Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58bab0e021ac0ef8c6df5ea13953bcf900f2d527.roa
File:                     58bab0e021ac0ef8c6df5ea13953bcf900f2d527.roa (raw, json)
Hash identifier:          ub8PFavVMIgoj4yizZPg2nUwZrymTlSts2NPjK4mLTU=
Subject key identifier:   3B:13:E0:65:89:D9:92:F7:F2:CD:0C:7E:7B:B5:98:C3:24:14:A1:4C
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       144B7C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58bab0e021ac0ef8c6df5ea13953bcf900f2d527.roa
Signing time:             Fri 14 Jan 2022 16:54:33 +0000
ROA not before:           Fri 14 Jan 2022 03:00:00 +0000
ROA not after:            Sun 14 Jan 2024 03:00:00 +0000
asID:                     48678
IP address blocks:        181.214.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330044 (0x144b7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan 14 03:00:00 2022 GMT
            Not After : Jan 14 03:00:00 2024 GMT
        Subject: CN=58bab0e021ac0ef8c6df5ea13953bcf900f2d527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:1e:74:39:b7:bb:0c:b2:82:4e:8d:d2:bc:
                    38:f9:ce:ac:6e:dd:3f:cd:0c:35:66:93:57:e0:f6:
                    48:e0:6f:f6:4f:44:67:bc:f9:39:f7:19:bb:46:1d:
                    d4:d5:5d:d7:ee:77:93:b0:52:8a:bd:52:e3:6e:7c:
                    a1:a5:62:b0:bb:92:50:6b:ec:13:c1:d4:34:32:26:
                    09:33:b9:50:24:0c:1d:9e:2f:cd:3c:9c:33:96:21:
                    8f:39:12:b0:8d:2c:b8:4e:3a:16:60:69:10:64:23:
                    9d:11:23:67:9e:44:43:a2:3c:53:29:9b:27:7d:45:
                    b3:cd:d7:e2:6b:54:de:3a:f8:6c:f5:98:6a:7f:fa:
                    5e:51:7b:36:c2:2b:46:f5:fd:f3:fa:ed:d0:0b:87:
                    47:d2:24:3c:c4:cc:21:42:bc:0e:3c:d8:c8:da:2f:
                    b6:86:52:d2:99:0b:b0:e4:6c:bf:f0:e6:02:e4:68:
                    df:03:5e:49:e7:70:69:f5:12:77:d3:89:82:42:20:
                    37:df:cd:c9:f4:9d:3a:71:60:d3:97:cd:4c:ee:13:
                    f9:fa:24:ae:ed:d3:02:0f:27:e2:8a:b9:53:71:61:
                    3a:60:f5:25:01:36:e2:62:de:4d:f9:d3:65:ef:25:
                    18:a4:58:ac:b9:ec:6c:68:2e:1a:fe:ae:7e:10:96:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:E0:65:89:D9:92:F7:F2:CD:0C:7E:7B:B5:98:C3:24:14:A1:4C
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/58bab0e021ac0ef8c6df5ea13953bcf900f2d527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:37:c9:14:03:66:6e:1c:5c:11:5e:59:56:71:c0:cb:54:ff:
         37:d9:df:c9:93:ac:38:9f:55:c9:58:f1:f6:c8:16:21:f0:bf:
         3b:91:d3:00:75:67:88:ba:56:17:e1:1d:30:a1:d1:05:78:3f:
         09:fd:68:a2:a2:d1:23:fd:3f:f7:e7:2b:43:df:92:bb:07:a5:
         02:1c:e0:7a:2c:82:3d:bf:bf:49:d4:5f:5c:1f:4b:5a:ad:2e:
         41:48:76:1f:54:91:66:64:b5:58:ed:f5:97:9f:5a:8c:3f:75:
         e0:17:b3:f6:c8:18:70:2e:65:1e:ec:56:93:1e:65:ac:89:0f:
         fa:4f:99:97:06:ea:3d:96:60:80:ed:0e:b1:0e:ec:99:ce:ee:
         61:43:3f:1d:ab:c8:39:ae:c8:14:85:48:eb:c8:c4:fb:2e:f6:
         00:dd:b0:47:86:03:a7:2c:d3:70:1b:92:b7:8b:a1:9a:1d:4a:
         6c:c0:09:7b:bb:3a:1c:c3:57:c2:32:d2:ef:4a:db:82:a8:3c:
         6a:7d:c4:d0:88:01:cc:e1:bc:ac:1f:c6:8a:3e:d7:ae:c9:ba:
         c5:76:62:57:76:ed:4b:ae:71:8e:59:79:e3:9f:1b:7c:83:f5:
         e8:cb:4f:35:9f:7c:62:d4:dd:89:88:cd:7e:c2:99:f3:f9:a7:
         7e:12:9e:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFEt8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjIwMTE0
MDMwMDAwWhcNMjQwMTE0MDMwMDAwWjAzMTEwLwYDVQQDEyg1OGJhYjBlMDIxYWMw
ZWY4YzZkZjVlYTEzOTUzYmNmOTAwZjJkNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqNcedDm3uwyygk6N0rw4+c6sbt0/zQw1ZpNX4PZI4G/2T0Rn
vPk59xm7Rh3U1V3X7neTsFKKvVLjbnyhpWKwu5JQa+wTwdQ0MiYJM7lQJAwdni/N
PJwzliGPORKwjSy4TjoWYGkQZCOdESNnnkRDojxTKZsnfUWzzdfia1TeOvhs9Zhq
f/peUXs2witG9f3z+u3QC4dH0iQ8xMwhQrwOPNjI2i+2hlLSmQuw5Gy/8OYC5Gjf
A15J53Bp9RJ304mCQiA3383J9J06cWDTl81M7hP5+iSu7dMCDyfiirlTcWE6YPUl
ATbiYt5N+dNl7yUYpFisuexsaC4a/q5+EJZjxwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDsT4GWJ2ZL38s0Mfnu1mMMkFKFMMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzU4YmFiMGUwMjFhYzBlZjhjNmRmNWVhMTM5NTNiY2Y5MDBmMmQ1Mjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXWmjANBgkqhkiG9w0BAQsFAAOCAQEAVzfJFANmbhxcEV5Z
VnHAy1T/N9nfyZOsOJ9VyVjx9sgWIfC/O5HTAHVniLpWF+EdMKHRBXg/Cf1ooqLR
I/0/9+crQ9+SuwelAhzgeiyCPb+/SdRfXB9LWq0uQUh2H1SRZmS1WO31l59ajD91
4Bez9sgYcC5lHuxWkx5lrIkP+k+ZlwbqPZZggO0OsQ7smc7uYUM/HavIOa7IFIVI
68jE+y72AN2wR4YDpyzTcBuSt4uhmh1KbMAJe7s6HMNXwjLS70rbgqg8an3E0IgB
zOG8rB/Gij7Xrsm6xXZiV3btS65xjll5458bfIP16MtPNZ98YtTdiYjNfsKZ8/mn
fhKeTQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org