Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/61401aa8efef2a4235c0ff5246c327cd80dd2402.roa
File:                     61401aa8efef2a4235c0ff5246c327cd80dd2402.roa (raw, json)
Hash identifier:          imutjCcblm2qsofjOmnkbaKIrh+RZSfhhp4e6u1TJLQ=
Subject key identifier:   EE:FD:11:46:AF:BE:13:CF:20:95:76:E8:3F:D6:0A:C4:5B:6E:B5:59
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0949B0
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/61401aa8efef2a4235c0ff5246c327cd80dd2402.roa
Signing time:             Tue 18 May 2021 16:39:03 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     54825
IP address blocks:        181.214.236.0/24 maxlen: 24
                          181.215.11.0/24 maxlen: 24
                          191.101.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608688 (0x949b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=61401aa8efef2a4235c0ff5246c327cd80dd2402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:09:82:d3:95:ea:6a:7b:f2:c2:6b:da:5b:
                    fd:02:4c:02:60:ee:e5:88:a0:fb:76:29:d3:7c:2f:
                    09:80:52:42:4a:d0:69:dc:d0:5e:42:a9:22:87:a8:
                    86:7e:74:13:83:50:ef:32:80:43:55:5c:fb:7f:f5:
                    48:41:0f:3d:89:e9:6a:3a:8f:d6:61:d1:b3:fb:b0:
                    67:ba:83:2c:8f:ad:2a:0d:16:e2:d9:98:fd:ed:5b:
                    da:f0:1b:62:e1:93:a3:d0:2d:15:02:ee:45:96:c1:
                    07:c6:73:c7:23:4c:49:23:a3:a6:00:71:78:c4:11:
                    75:91:a2:29:6d:c0:cc:05:d3:30:8c:c5:9f:4b:34:
                    cc:86:e5:b2:81:2d:c5:92:dd:3a:ba:0c:43:2f:ee:
                    8e:32:b0:e7:95:52:1c:49:e1:3a:be:a9:cc:e4:9d:
                    c1:89:be:c6:63:af:7b:18:80:0d:b0:ee:08:4f:07:
                    58:66:8f:3f:d8:01:b5:b0:25:07:f2:1a:69:a6:88:
                    48:9e:0e:c9:01:bd:13:4f:40:ea:a5:37:9a:6c:d6:
                    be:6a:d8:e8:60:36:6f:6b:7e:a8:62:77:95:d3:09:
                    02:73:db:f3:bc:dc:e2:c1:9b:ca:8d:b6:72:da:6a:
                    aa:c8:f5:ac:de:b5:7b:80:1b:f1:db:d6:0a:81:50:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:11:46:AF:BE:13:CF:20:95:76:E8:3F:D6:0A:C4:5B:6E:B5:59
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/61401aa8efef2a4235c0ff5246c327cd80dd2402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.236.0/24
                  181.215.11.0/24
                  191.101.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:50:14:e8:73:36:e4:6b:2f:5b:7d:ff:72:8b:b5:8d:02:
         94:26:66:90:20:a5:3a:df:c8:d2:37:95:23:64:05:5a:3a:9f:
         07:c6:ca:91:9d:86:a8:f1:61:ac:38:4c:36:dd:72:e7:76:0c:
         73:6d:c7:af:59:38:61:b6:a7:c5:0d:f8:05:c5:ff:40:a7:e9:
         1f:77:fb:fa:ac:a4:76:9b:91:7b:6d:7e:67:52:af:e0:9a:2b:
         67:c8:ff:be:0b:38:a1:ab:ad:0e:e5:12:14:1d:8a:e8:c6:ae:
         c4:95:43:27:e2:51:8f:5d:4f:20:f5:3d:b7:ef:d6:02:e0:0a:
         a6:bf:33:50:6d:56:c1:a1:51:bd:72:fc:27:f0:10:d8:55:20:
         8a:fe:4f:1b:bd:a8:04:0b:70:8f:ae:81:d9:ef:87:63:69:1e:
         7a:de:7c:91:4f:e8:be:be:5b:17:4e:6e:fe:86:c8:94:11:9c:
         0e:74:71:ea:57:ad:cf:c9:25:32:88:7c:d3:47:2d:1a:13:d6:
         95:f2:46:9b:f0:99:0e:fd:89:bb:a5:08:a3:9c:8c:00:8e:b5:
         34:ea:28:3e:67:e3:d2:13:47:78:ef:8b:6b:0c:f3:1b:b3:e9:
         01:09:65:84:19:26:b4:63:81:00:2c:b6:68:b5:c4:fc:d5:da:
         1d:83:e1:3a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDCUmwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2MTQwMWFhOGVmZWYy
YTQyMzVjMGZmNTI0NmMzMjdjZDgwZGQyNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnrgJgtOV6mp78sJr2lv9AkwCYO7liKD7dinTfC8JgFJCStBp
3NBeQqkih6iGfnQTg1DvMoBDVVz7f/VIQQ89ielqOo/WYdGz+7BnuoMsj60qDRbi
2Zj97Vva8Bti4ZOj0C0VAu5FlsEHxnPHI0xJI6OmAHF4xBF1kaIpbcDMBdMwjMWf
SzTMhuWygS3Fkt06ugxDL+6OMrDnlVIcSeE6vqnM5J3Bib7GY697GIANsO4ITwdY
Zo8/2AG1sCUH8hpppohIng7JAb0TT0DqpTeabNa+atjoYDZva36oYneV0wkCc9vz
vNziwZvKjbZy2mqqyPWs3rV7gBvx29YKgVBS2QIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFO79EUavvhPPIJV26D/WCsRbbrVZMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzYxNDAxYWE4ZWZlZjJhNDIzNWMwZmY1MjQ2YzMyN2NkODBkZDI0MDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEALXW7AMEALXXCwMEAL9lHTANBgkqhkiG9w0BAQsFAAOCAQEA
TJ1QFOhzNuRrL1t9/3KLtY0ClCZmkCClOt/I0jeVI2QFWjqfB8bKkZ2GqPFhrDhM
Nt1y53YMc23Hr1k4YbanxQ34BcX/QKfpH3f7+qykdpuRe21+Z1Kv4JorZ8j/vgs4
oautDuUSFB2K6MauxJVDJ+JRj11PIPU9t+/WAuAKpr8zUG1WwaFRvXL8J/AQ2FUg
iv5PG72oBAtwj66B2e+HY2keet58kU/ovr5bF05u/obIlBGcDnRx6letz8klMoh8
00ctGhPWlfJGm/CZDv2Ju6UIo5yMAI61NOooPmfj0hNHeO+LawzzG7PpAQllhBkm
tGOBACy2aLXE/NXaHYPhOg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org