Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36f0da9baea1e3bebfb1d7eb439e89dff6c6ea0e.roa
File:                     36f0da9baea1e3bebfb1d7eb439e89dff6c6ea0e.roa (raw, json)
Hash identifier:          RNmTAbsH7glSqMNNysoDyhQku+pjLaRN8h0SePZ6ESI=
Subject key identifier:   49:36:CE:6D:CF:87:37:C6:E0:95:44:7E:79:79:68:22:F8:A4:AE:75
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0BEED9
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36f0da9baea1e3bebfb1d7eb439e89dff6c6ea0e.roa
Signing time:             Fri 30 Jul 2021 12:50:43 +0000
ROA not before:           Fri 30 Jul 2021 03:00:00 +0000
ROA not after:            Sun 30 Jul 2023 03:00:00 +0000
asID:                     271355
IP address blocks:        181.214.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782041 (0xbeed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jul 30 03:00:00 2021 GMT
            Not After : Jul 30 03:00:00 2023 GMT
        Subject: CN=36f0da9baea1e3bebfb1d7eb439e89dff6c6ea0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:07:1c:36:b9:f2:bf:40:d6:f6:d8:9e:c6:
                    33:a1:76:c6:98:a4:00:c1:97:4c:3f:4b:93:01:d7:
                    61:74:13:20:be:ef:90:d9:db:fb:61:2e:81:26:dd:
                    cb:64:a1:45:d6:1d:43:5a:d6:80:f6:2d:02:9d:44:
                    fb:e9:82:2a:90:2f:4d:7e:e8:1f:ab:ab:c1:17:20:
                    8d:76:91:57:c8:d0:27:08:42:11:d7:fb:26:7d:f6:
                    48:c5:fe:f9:25:56:8f:2c:fe:16:17:e9:d5:ca:77:
                    73:2c:ed:01:c0:c9:42:13:a0:b8:3e:3e:ef:7c:27:
                    0d:15:93:13:f3:4c:e0:59:4b:ff:ca:a3:6f:ed:57:
                    1f:47:31:22:79:10:f8:89:9d:72:1d:ef:bd:2b:15:
                    e5:db:43:2e:8a:71:a2:ee:6d:f4:a8:c2:d4:7b:c6:
                    a1:79:bb:e1:3e:d5:a1:68:40:2f:e1:36:78:81:09:
                    b9:3e:41:c3:e4:10:7c:67:c5:8f:b7:20:f4:8d:c8:
                    9d:cc:48:22:82:03:07:5f:94:62:dd:7b:e4:2e:fb:
                    9d:ed:00:12:45:b6:7a:89:8b:d6:38:ec:33:5a:45:
                    be:44:65:23:d9:61:ff:ab:6c:f7:93:b5:99:ad:d0:
                    99:bf:db:de:a6:16:fb:bd:74:ba:4e:d5:30:ab:25:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:CE:6D:CF:87:37:C6:E0:95:44:7E:79:79:68:22:F8:A4:AE:75
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/36f0da9baea1e3bebfb1d7eb439e89dff6c6ea0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:d8:66:b8:73:a2:b4:de:7a:df:26:b1:d5:23:a0:f6:5a:
         ac:36:c5:8d:bc:6a:de:9d:4c:4f:f1:06:5d:23:38:ed:af:f5:
         d7:11:2c:a6:fa:5d:52:32:6d:b3:c5:05:69:f4:d3:9f:14:4b:
         cc:f4:db:2f:09:29:6c:08:46:79:a9:e5:a6:d6:20:ef:5b:ea:
         09:66:41:9e:79:e0:5b:5a:bb:dc:15:f6:e8:54:d3:bb:97:84:
         bb:4f:3c:a3:74:8d:87:fe:1a:13:3f:8c:35:ab:7e:5e:a4:a0:
         81:0d:2f:34:c6:3d:30:1b:0a:c9:5a:bf:ce:a5:a7:cd:d4:a5:
         dc:7e:a8:d1:ac:02:5d:9e:bd:3d:c4:10:94:c0:27:dd:6b:51:
         08:19:7a:81:77:b3:8e:a7:79:ce:2d:bf:fa:0d:19:c0:46:90:
         cd:af:21:60:14:9b:a7:8c:e3:b8:67:a9:56:23:c5:2d:62:72:
         2d:07:30:bf:c5:44:1e:17:49:62:aa:4d:48:28:57:36:98:7c:
         ab:a1:48:d2:f8:92:a8:fe:c5:ab:be:46:b0:05:a1:24:16:44:
         38:dd:73:28:58:68:06:17:4c:2b:d0:9d:16:c8:b4:d9:9c:99:
         f1:9c:cf:e7:1e:7a:06:e0:97:c3:5a:34:be:ac:62:ee:e9:40:
         39:6b:de:a5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC+7ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwNzMw
MDMwMDAwWhcNMjMwNzMwMDMwMDAwWjAzMTEwLwYDVQQDEygzNmYwZGE5YmFlYTFl
M2JlYmZiMWQ3ZWI0MzllODlkZmY2YzZlYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuW8HHDa58r9A1vbYnsYzoXbGmKQAwZdMP0uTAddhdBMgvu+Q
2dv7YS6BJt3LZKFF1h1DWtaA9i0CnUT76YIqkC9Nfugfq6vBFyCNdpFXyNAnCEIR
1/smffZIxf75JVaPLP4WF+nVyndzLO0BwMlCE6C4Pj7vfCcNFZMT80zgWUv/yqNv
7VcfRzEieRD4iZ1yHe+9KxXl20MuinGi7m30qMLUe8ahebvhPtWhaEAv4TZ4gQm5
PkHD5BB8Z8WPtyD0jcidzEgiggMHX5Ri3XvkLvud7QASRbZ6iYvWOOwzWkW+RGUj
2WH/q2z3k7WZrdCZv9vephb7vXS6TtUwqyXa1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEk2zm3PhzfG4JVEfnl5aCL4pK51MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzM2ZjBkYTliYWVhMWUzYmViZmIxZDdlYjQzOWU4OWRmZjZjNmVhMGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXWWjANBgkqhkiG9w0BAQsFAAOCAQEAI/jYZrhzorTeet8m
sdUjoPZarDbFjbxq3p1MT/EGXSM47a/11xEspvpdUjJts8UFafTTnxRLzPTbLwkp
bAhGeanlptYg71vqCWZBnnngW1q73BX26FTTu5eEu088o3SNh/4aEz+MNat+XqSg
gQ0vNMY9MBsKyVq/zqWnzdSl3H6o0awCXZ69PcQQlMAn3WtRCBl6gXezjqd5zi2/
+g0ZwEaQza8hYBSbp4zjuGepViPFLWJyLQcwv8VEHhdJYqpNSChXNph8q6FI0viS
qP7Fq75GsAWhJBZEON1zKFhoBhdMK9CdFsi02ZyZ8ZzP5x56BuCXw1o0vqxi7ulA
OWvepQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org