Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58064fda0953998ed9a984a96b27f51c14005e81.roa
File:                     58064fda0953998ed9a984a96b27f51c14005e81.roa (raw, json)
Hash identifier:          bwAaSWksEdKHMibi/NueURWXOLs4pD0KNrn4msIp6lU=
Subject key identifier:   85:FC:60:9F:B7:49:C9:22:ED:61:3B:DC:29:6D:06:95:B1:5F:10:2C
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       153B74
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58064fda0953998ed9a984a96b27f51c14005e81.roa
Signing time:             Sun 30 Jan 2022 06:36:25 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     49999
IP address blocks:        181.215.73.0/24 maxlen: 24
                          181.215.53.0/24 maxlen: 24
                          179.61.217.0/24 maxlen: 24
                          191.101.185.0/24 maxlen: 24
                          191.96.36.0/24 maxlen: 24
                          181.214.160.0/24 maxlen: 24
                          181.215.186.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391476 (0x153b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=58064fda0953998ed9a984a96b27f51c14005e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:87:0e:5f:85:00:90:10:92:b8:57:4c:af:
                    d7:95:54:0d:45:98:42:41:d4:1f:02:12:7d:2c:a5:
                    04:8e:4b:cd:23:5c:d7:85:22:95:11:eb:6a:81:91:
                    04:75:20:8c:de:7d:08:c8:32:94:ba:e7:0e:77:ae:
                    2f:ec:7c:3b:08:f9:34:6b:51:4a:49:eb:6b:bf:b5:
                    2e:d1:54:64:cf:6e:c7:cc:60:de:ba:9a:59:7a:60:
                    de:94:b0:e8:c3:e2:a9:f3:09:60:09:0a:f3:1d:31:
                    53:38:9b:e0:a6:72:6e:c8:16:85:6e:bd:4d:22:b4:
                    3c:f3:bc:5f:71:5a:69:a9:81:b3:1d:10:77:5f:67:
                    64:bc:af:93:ff:d7:5b:56:bb:a2:32:51:b4:60:df:
                    f3:05:78:c0:62:cc:3d:89:14:bc:64:ef:8f:78:2b:
                    8c:ba:e1:c5:6b:ca:34:7c:cd:74:c9:f7:11:08:35:
                    49:f2:22:ad:ae:24:6c:33:ef:05:13:f1:2d:7f:3d:
                    5a:61:fb:6c:b5:ca:20:f8:d6:d3:05:3c:04:f5:5f:
                    6f:b4:71:71:c4:04:ae:85:27:8b:15:4e:6f:77:b5:
                    8a:14:90:e5:9c:29:c1:56:b4:32:e0:31:bf:cc:d3:
                    bd:e2:7c:c4:f3:09:b7:46:8f:b2:02:ff:ea:d6:ad:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:60:9F:B7:49:C9:22:ED:61:3B:DC:29:6D:06:95:B1:5F:10:2C
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58064fda0953998ed9a984a96b27f51c14005e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.217.0/24
                  181.214.160.0/24
                  181.215.53.0/24
                  181.215.73.0/24
                  181.215.186.0/23
                  191.96.36.0/24
                  191.101.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:6f:2c:64:25:ff:6a:df:df:ca:80:98:c9:28:a7:90:7f:
         48:32:39:b6:0c:f3:bb:82:b5:cd:6c:b7:31:69:24:df:48:6f:
         96:4f:62:13:8e:d6:03:3a:7b:88:9d:11:4e:45:e4:d3:7c:9b:
         b3:20:c2:f6:37:7b:04:a9:9b:66:67:0d:4e:a1:fe:3d:57:66:
         61:55:8b:61:76:04:37:5b:43:3d:60:55:bc:41:10:19:e1:b0:
         b9:48:0d:d9:31:62:a5:c9:84:9d:89:1c:33:55:bd:06:44:29:
         8e:8c:88:47:e9:c1:26:56:d4:9d:30:6d:25:3d:42:0b:bb:9c:
         2d:5d:2b:40:ac:3c:a1:ff:61:ab:f8:77:65:0a:7a:29:a5:85:
         8c:d4:e6:e3:b2:65:3e:e2:be:a9:ae:c6:ab:19:19:b9:ba:82:
         23:38:fc:77:3b:a6:79:20:90:c1:38:b6:5b:b8:2b:e9:c9:74:
         f9:5b:62:00:a9:02:e1:29:03:79:25:4c:1e:52:08:b9:ad:c0:
         4b:6f:a6:4b:1d:49:42:a3:39:ea:f2:9c:3e:a6:09:7c:71:c8:
         0a:e1:3d:47:ed:e5:22:f4:f4:80:5b:27:bf:ca:41:a3:c9:5f:
         cc:6c:a8:64:16:a8:31:45:63:df:2b:fb:59:fc:01:47:42:9b:
         07:b5:3d:2e
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIDFTt0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwOTI4
MDMwMDAwWhcNMjMwOTI4MDMwMDAwWjAzMTEwLwYDVQQDEyg1ODA2NGZkYTA5NTM5
OThlZDlhOTg0YTk2YjI3ZjUxYzE0MDA1ZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr3SHDl+FAJAQkrhXTK/XlVQNRZhCQdQfAhJ9LKUEjkvNI1zX
hSKVEetqgZEEdSCM3n0IyDKUuucOd64v7Hw7CPk0a1FKSetrv7Uu0VRkz27HzGDe
uppZemDelLDow+Kp8wlgCQrzHTFTOJvgpnJuyBaFbr1NIrQ887xfcVppqYGzHRB3
X2dkvK+T/9dbVruiMlG0YN/zBXjAYsw9iRS8ZO+PeCuMuuHFa8o0fM10yfcRCDVJ
8iKtriRsM+8FE/Etfz1aYftstcog+NbTBTwE9V9vtHFxxASuhSeLFU5vd7WKFJDl
nCnBVrQy4DG/zNO94nzE8wm3Ro+yAv/q1q10HQIDAQABo4ICfzCCAnswHQYDVR0O
BBYEFIX8YJ+3Scki7WE73CltBpWxXxAsMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzU4MDY0ZmRhMDk1Mzk5OGVkOWE5ODRhOTZiMjdmNTFjMTQwMDVlODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0
MDIwMAQCAAEwKgMEALM92QMEALXWoAMEALXXNQMEALXXSQMEAbXXugMEAL9gJAME
AL9luTANBgkqhkiG9w0BAQsFAAOCAQEAcy5vLGQl/2rf38qAmMkop5B/SDI5tgzz
u4K1zWy3MWkk30hvlk9iE47WAzp7iJ0RTkXk03ybsyDC9jd7BKmbZmcNTqH+PVdm
YVWLYXYEN1tDPWBVvEEQGeGwuUgN2TFipcmEnYkcM1W9BkQpjoyIR+nBJlbUnTBt
JT1CC7ucLV0rQKw8of9hq/h3ZQp6KaWFjNTm47JlPuK+qa7GqxkZubqCIzj8dzum
eSCQwTi2W7gr6cl0+VtiAKkC4SkDeSVMHlIIua3AS2+mSx1JQqM56vKcPqYJfHHI
CuE9R+3lIvT0gFsnv8pBo8lfzGyoZBaoMUVj3yv7WfwBR0KbB7U9Lg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org