Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4109799fbb6f1d5bd6beacb0a91019495b38eb4c.roa
File:                     4109799fbb6f1d5bd6beacb0a91019495b38eb4c.roa (raw, json)
Hash identifier:          y3lYwi2UfLy+AHadH6HKkbfRTf2efg4IG2vj17qTjMc=
Subject key identifier:   19:07:C4:4B:FA:80:22:EA:6D:64:4A:BB:22:69:64:09:29:02:DC:45
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       115238
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4109799fbb6f1d5bd6beacb0a91019495b38eb4c.roa
Signing time:             Sat 20 Nov 2021 07:03:43 +0000
ROA not before:           Sat 20 Nov 2021 03:00:00 +0000
ROA not after:            Mon 20 Nov 2023 03:00:00 +0000
asID:                     272524
IP address blocks:        181.215.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135160 (0x115238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Nov 20 03:00:00 2021 GMT
            Not After : Nov 20 03:00:00 2023 GMT
        Subject: CN=4109799fbb6f1d5bd6beacb0a91019495b38eb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:98:b8:8f:df:50:16:ff:4a:39:28:1e:f2:
                    1a:1d:73:72:7b:d5:aa:fa:6a:ba:de:db:11:79:e9:
                    e8:a7:f9:d9:db:1c:db:3a:23:3b:bb:8e:e4:9c:50:
                    2c:34:b9:7d:e2:6c:74:79:b9:84:eb:98:34:82:21:
                    f7:9c:d4:4d:71:e8:6e:70:36:82:b7:3a:a7:04:ab:
                    82:af:b1:4f:95:e3:e5:ec:21:7c:ba:ec:59:a9:40:
                    23:69:c0:14:5f:0d:4d:40:5d:9d:75:28:f2:4f:d0:
                    29:84:82:bc:0e:71:1a:1c:31:ef:fc:88:57:c8:9f:
                    44:86:6b:34:f6:f3:35:c8:54:9c:99:ec:14:93:fc:
                    f4:85:06:df:1f:70:ce:15:38:96:18:4e:05:65:5d:
                    7e:f5:d5:9e:08:d8:2d:9e:d1:43:3a:d7:63:db:81:
                    f0:94:99:d8:ba:34:4f:df:23:ef:f0:e6:b9:5d:90:
                    bb:07:fb:59:af:81:64:0b:fc:0c:62:9b:3c:44:88:
                    de:96:41:dd:55:2a:3c:24:34:25:40:a1:6b:f2:b8:
                    21:d4:8b:d1:eb:a0:21:3c:e9:54:bf:6f:49:df:76:
                    5d:b5:46:8f:f9:19:25:be:df:f0:5c:92:be:e0:ac:
                    0e:ac:07:10:f7:c7:4b:fc:d3:5a:83:dd:02:ae:85:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:07:C4:4B:FA:80:22:EA:6D:64:4A:BB:22:69:64:09:29:02:DC:45
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4109799fbb6f1d5bd6beacb0a91019495b38eb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:95:15:2e:88:b5:29:bf:db:e1:82:10:d5:59:4b:57:13:
         cf:df:76:33:05:b0:80:03:a0:e5:50:43:2d:14:76:a8:8b:8d:
         d1:0d:2b:de:98:ce:4d:04:14:81:c5:84:be:19:f5:bb:8f:e3:
         95:b9:ba:62:d7:7c:ef:30:1b:71:6e:bf:e7:07:ad:c6:4e:47:
         b7:00:5e:ca:16:9d:41:25:5d:4d:36:02:d1:9c:05:f4:d6:e6:
         cd:cb:5f:14:32:67:e6:ed:5e:41:76:d4:03:6e:00:fa:6c:d5:
         4f:69:f6:31:5c:9b:44:da:45:52:26:bf:45:98:84:9c:bd:0e:
         39:67:7a:60:25:92:2c:6e:2a:53:ad:2e:2a:7d:87:38:78:0d:
         61:4e:83:86:00:1a:63:05:47:37:17:64:37:ec:8f:9a:da:90:
         ce:c7:22:65:a6:09:1f:9d:8f:9c:4d:9a:4a:08:2e:c1:7d:8f:
         f7:91:04:82:27:f3:00:1f:a5:bd:31:b8:61:37:3b:eb:1a:75:
         37:d4:81:8c:76:36:81:1e:b8:da:ad:9c:dd:16:68:6a:b0:33:
         fa:0e:f2:07:08:73:5a:7b:04:cf:41:b6:8b:9f:5f:6a:15:2a:
         98:94:c5:0b:3c:f2:7d:ab:a2:e9:10:5a:05:b8:50:89:4e:38:
         67:6d:2e:6c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEVI4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMTIw
MDMwMDAwWhcNMjMxMTIwMDMwMDAwWjAzMTEwLwYDVQQDEyg0MTA5Nzk5ZmJiNmYx
ZDViZDZiZWFjYjBhOTEwMTk0OTViMzhlYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnIuYuI/fUBb/SjkoHvIaHXNye9Wq+mq63tsReenop/nZ2xzb
OiM7u47knFAsNLl94mx0ebmE65g0giH3nNRNcehucDaCtzqnBKuCr7FPlePl7CF8
uuxZqUAjacAUXw1NQF2ddSjyT9AphIK8DnEaHDHv/IhXyJ9Ehms09vM1yFScmewU
k/z0hQbfH3DOFTiWGE4FZV1+9dWeCNgtntFDOtdj24HwlJnYujRP3yPv8Oa5XZC7
B/tZr4FkC/wMYps8RIjelkHdVSo8JDQlQKFr8rgh1IvR66AhPOlUv29J33ZdtUaP
+Rklvt/wXJK+4KwOrAcQ98dL/NNag90CroXWyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBkHxEv6gCLqbWRKuyJpZAkpAtxFMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzQxMDk3OTlmYmI2ZjFkNWJkNmJlYWNiMGE5MTAxOTQ5NWIzOGViNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXX7DANBgkqhkiG9w0BAQsFAAOCAQEALYKVFS6ItSm/2+GC
ENVZS1cTz992MwWwgAOg5VBDLRR2qIuN0Q0r3pjOTQQUgcWEvhn1u4/jlbm6Ytd8
7zAbcW6/5wetxk5HtwBeyhadQSVdTTYC0ZwF9NbmzctfFDJn5u1eQXbUA24A+mzV
T2n2MVybRNpFUia/RZiEnL0OOWd6YCWSLG4qU60uKn2HOHgNYU6DhgAaYwVHNxdk
N+yPmtqQzsciZaYJH52PnE2aSgguwX2P95EEgifzAB+lvTG4YTc76xp1N9SBjHY2
gR642q2c3RZoarAz+g7yBwhzWnsEz0G2i59fahUqmJTFCzzyfaui6RBaBbhQiU44
Z20ubA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org