Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9b819954198f629d23cc56c13ac9e96df89e30b.roa
File:                     a9b819954198f629d23cc56c13ac9e96df89e30b.roa (raw, json)
Hash identifier:          r0cyQhFR+rdTS+7LlGP6nzz0uQX3W1bpJJgo/kokFGo=
Subject key identifier:   A2:F3:E3:2D:10:D0:4A:D9:3A:6A:7B:A5:60:A0:DA:DC:3A:4F:85:42
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       11D399
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9b819954198f629d23cc56c13ac9e96df89e30b.roa
Signing time:             Tue 30 Nov 2021 21:30:51 +0000
ROA not before:           Tue 30 Nov 2021 03:00:00 +0000
ROA not after:            Thu 30 Nov 2023 03:00:00 +0000
asID:                     209371
IP address blocks:        181.215.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168281 (0x11d399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Nov 30 03:00:00 2021 GMT
            Not After : Nov 30 03:00:00 2023 GMT
        Subject: CN=a9b819954198f629d23cc56c13ac9e96df89e30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:c1:29:ce:71:a1:25:10:7d:85:37:70:f0:
                    8f:41:ce:ff:f6:53:90:47:37:ed:1e:50:db:97:85:
                    04:7b:ba:aa:1c:a7:2d:66:5d:3c:a4:a7:f0:2e:5e:
                    ae:88:40:74:10:19:69:30:e7:6d:9e:18:39:7f:41:
                    c3:81:7f:c2:d3:e7:3b:83:3b:26:d2:85:05:84:97:
                    c6:ce:e6:ac:75:e8:20:39:30:6d:eb:d8:91:ab:d9:
                    c4:84:3e:68:62:dc:61:19:e6:c4:05:0a:78:ea:e2:
                    cd:fc:34:13:03:08:2f:d5:f4:61:94:e1:00:ed:8a:
                    07:2d:8b:8f:e1:fc:cb:7b:cb:00:5d:61:c7:5e:61:
                    a0:f3:c5:7d:1d:ed:30:18:3f:ec:29:40:51:f1:e3:
                    9b:c8:e3:0d:70:10:c3:d4:78:83:d0:87:1d:48:e0:
                    e2:be:5b:9a:6d:33:40:4d:9c:d4:b2:f2:c7:1f:54:
                    26:0d:78:2b:e3:72:30:4f:6e:d7:5c:bf:09:d3:22:
                    2a:5c:70:c7:2e:3d:76:39:21:62:50:66:84:fc:c8:
                    1c:93:78:50:1d:ee:00:51:78:02:eb:c5:af:c4:04:
                    ef:42:b7:9f:2a:58:7e:f2:6c:b3:c7:3e:eb:4f:b1:
                    f4:ff:09:f7:38:23:0a:45:4d:91:a1:0d:47:ef:0a:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:E3:2D:10:D0:4A:D9:3A:6A:7B:A5:60:A0:DA:DC:3A:4F:85:42
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a9b819954198f629d23cc56c13ac9e96df89e30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:35:8c:a8:cd:e8:86:c5:23:7c:d4:52:0b:3b:8f:29:e1:d0:
         54:75:a8:dd:02:d5:11:34:bd:02:8e:e5:7c:51:4b:e4:ac:83:
         49:df:e5:ab:ad:e9:08:d1:e0:55:7b:03:25:8f:91:b2:4e:19:
         d9:ff:4d:db:4b:1c:a7:e9:22:70:f3:21:20:0e:ee:b1:33:2e:
         67:59:18:ed:4d:28:26:9f:03:79:85:7d:ce:a4:3b:36:36:b1:
         67:05:41:92:ed:be:14:ec:bc:bb:43:b8:c6:f5:73:f1:c3:3c:
         b8:bf:7d:c0:36:f4:5f:a1:6a:5d:55:84:a6:59:ad:f5:ea:e8:
         db:dc:5a:84:df:41:46:b0:63:5c:95:34:fd:c8:82:2f:e8:c0:
         7f:b6:2f:af:62:b0:18:d3:02:8d:ae:0c:24:f4:cb:5a:ff:7a:
         2d:bb:06:3c:5b:d2:ac:75:e9:85:fd:33:26:bc:3b:57:30:63:
         d9:d5:30:78:25:91:4f:63:d8:2e:d9:c7:76:4a:55:b9:b6:12:
         f7:94:82:5a:e1:6b:79:10:cd:f6:cc:4e:89:c8:91:56:56:8c:
         4a:e6:dd:3d:fb:38:03:ec:38:e5:d6:ef:45:61:47:cc:d7:26:
         f2:65:c4:4c:ab:80:5c:21:50:6a:17:ad:05:73:3c:22:00:ab:
         0e:ef:ea:dd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEdOZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMTMw
MDMwMDAwWhcNMjMxMTMwMDMwMDAwWjAzMTEwLwYDVQQDEyhhOWI4MTk5NTQxOThm
NjI5ZDIzY2M1NmMxM2FjOWU5NmRmODllMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi+DBKc5xoSUQfYU3cPCPQc7/9lOQRzftHlDbl4UEe7qqHKct
Zl08pKfwLl6uiEB0EBlpMOdtnhg5f0HDgX/C0+c7gzsm0oUFhJfGzuasdeggOTBt
69iRq9nEhD5oYtxhGebEBQp46uLN/DQTAwgv1fRhlOEA7YoHLYuP4fzLe8sAXWHH
XmGg88V9He0wGD/sKUBR8eObyOMNcBDD1HiD0IcdSODivluabTNATZzUsvLHH1Qm
DXgr43IwT27XXL8J0yIqXHDHLj12OSFiUGaE/Mgck3hQHe4AUXgC68WvxATvQref
Klh+8myzxz7rT7H0/wn3OCMKRU2RoQ1H7wrgwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKLz4y0Q0ErZOmp7pWCg2tw6T4VCMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2E5YjgxOTk1NDE5OGY2MjlkMjNjYzU2YzEzYWM5ZTk2ZGY4OWUzMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXX1zANBgkqhkiG9w0BAQsFAAOCAQEAGTWMqM3ohsUjfNRS
CzuPKeHQVHWo3QLVETS9Ao7lfFFL5KyDSd/lq63pCNHgVXsDJY+Rsk4Z2f9N20sc
p+kicPMhIA7usTMuZ1kY7U0oJp8DeYV9zqQ7NjaxZwVBku2+FOy8u0O4xvVz8cM8
uL99wDb0X6FqXVWEplmt9ero29xahN9BRrBjXJU0/ciCL+jAf7Yvr2KwGNMCja4M
JPTLWv96LbsGPFvSrHXphf0zJrw7VzBj2dUweCWRT2PYLtnHdkpVubYS95SCWuFr
eRDN9sxOiciRVlaMSubdPfs4A+w45dbvRWFHzNcm8mXETKuAXCFQahetBXM8IgCr
Du/q3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org