Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c76353884e8dc92566e42cbb373fd5a414b751cc.roa
File:                     c76353884e8dc92566e42cbb373fd5a414b751cc.roa (raw, json)
Hash identifier:          9a0rfp8PDYTUWnL+ulfQzXhuO6VhoD5DjOHxBr47smc=
Subject key identifier:   05:4B:35:D4:5F:94:A9:61:40:7E:A7:58:2C:CD:92:CD:C0:C5:AD:1C
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       13AAF4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c76353884e8dc92566e42cbb373fd5a414b751cc.roa
Signing time:             Wed 05 Jan 2022 21:05:04 +0000
ROA not before:           Wed 05 Jan 2022 03:00:00 +0000
ROA not after:            Fri 05 Jan 2024 03:00:00 +0000
asID:                     266400
IP address blocks:        181.215.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288948 (0x13aaf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan  5 03:00:00 2022 GMT
            Not After : Jan  5 03:00:00 2024 GMT
        Subject: CN=c76353884e8dc92566e42cbb373fd5a414b751cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:c5:3d:f8:d2:18:a2:06:c2:66:c0:5e:f3:
                    d9:0a:78:9e:ff:e0:28:ee:51:bd:93:cc:dc:8e:8c:
                    30:7e:03:c5:78:15:4c:98:07:4c:84:21:a5:02:f7:
                    68:d0:13:d3:85:4e:82:15:a9:16:a9:2b:f3:e2:70:
                    18:61:0a:35:d5:a8:68:74:72:91:95:41:a8:e8:a4:
                    78:f3:27:a9:19:e1:a7:36:e0:07:35:f1:bf:7e:ea:
                    bb:92:81:5a:21:ad:6b:2b:93:24:b0:ba:c8:ba:a4:
                    6b:0e:15:80:9b:98:0b:0f:c0:4e:d7:df:37:69:95:
                    70:80:d9:ee:1d:d4:ea:29:59:5a:18:b2:28:13:06:
                    39:4b:45:3f:9c:cf:67:b2:af:2b:d8:7f:14:2e:ba:
                    67:15:2a:34:6d:0a:f4:77:61:e0:9f:2f:c0:18:70:
                    f7:a4:03:ba:93:ef:c9:d9:12:18:26:e5:5a:da:b5:
                    86:a0:8d:ee:bc:aa:89:ac:fd:da:51:ff:50:ca:ac:
                    18:6f:28:ab:be:80:53:df:d8:ba:cf:df:2f:36:f4:
                    ba:44:3f:a7:a3:95:42:81:e6:97:6c:58:17:f2:07:
                    57:cc:ce:73:62:d7:cb:66:a1:e0:71:c4:4b:60:44:
                    cf:3e:06:80:6f:07:7e:50:c1:e4:40:61:f7:58:97:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4B:35:D4:5F:94:A9:61:40:7E:A7:58:2C:CD:92:CD:C0:C5:AD:1C
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c76353884e8dc92566e42cbb373fd5a414b751cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:74:46:8d:40:30:c8:5e:f2:76:89:08:2c:96:73:9e:62:
         7e:71:23:d5:49:b4:11:e8:1e:b5:92:73:87:f5:01:9a:4e:94:
         68:34:a0:a1:7c:ae:13:cc:37:45:02:79:8f:06:3a:de:4b:40:
         6a:22:03:ca:12:60:fc:2c:25:8d:10:7b:6c:56:70:6b:90:d7:
         e5:34:f5:41:52:44:bb:5b:1b:53:f7:0f:e8:b7:fd:3f:2f:95:
         3d:d2:66:7a:c1:d5:ad:ab:dc:fc:74:91:e3:3e:36:b2:44:6d:
         1c:86:da:38:25:61:3a:d3:3c:80:69:5e:11:21:2c:73:10:e4:
         c2:54:cd:39:af:25:6b:3b:37:87:dd:a2:df:3a:b7:ef:78:8c:
         80:00:36:73:01:b6:b8:2c:55:e7:d2:4f:e4:24:ba:12:73:13:
         f7:35:e2:b6:8f:10:c1:ff:54:b9:cd:38:08:16:ca:ec:3b:4a:
         5d:29:0d:0c:b5:a2:e8:e8:49:97:22:d2:57:3d:d2:0c:9f:21:
         b0:d5:20:58:69:01:fb:db:02:6b:7b:f5:d6:cf:91:04:d2:65:
         50:e1:7a:b1:5e:d2:80:6c:c6:83:55:e0:54:e5:ec:68:ba:dc:
         9b:48:c2:42:db:fd:16:8c:bf:3c:9a:0a:94:7f:cd:35:ef:c5:
         64:d6:91:f4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE6r0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjIwMTA1
MDMwMDAwWhcNMjQwMTA1MDMwMDAwWjAzMTEwLwYDVQQDEyhjNzYzNTM4ODRlOGRj
OTI1NjZlNDJjYmIzNzNmZDVhNDE0Yjc1MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApY3FPfjSGKIGwmbAXvPZCnie/+Ao7lG9k8zcjowwfgPFeBVM
mAdMhCGlAvdo0BPThU6CFakWqSvz4nAYYQo11ahodHKRlUGo6KR48yepGeGnNuAH
NfG/fuq7koFaIa1rK5MksLrIuqRrDhWAm5gLD8BO1983aZVwgNnuHdTqKVlaGLIo
EwY5S0U/nM9nsq8r2H8ULrpnFSo0bQr0d2Hgny/AGHD3pAO6k+/J2RIYJuVa2rWG
oI3uvKqJrP3aUf9QyqwYbyirvoBT39i6z98vNvS6RD+no5VCgeaXbFgX8gdXzM5z
YtfLZqHgccRLYETPPgaAbwd+UMHkQGH3WJe6TwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAVLNdRflKlhQH6nWCzNks3Axa0cMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2M3NjM1Mzg4NGU4ZGM5MjU2NmU0MmNiYjM3M2ZkNWE0MTRiNzUxY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXX1zANBgkqhkiG9w0BAQsFAAOCAQEAFJp0Ro1AMMhe8naJ
CCyWc55ifnEj1Um0EegetZJzh/UBmk6UaDSgoXyuE8w3RQJ5jwY63ktAaiIDyhJg
/CwljRB7bFZwa5DX5TT1QVJEu1sbU/cP6Lf9Py+VPdJmesHVravc/HSR4z42skRt
HIbaOCVhOtM8gGleESEscxDkwlTNOa8lazs3h92i3zq373iMgAA2cwG2uCxV59JP
5CS6EnMT9zXito8Qwf9Uuc04CBbK7DtKXSkNDLWi6OhJlyLSVz3SDJ8hsNUgWGkB
+9sCa3v11s+RBNJlUOF6sV7SgGzGg1XgVOXsaLrcm0jCQtv9Foy/PJoKlH/NNe/F
ZNaR9A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org