Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6f32068799d8f21c0ba0b67016a1928337352c5c.roa
File:                     6f32068799d8f21c0ba0b67016a1928337352c5c.roa (raw, json)
Hash identifier:          7WkQM6an8cekqQIA83aRvGj+ZZtZkKzKCmyXBZsfVfI=
Subject key identifier:   68:3D:C3:0C:26:87:2E:C3:03:F6:D5:F4:91:78:AE:53:76:A3:50:ED
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DB2F7
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6f32068799d8f21c0ba0b67016a1928337352c5c.roa
Signing time:             Wed 24 Mar 2021 14:40:23 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     52331
IP address blocks:        181.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897783 (0xdb2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=6f32068799d8f21c0ba0b67016a1928337352c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:ea:ff:8b:f9:0b:b3:0b:54:50:49:8a:f7:
                    28:91:e4:87:6d:c4:8d:fa:75:25:f4:9e:dd:9c:3a:
                    f2:8c:a9:c5:39:14:9b:71:e0:bb:f9:b9:63:e6:bf:
                    44:2f:c5:36:6e:0b:68:16:0d:5f:ad:7b:78:81:61:
                    5b:00:eb:27:e2:b9:d4:ad:6c:fb:b2:44:7d:09:f1:
                    10:43:3a:ae:74:57:4e:dc:ee:f6:cd:15:90:da:07:
                    14:94:0e:72:b6:7d:f7:88:81:2b:45:4e:07:c9:6e:
                    9c:fe:1a:48:f8:10:f2:da:56:eb:bc:86:c4:23:0a:
                    31:b9:0f:7b:d7:d6:9a:f9:3c:09:f9:68:5c:3b:a3:
                    d3:15:b2:0e:f9:27:c2:95:5b:d2:23:de:3c:48:05:
                    24:7c:6f:b7:e4:09:1a:37:c3:23:d7:5e:7c:9f:2d:
                    ec:81:1a:6e:ed:8e:be:cc:d4:64:00:13:18:62:96:
                    43:54:be:50:0f:ea:14:e3:a6:5d:51:fa:c1:50:f7:
                    cb:97:c6:9d:0e:8f:04:4a:ac:6f:40:ea:f9:b5:87:
                    c7:b2:68:b8:b6:59:c2:26:c7:3d:37:be:0b:e8:2e:
                    47:51:b8:f9:ac:5b:fd:e3:9b:9d:bc:eb:f5:c7:0b:
                    d4:f2:ed:1c:93:d5:f5:a4:24:01:8f:a3:ea:43:cc:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:C3:0C:26:87:2E:C3:03:F6:D5:F4:91:78:AE:53:76:A3:50:ED
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/6f32068799d8f21c0ba0b67016a1928337352c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:ff:5c:2f:50:12:01:7e:b0:d7:18:41:82:8b:04:b9:52:
         76:92:34:05:9e:89:b0:b1:80:75:de:bb:14:d4:14:f1:5b:e1:
         1f:55:fe:07:c4:67:0a:8b:b4:4e:42:f6:69:07:ef:87:79:6f:
         16:54:2a:9c:b6:de:da:28:70:79:29:50:e0:76:7e:2d:b9:48:
         53:83:c5:e4:24:a3:05:e8:39:58:38:76:cd:d8:a4:f6:2e:e6:
         99:ef:0e:c4:42:f6:37:c4:67:67:6b:89:01:69:27:9f:bb:cb:
         4a:e8:cb:f2:01:03:b5:21:bd:8c:6a:c4:0e:73:f6:1a:82:35:
         fe:12:1a:ef:95:fe:e5:f7:46:cf:7b:81:58:a2:e9:08:75:46:
         6d:d9:9b:46:25:c3:91:5f:2a:60:40:c8:0a:5b:85:b1:15:04:
         ed:6c:30:66:c5:56:1a:d0:7c:bd:c3:37:c3:0e:81:bc:0c:0b:
         d0:2c:48:4e:4b:90:e3:70:57:09:4d:84:19:85:3c:9e:49:ed:
         7a:29:cf:83:48:84:61:c6:a3:62:e6:a6:49:98:08:b3:e8:06:
         ec:85:0c:17:73:50:55:ef:02:3b:f4:5d:f1:35:91:37:c7:bf:
         d3:8a:b9:b4:f7:20:ae:81:0e:49:b4:b4:38:b1:dd:c6:c9:69:
         c5:4d:f1:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDbL3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
ODEyZWVjZmNjMDFkMzhjNDQ0ZGJlYWU1MzIzNDY1MWFmOGM4NGQwHhcNMjEwMzI0
MTQ0MDIzWhcNMjYwMzI0MTQ0MDIzWjAzMTEwLwYDVQQDEyg2ZjMyMDY4Nzk5ZDhm
MjFjMGJhMGI2NzAxNmExOTI4MzM3MzUyYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjXzq/4v5C7MLVFBJivcokeSHbcSN+nUl9J7dnDryjKnFORSb
ceC7+blj5r9EL8U2bgtoFg1frXt4gWFbAOsn4rnUrWz7skR9CfEQQzqudFdO3O72
zRWQ2gcUlA5ytn33iIErRU4HyW6c/hpI+BDy2lbrvIbEIwoxuQ9719aa+TwJ+Whc
O6PTFbIO+SfClVvSI948SAUkfG+35AkaN8Mj1158ny3sgRpu7Y6+zNRkABMYYpZD
VL5QD+oU46ZdUfrBUPfLl8adDo8ESqxvQOr5tYfHsmi4tlnCJsc9N74L6C5HUbj5
rFv945udvOv1xwvU8u0ck9X1pCQBj6PqQ8zX5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGg9wwwmhy7DA/bV9JF4rlN2o1DtMB8GA1UdIwQYMBaAFMVk0AydCQQDZ/TG
yoKXlo/kro9KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI4MTJl
ZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzZmMzIwNjg3OTlkOGYyMWMwYmEwYjY3MDE2YTE5MjgzMzczNTJjNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvYWI4MTJlZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW81DANBgkqhkiG9w0BAQsFAAOCAQEAS0H/XC9QEgF+sNcY
QYKLBLlSdpI0BZ6JsLGAdd67FNQU8VvhH1X+B8RnCou0TkL2aQfvh3lvFlQqnLbe
2ihweSlQ4HZ+LblIU4PF5CSjBeg5WDh2zdik9i7mme8OxEL2N8RnZ2uJAWknn7vL
SujL8gEDtSG9jGrEDnP2GoI1/hIa75X+5fdGz3uBWKLpCHVGbdmbRiXDkV8qYEDI
CluFsRUE7WwwZsVWGtB8vcM3ww6BvAwL0CxITkuQ43BXCU2EGYU8nknteinPg0iE
YcajYuamSZgIs+gG7IUMF3NQVe8CO/Rd8TWRN8e/04q5tPcgroEOSbS0OLHdxslp
xU3xLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org