:4c:73:88:87:05:dd:9a:23:07:65:0a:76:
                    e5:35:e4:8c:9b:d3:5c:67:4b:62:3e:7d:ee:f5:a6:
                    70:79:5d:9d:65:1a:2f:83:bc:4e:fe:2c:ff:d7:9d:
                    90:0a:45:81:29:14:06:eb:b3:96:5b:1f:b4:2c:02:
                    1f:a8:4c:d8:99:6a:56:1b:1b:a2:90:15:4f:53:70:
                    8f:97:2c:c9:50:ca:76:b3:63:db:3e:7c:1d:b2:19:
                    46:f6:7f:fb:cb:b5:3a:58:f2:ad:aa:c2:ab:ab:22:
                    7d:c5:97:23:fe:17:aa:f5:f1:11:67:79:2c:95:fe:
                    36:f2:d7:7d:a8:2f:30:ce:80:47:cf:19:20:ae:5b:
                    11:eb:b2:d4:f2:77:09:88:7e:ef:b6:b7:d8:79:52:
                    e4:10:1c:3c:b5:96:0e:ba:b1:61:47:20:97:cd:53:
                    5d:c6:78:83:78:24:1b:f3:62:48:8e:6b:18:29:18:
                    8e:54:ce:0d:0a:e5:24:98:e0:f2:94:22:31:6e:f9:
                    21:7a:98:da:34:4a:70:24:38:26:a9:6e:3e:50:92:
                    ee:cb:1d:29:2e:c1:2f:b2:a0:20:8d:b5:f9:c2:86:
                    3b:71:6a:60:91:a7:16:0f:21:64:60:4d:3c:33:3b:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:5C:BC:4A:62:6D:99:C1:FE:F1:E4:F4:24:64:4A:2F:E3:6B:EE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd85e6198385fad9f32457d8aa912c8ab6680dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:27:a3:1a:37:91:c3:2a:28:96:fe:70:89:04:0b:cf:10:
         be:47:89:17:a8:c2:8b:d0:94:09:0d:d0:cd:98:e0:36:5c:4e:
         ae:ec:79:64:ec:5a:df:41:53:a4:05:d1:44:89:5f:a5:cc:34:
         4c:a8:f6:a7:7a:9e:70:44:5d:25:a3:53:cd:ad:dc:24:7f:dd:
         3d:38:74:2e:40:a4:d6:f7:ac:0a:e0:0b:cd:bc:78:c0:35:67:
         34:68:9e:eb:fb:e8:54:a9:11:2b:4e:dd:ad:d8:4f:08:93:51:
         6e:32:4e:a3:39:be:cf:73:cc:14:bb:15:5c:8a:ac:66:f4:79:
         46:a9:fc:f0:44:d6:03:bc:db:88:2a:68:43:bc:97:35:56:60:
         d5:56:ed:fb:57:ab:fc:17:58:f0:54:e5:9c:b1:f7:26:e6:ad:
         72:ef:2a:4e:05:56:a4:ff:67:a6:06:84:6f:43:05:75:b9:0a:
         e1:d7:4e:d9:0d:5f:f5:36:75:c3:e8:7e:63:6b:71:17:8b:84:
         fd:73:d8:70:9e:64:8d:ad:f9:07:35:13:f8:e1:e7:b0:08:41:
         b2:cc:88:6a:e8:53:b8:55:18:0b:19:63:58:b3:9f:cc:77:c1:
         a6:41:d1:c1:7d:a9:27:0f:a5:fc:4c:f3:3c:4f:1e:5f:5f:19:
         be:f5:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org