Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6e975c73f6c512d3c5ce585cb8f0fbfc851408db.roa
File:                     6e975c73f6c512d3c5ce585cb8f0fbfc851408db.roa (raw, json)
Hash identifier:          SaZ/vPHsi+MaNTqV8zikLwHpFrfchPr0UKcL7fAJk10=
Subject key identifier:   57:29:00:F0:A6:A3:F7:E5:AE:D1:5C:8F:70:B0:AD:E6:FF:6E:02:F1
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       2A30F0
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6e975c73f6c512d3c5ce585cb8f0fbfc851408db.roa
Signing time:             Tue 06 Feb 2024 15:38:31 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     7315
IP address blocks:        181.188.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765040 (0x2a30f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=6e975c73f6c512d3c5ce585cb8f0fbfc851408db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:af:b9:83:4a:9a:e3:7c:ec:e1:c0:e5:64:
                    c4:22:5a:65:8d:90:45:66:76:8a:52:4e:c6:be:6c:
                    41:fa:f6:ad:74:27:2b:cc:db:f0:be:da:96:8b:2b:
                    58:3b:b3:df:d7:b0:f7:f4:eb:94:61:0c:40:4c:32:
                    df:8f:1e:71:6e:13:a3:01:4c:9c:c6:d0:6c:69:f8:
                    24:09:ff:9f:de:c5:01:a3:53:95:67:b5:1b:eb:a4:
                    97:b1:f2:d7:da:4d:62:2d:6a:87:7a:b5:a0:14:93:
                    a0:78:45:6e:c6:62:37:32:30:ba:d5:8c:18:56:ce:
                    a8:14:ef:ce:d5:50:46:ca:6c:e8:cc:12:fb:68:59:
                    c9:25:e6:90:90:21:34:ba:34:c3:8b:0a:4f:3b:67:
                    02:5e:77:bc:fc:9c:3b:88:5d:9f:03:98:95:39:48:
                    30:ce:4a:09:fe:90:21:0c:a1:8c:36:b1:84:40:98:
                    b4:dd:4e:15:88:cf:0f:0e:d5:a0:ec:61:30:c9:f9:
                    a3:04:7f:57:f9:a4:76:b5:e9:8b:6f:4e:b7:94:92:
                    e9:f3:52:b8:4c:74:6b:86:eb:b8:f6:5a:4a:07:dc:
                    c4:fc:e6:41:ff:da:b1:10:ef:cc:25:d1:67:83:ab:
                    94:ee:1d:2a:4c:47:a3:ad:45:74:eb:8f:ec:e2:f6:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:00:F0:A6:A3:F7:E5:AE:D1:5C:8F:70:B0:AD:E6:FF:6E:02:F1
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6e975c73f6c512d3c5ce585cb8f0fbfc851408db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:12:3c:eb:cd:c3:46:c8:da:c7:bb:71:4f:a6:4a:d4:0e:ad:
         96:ec:c8:b1:79:a0:9b:22:bd:63:43:0c:87:89:73:e0:cf:cd:
         20:0b:cd:93:d1:02:0e:e9:9d:e9:30:55:ab:db:c9:77:31:fb:
         0c:bf:d6:e4:7c:1c:22:13:5e:62:1e:c0:ee:6c:d7:80:17:9c:
         9b:9c:dd:e4:21:b6:7a:7a:fb:15:26:b2:74:7a:66:2d:20:9b:
         39:c6:83:f2:45:52:e9:9e:c4:39:e8:ac:97:04:18:ae:bb:18:
         40:ba:e4:2e:45:51:d3:27:ba:19:dc:e1:9a:e9:c8:78:84:90:
         e6:45:ab:2f:c7:1d:af:f0:15:3f:0d:47:f0:46:31:2a:cb:23:
         32:0e:01:9e:70:1d:a2:02:b2:1f:ae:98:43:30:7d:65:f7:f7:
         7b:7a:80:d6:f0:fd:cc:f7:de:d2:4a:cb:a6:42:fd:8d:a3:3b:
         68:80:dd:0d:20:10:1e:76:46:58:4c:4c:83:f0:cf:c2:43:a8:
         bc:86:34:69:71:f7:b9:a9:3c:e4:b5:8c:66:fb:7f:2b:f7:03:
         ef:e7:28:56:59:c4:26:7f:5c:37:d2:f0:00:ad:1c:87:e5:0e:
         fd:f6:c3:a7:1a:84:47:93:f9:c6:3e:ad:e4:34:17:c1:57:1b:
         5b:4d:14:13
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKjDwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEyg2ZTk3NWM3M2Y2YzUx
MmQzYzVjZTU4NWNiOGYwZmJmYzg1MTQwOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkwWvuYNKmuN87OHA5WTEIlpljZBFZnaKUk7GvmxB+vatdCcr
zNvwvtqWiytYO7Pf17D39OuUYQxATDLfjx5xbhOjAUycxtBsafgkCf+f3sUBo1OV
Z7Ub66SXsfLX2k1iLWqHerWgFJOgeEVuxmI3MjC61YwYVs6oFO/O1VBGymzozBL7
aFnJJeaQkCE0ujTDiwpPO2cCXne8/Jw7iF2fA5iVOUgwzkoJ/pAhDKGMNrGEQJi0
3U4ViM8PDtWg7GEwyfmjBH9X+aR2temLb063lJLp81K4THRrhuu49lpKB9zE/OZB
/9qxEO/MJdFng6uU7h0qTEejrUV064/s4vaG8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFcpAPCmo/flrtFcj3Cwreb/bgLxMB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzZlOTc1YzczZjZjNTEyZDNjNWNlNTg1Y2I4ZjBmYmZjODUxNDA4ZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW8yTANBgkqhkiG9w0BAQsFAAOCAQEAgxI8683DRsjax7tx
T6ZK1A6tluzIsXmgmyK9Y0MMh4lz4M/NIAvNk9ECDumd6TBVq9vJdzH7DL/W5Hwc
IhNeYh7A7mzXgBecm5zd5CG2enr7FSaydHpmLSCbOcaD8kVS6Z7EOeislwQYrrsY
QLrkLkVR0ye6GdzhmunIeISQ5kWrL8cdr/AVPw1H8EYxKssjMg4BnnAdogKyH66Y
QzB9Zff3e3qA1vD9zPfe0krLpkL9jaM7aIDdDSAQHnZGWExMg/DPwkOovIY0aXH3
uak85LWMZvt/K/cD7+coVlnEJn9cN9LwAK0ch+UO/fbDpxqER5P5xj6t5DQXwVcb
W00UEw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org