Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd9ec637ffb45fc6629e833ff7b530b99ca71df5.roa
File:                     fd9ec637ffb45fc6629e833ff7b530b99ca71df5.roa (raw, json)
Hash identifier:          nByM4sd170jLB2tOkNSG4mONEAu+W9YI4LhUrNFA4Ps=
Subject key identifier:   56:F2:92:DD:A6:7C:6C:97:73:5B:B3:28:56:D6:A5:9A:36:3A:1F:36
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       139B14
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd9ec637ffb45fc6629e833ff7b530b99ca71df5.roa
Signing time:             Wed 05 Jan 2022 04:18:22 +0000
ROA not before:           Wed 05 Jan 2022 03:00:00 +0000
ROA not after:            Fri 05 Jan 2024 03:00:00 +0000
asID:                     400040
IP address blocks:        181.215.198.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          181.214.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284884 (0x139b14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan  5 03:00:00 2022 GMT
            Not After : Jan  5 03:00:00 2024 GMT
        Subject: CN=fd9ec637ffb45fc6629e833ff7b530b99ca71df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:df:72:d2:04:94:bd:81:75:56:54:ec:dd:
                    3f:e2:72:6c:5c:2e:2d:ae:8f:5c:fa:8c:f5:39:6a:
                    8f:61:a9:60:fb:70:3c:29:37:5a:aa:e6:bc:c5:ad:
                    06:50:1e:af:19:b0:8f:66:4a:3a:51:30:48:48:f9:
                    da:6a:78:96:38:cc:d9:d0:07:97:00:0b:9b:10:b5:
                    44:70:9f:3d:b4:74:e6:1d:4d:b9:e6:21:ab:d1:72:
                    04:2c:fc:d9:e3:20:37:5b:f8:cb:4a:7b:70:ca:5b:
                    5b:55:f0:32:12:91:36:65:fa:35:27:46:6e:6b:0a:
                    72:a2:a8:40:fb:72:a6:1e:07:2c:5d:f5:79:13:72:
                    fa:a6:b0:0f:2f:33:bf:15:63:49:f7:19:87:ff:ad:
                    58:77:90:8c:65:ba:59:a3:45:c1:81:45:e5:ba:3e:
                    7a:d9:ed:14:4e:20:b9:15:49:3b:b1:c2:de:ca:1b:
                    45:51:50:57:aa:10:9c:4d:cb:f4:86:99:6a:fd:7c:
                    81:64:65:ba:a7:56:76:44:31:22:f3:3f:6f:37:a1:
                    a8:60:36:8f:47:e4:04:30:e3:f5:b6:fc:c2:3a:35:
                    b0:bc:0c:82:d8:02:77:e3:c4:24:99:7a:53:22:63:
                    90:e7:80:c3:0a:8e:c2:45:49:b5:8a:45:72:d2:06:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F2:92:DD:A6:7C:6C:97:73:5B:B3:28:56:D6:A5:9A:36:3A:1F:36
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fd9ec637ffb45fc6629e833ff7b530b99ca71df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.214.0/24
                  181.215.198.0/24
                  191.96.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:00:98:ba:9e:b3:99:c3:5d:3b:09:62:04:52:8a:bd:4f:1e:
         cc:df:75:e0:f9:07:58:f2:c9:72:1f:b6:5a:04:af:0a:b7:2d:
         a3:2b:cb:61:42:0e:0f:b9:85:52:7d:37:e4:2e:3e:da:07:11:
         72:27:31:ec:3a:54:ba:30:3b:58:15:92:69:36:97:de:38:02:
         2a:b7:d8:a8:ce:a6:ef:c7:14:77:79:a0:18:6e:0c:89:bb:1a:
         a0:3e:61:2e:e4:44:6b:af:d3:19:1b:2f:96:b5:ab:b3:5c:f6:
         5e:a6:9a:e2:e1:66:da:2c:98:37:fe:e3:69:06:31:ef:46:8e:
         16:0d:59:a1:e9:13:1b:97:35:68:ad:fd:1d:42:dd:3c:ea:e5:
         74:41:27:a9:4f:a9:64:5f:72:3f:fd:44:0c:34:b9:79:39:a6:
         56:c2:40:8f:53:8a:cc:33:05:a6:8a:bd:1c:4d:75:5f:6a:40:
         5c:b1:53:26:21:e8:33:1a:77:3d:2b:4f:35:10:c3:1b:f4:d0:
         6a:67:62:35:e3:78:7c:82:87:8c:6d:56:90:6a:0a:ee:3f:79:
         6d:cc:e4:80:b2:8d:c9:47:83:93:70:31:a8:70:b3:07:59:62:
         d7:b4:00:ad:cf:fd:0d:27:e1:e2:e2:2f:69:85:92:97:46:53:
         b1:f3:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org