Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa
File:                     fe1d02a0329ee295b07541539f533917090ee459.roa (raw, json)
Hash identifier:          mCF/FbBbc0pvJicxUraE+trfQZPYTtDzrEFXLOQeSoI=
Subject key identifier:   67:18:7C:C1:11:73:E2:12:C4:1F:B3:49:9D:A1:AC:A2:40:8D:58:21
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1245D8
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa
Signing time:             Fri 10 Dec 2021 21:31:20 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     210277
IP address blocks:        181.214.194.0/24 maxlen: 24
                          181.214.195.0/24 maxlen: 24
                          181.214.196.0/24 maxlen: 24
                          181.214.232.0/24 maxlen: 24
                          181.215.210.0/24 maxlen: 24
                          181.214.127.0/24 maxlen: 24
                          181.214.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197528 (0x1245d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fe1d02a0329ee295b07541539f533917090ee459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:f5:b1:a4:84:4a:ce:7d:86:68:23:a3:14:
                    68:75:cc:3f:85:7e:34:75:fa:e9:0d:fc:a1:ff:cb:
                    11:18:cb:00:12:82:6e:dc:32:3a:7b:8b:f7:b7:92:
                    5d:98:e1:18:89:fa:67:a7:00:ac:89:43:23:33:96:
                    a1:f3:7c:a3:29:e4:f7:19:51:0b:66:bd:71:cf:5e:
                    a4:08:b8:2b:1d:cc:05:6d:69:01:b1:43:7a:3e:84:
                    7d:fc:3f:84:20:57:21:ba:5a:72:5f:9f:1a:f5:01:
                    7a:d8:52:06:ef:55:c5:7d:68:41:82:48:0b:a8:4f:
                    25:fb:c8:4f:35:4d:e4:63:de:76:05:4b:5b:28:08:
                    86:bd:9b:3b:61:f1:e8:a8:82:82:51:a0:47:91:bb:
                    45:eb:bd:23:af:58:07:03:cc:6a:54:e1:a5:69:d1:
                    e9:86:36:4d:ba:1d:3d:a0:43:ef:a9:2f:f5:79:b2:
                    b7:0a:fc:5d:10:e2:6d:6b:3d:28:f0:db:b0:01:6e:
                    58:dd:07:71:37:7b:10:b2:9c:1d:8b:e8:23:60:2f:
                    0a:81:6a:8c:fb:8d:aa:46:4c:cb:03:95:00:7e:48:
                    b6:a3:d1:07:1f:93:8b:e5:a2:0a:06:e8:a1:f3:5f:
                    1d:65:33:63:91:34:50:e9:91:04:96:05:ac:3d:d5:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:18:7C:C1:11:73:E2:12:C4:1F:B3:49:9D:A1:AC:A2:40:8D:58:21
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.29.0/24
                  181.214.127.0/24
                  181.214.194.0-181.214.196.255
                  181.214.232.0/24
                  181.215.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:84:e2:2b:55:f0:ae:0d:46:b8:cb:1f:62:5c:ca:1e:ba:
         53:63:e6:7a:8a:77:f7:e2:97:13:22:19:82:1a:82:e7:b6:59:
         a7:5b:45:c4:76:c4:70:45:e1:00:b4:57:f6:06:86:3f:e8:ea:
         1d:0d:09:8a:60:49:b3:4d:a8:c5:80:07:eb:0f:6c:7a:01:bc:
         1e:07:07:c7:e1:97:18:38:5a:5b:98:50:ca:76:8a:1a:3a:d9:
         f2:ac:00:33:5d:1d:0b:c4:df:d3:2a:9c:5c:6b:62:c2:b7:9d:
         a3:b9:a2:95:db:55:ce:37:0f:fa:6c:05:0e:b9:34:0e:4b:d2:
         03:ef:95:f9:f8:2c:08:66:6d:e2:00:4b:4d:ef:8e:83:a3:7a:
         03:99:e4:4b:5d:f5:44:98:a8:89:4e:58:52:50:81:c3:3c:f7:
         50:be:38:fa:21:3b:0d:ed:c0:30:99:f1:cf:d7:aa:d9:2b:9f:
         30:27:43:f4:21:88:92:0b:d1:4a:19:98:48:70:35:18:c8:38:
         17:80:ef:63:00:e9:97:95:22:19:cc:54:fb:b8:2b:d4:3a:a5:
         64:b4:76:e1:77:37:13:65:2a:93:ed:61:e0:86:a2:fe:37:9e:
         2c:89:f5:ed:86:8a:31:80:a6:f6:e5:3b:d2:28:2a:84:3c:74:
         a7:b7:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org