Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/114e73d5464c87bf14483747c2f7a7fc3b244a22.roa
File:                     114e73d5464c87bf14483747c2f7a7fc3b244a22.roa (raw, json)
Hash identifier:          1Ie6fc9Pr8pTZF+yC/e6VJKLpJGzQtGV9LoYsDe5n34=
Subject key identifier:   6F:A6:5F:3F:FC:D3:E7:52:D1:76:AA:32:35:88:AE:71:01:AA:27:38
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       150B52
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/114e73d5464c87bf14483747c2f7a7fc3b244a22.roa
Signing time:             Thu 11 Nov 2021 17:26:38 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Sat 11 Nov 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        181.58.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379154 (0x150b52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2023 GMT
        Subject: CN=114e73d5464c87bf14483747c2f7a7fc3b244a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7d:5c:0f:6b:13:f9:a3:e7:28:d2:d3:95:f5:
                    c7:28:81:76:b6:37:ba:2a:08:05:85:84:19:9e:13:
                    1c:29:b2:cf:bf:a0:1f:ad:6d:b1:8d:1f:9f:80:36:
                    82:89:84:39:a1:eb:74:0b:cf:0d:7b:c3:ee:38:9a:
                    8e:8b:62:c7:05:45:b7:3f:f4:89:4a:cf:9d:b3:26:
                    0d:45:3b:f5:f4:a7:2f:40:48:c9:ed:be:dc:bd:17:
                    85:58:56:93:d2:90:fe:46:27:f1:b0:75:1a:71:5e:
                    1f:db:f8:a7:48:45:f5:41:1f:22:e4:dc:e1:2b:3a:
                    67:72:ca:47:28:ff:cb:5f:08:fc:4f:08:ed:51:10:
                    95:f9:24:56:a8:10:c5:b9:5b:95:97:d1:bc:76:7b:
                    97:da:54:a3:aa:83:cc:0e:49:ec:68:28:76:70:68:
                    40:fd:68:6f:4f:38:8e:26:e3:d2:f9:e2:08:2b:89:
                    19:f7:7d:6b:b8:ef:a1:c7:a6:0f:2c:a8:d6:9f:ae:
                    6b:1a:91:33:f6:1e:77:11:3d:7c:2a:f1:6d:52:c3:
                    80:4d:d2:0a:19:cb:90:b3:5e:2a:34:7e:87:ca:0a:
                    68:8c:d4:f6:71:01:1f:d2:dc:81:72:94:6c:b3:a9:
                    9d:a7:22:da:a6:79:7c:58:74:c3:6f:8a:f8:ad:3c:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:5F:3F:FC:D3:E7:52:D1:76:AA:32:35:88:AE:71:01:AA:27:38
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/114e73d5464c87bf14483747c2f7a7fc3b244a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.58.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:be:82:b8:7c:48:48:c3:e5:df:ba:fc:90:b5:dd:53:51:68:
         8f:e2:7b:39:95:8c:a6:a5:75:ec:2d:c7:24:02:d4:2c:5a:8f:
         6d:aa:81:b1:01:33:50:9d:67:f8:5b:fd:14:b9:91:6b:f5:d3:
         2a:75:d0:cc:7f:dd:4d:3d:13:5a:b3:cb:5c:eb:ba:40:42:5b:
         63:b7:5d:85:fe:13:0a:ed:cd:20:43:f3:62:81:67:95:fc:f9:
         5c:57:72:7c:5e:8e:7a:cb:62:ee:37:51:54:30:fc:68:bc:04:
         e2:b1:4b:ec:c8:15:b1:12:a0:38:7e:9d:a6:d3:f7:15:78:4d:
         6c:ce:73:2d:b4:b4:a8:62:4e:46:dd:e2:f6:a2:7f:8a:35:6b:
         da:13:30:32:d5:dc:0e:40:4e:b6:cf:28:38:57:0e:ea:ef:3f:
         b7:25:75:6a:35:9e:ed:e6:98:a3:75:f1:7c:8e:e7:31:a7:ff:
         cb:e6:b1:ce:23:52:12:bf:6b:e8:65:24:9c:46:94:8a:0a:37:
         cd:cd:3e:fa:23:20:22:3c:0e:16:ae:05:84:7d:c3:cf:bc:47:
         bc:fb:3b:88:2e:b6:1a:c0:48:e5:62:c5:17:66:69:ce:b3:5e:
         e1:e8:60:ff:3e:14:96:64:9d:88:c4:97:ed:8e:82:87:3d:10:
         18:28:03:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFQtSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjExMTEx
MDMwMDAwWhcNMjMxMTExMDMwMDAwWjAzMTEwLwYDVQQDEygxMTRlNzNkNTQ2NGM4
N2JmMTQ0ODM3NDdjMmY3YTdmYzNiMjQ0YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg31cD2sT+aPnKNLTlfXHKIF2tje6KggFhYQZnhMcKbLPv6Af
rW2xjR+fgDaCiYQ5oet0C88Ne8PuOJqOi2LHBUW3P/SJSs+dsyYNRTv19KcvQEjJ
7b7cvReFWFaT0pD+RifxsHUacV4f2/inSEX1QR8i5NzhKzpncspHKP/LXwj8Twjt
URCV+SRWqBDFuVuVl9G8dnuX2lSjqoPMDknsaCh2cGhA/WhvTziOJuPS+eIIK4kZ
931ruO+hx6YPLKjWn65rGpEz9h53ET18KvFtUsOATdIKGcuQs14qNH6HygpojNT2
cQEf0tyBcpRss6mdpyLapnl8WHTDb4r4rTygwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG+mXz/80+dS0XaqMjWIrnEBqic4MB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzExNGU3M2Q1NDY0Yzg3YmYxNDQ4Mzc0N2MyZjdhN2ZjM2IyNDRhMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALU6SDANBgkqhkiG9w0BAQsFAAOCAQEAQL6CuHxISMPl37r8
kLXdU1Foj+J7OZWMpqV17C3HJALULFqPbaqBsQEzUJ1n+Fv9FLmRa/XTKnXQzH/d
TT0TWrPLXOu6QEJbY7ddhf4TCu3NIEPzYoFnlfz5XFdyfF6Oesti7jdRVDD8aLwE
4rFL7MgVsRKgOH6dptP3FXhNbM5zLbS0qGJORt3i9qJ/ijVr2hMwMtXcDkBOts8o
OFcO6u8/tyV1ajWe7eaYo3XxfI7nMaf/y+axziNSEr9r6GUknEaUigo3zc0++iMg
IjwOFq4FhH3Dz7xHvPs7iC62GsBI5WLFF2ZpzrNe4ehg/z4UlmSdiMSX7Y6Chz0Q
GCgDNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org