Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/61de6d108efbf236a97a795dfb259ab638689f25.roa
File:                     61de6d108efbf236a97a795dfb259ab638689f25.roa (raw, json)
Hash identifier:          eKQZWeDiHGpsoLtydDSPv2WZ7R5AjmcHKaGy0REM8+c=
Subject key identifier:   E1:03:36:0D:F7:15:C3:7A:E8:9E:88:80:11:F7:5B:C5:49:33:D6:25
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DEF25
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/61de6d108efbf236a97a795dfb259ab638689f25.roa
Signing time:             Thu 07 Dec 2023 12:42:58 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     27875
IP address blocks:        181.10.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010341 (0x2def25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=61de6d108efbf236a97a795dfb259ab638689f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:21:3e:53:b2:da:03:cd:4f:67:35:fb:ee:
                    56:4d:4f:f5:b4:33:61:51:58:d5:6e:9c:8e:18:88:
                    3b:62:29:58:69:e6:0b:3e:0d:20:66:3a:a5:b2:e7:
                    8d:42:8a:0f:01:14:12:fb:59:cd:c5:f2:4d:4b:a1:
                    17:13:cf:04:40:7f:6c:91:04:e5:fb:89:38:f4:19:
                    bb:88:a8:35:10:05:89:1d:da:69:ad:73:61:e2:19:
                    20:8f:d4:dd:94:f6:b7:80:97:27:02:e1:3d:9b:24:
                    9f:06:13:9f:4b:f8:e2:cd:fb:f3:e2:29:6c:6d:8d:
                    b2:6d:71:8b:fe:60:fc:7b:38:6b:31:b7:31:f4:2b:
                    d7:9b:bc:c5:7b:63:1f:76:93:4f:d6:52:ae:84:d7:
                    5e:3e:ce:a6:cb:41:9e:72:49:3d:85:76:a2:7f:92:
                    ec:83:39:30:8b:8e:81:50:71:48:72:94:06:2b:c0:
                    0f:13:ad:f0:aa:3a:de:7e:8b:17:ae:5e:f2:3f:fc:
                    f1:ad:11:9d:4a:43:02:bd:19:02:88:74:ef:0a:e9:
                    64:90:23:95:de:5e:93:6f:d8:65:f1:ec:ff:68:98:
                    be:78:99:cb:12:f3:43:c8:a0:95:50:8e:cb:88:0d:
                    cb:4d:0a:29:83:7a:ca:98:b5:a1:ec:e3:5c:f4:cd:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:36:0D:F7:15:C3:7A:E8:9E:88:80:11:F7:5B:C5:49:33:D6:25
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/61de6d108efbf236a97a795dfb259ab638689f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:64:0b:2c:33:cb:ad:89:f5:49:04:96:b1:62:10:fc:cc:
         f2:70:de:91:ba:6e:a6:85:5d:ec:97:c1:3d:c8:5d:93:82:96:
         47:f9:c8:f6:d0:9b:10:c5:02:d6:97:01:2f:03:82:a4:67:fc:
         7d:90:54:5e:24:be:47:a9:4f:05:91:ae:16:1e:16:88:25:82:
         58:37:3a:d9:c7:45:1d:96:e6:f6:c8:52:35:42:08:77:c4:8b:
         8f:67:c0:40:6d:38:7a:95:7b:f1:52:0a:c7:a1:4c:e7:1d:79:
         b3:60:a2:c4:33:f2:0b:07:92:90:f8:52:5b:d4:d6:49:a0:58:
         f8:28:55:3d:7b:64:32:d3:12:5d:b1:51:5c:e8:3b:32:25:38:
         a8:c1:e0:f5:56:7c:2e:a0:43:01:59:18:09:ba:96:a8:b7:29:
         10:17:ec:91:d2:bf:bd:78:41:68:90:7c:b8:e9:3a:4a:b6:b6:
         75:b3:0c:8e:3b:d5:2c:bc:42:ee:2d:9a:19:cc:ce:68:bf:c9:
         e2:12:a6:cb:30:3e:e0:b9:f8:e8:e9:c3:44:e6:25:7c:05:f5:
         38:9f:35:38:c6:61:51:50:43:2f:2f:e2:cd:80:4f:74:9a:70:
         9b:5b:06:16:db:0f:0c:ec:c0:83:45:fe:c7:bf:75:2f:bb:78:
         81:25:0b:b8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLe8lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyg2MWRlNmQxMDhlZmJm
MjM2YTk3YTc5NWRmYjI1OWFiNjM4Njg5ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1TchPlOy2gPNT2c1++5WTU/1tDNhUVjVbpyOGIg7YilYaeYL
Pg0gZjqlsueNQooPARQS+1nNxfJNS6EXE88EQH9skQTl+4k49Bm7iKg1EAWJHdpp
rXNh4hkgj9TdlPa3gJcnAuE9mySfBhOfS/jizfvz4ilsbY2ybXGL/mD8ezhrMbcx
9CvXm7zFe2MfdpNP1lKuhNdePs6my0Geckk9hXaif5Lsgzkwi46BUHFIcpQGK8AP
E63wqjrefosXrl7yP/zxrRGdSkMCvRkCiHTvCulkkCOV3l6Tb9hl8ez/aJi+eJnL
EvNDyKCVUI7LiA3LTQopg3rKmLWh7ONc9M2mawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOEDNg33FcN66J6IgBH3W8VJM9YlMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzYxZGU2ZDEwOGVmYmYyMzZhOTdhNzk1ZGZiMjU5YWI2Mzg2ODlmMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUKtDANBgkqhkiG9w0BAQsFAAOCAQEAFOZkCywzy62J9UkE
lrFiEPzM8nDekbpupoVd7JfBPchdk4KWR/nI9tCbEMUC1pcBLwOCpGf8fZBUXiS+
R6lPBZGuFh4WiCWCWDc62cdFHZbm9shSNUIId8SLj2fAQG04epV78VIKx6FM5x15
s2CixDPyCweSkPhSW9TWSaBY+ChVPXtkMtMSXbFRXOg7MiU4qMHg9VZ8LqBDAVkY
CbqWqLcpEBfskdK/vXhBaJB8uOk6Sra2dbMMjjvVLLxC7i2aGczOaL/J4hKmyzA+
4Ln46OnDROYlfAX1OJ81OMZhUVBDLy/izYBPdJpwm1sGFtsPDOzAg0X+x791L7t4
gSULuA==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org