Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa
File:                     9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa (raw, json)
Hash identifier:          U0MLNedPYp5MhY/e//8cPl46JiKj84AWYCoOS2IHt9Y=
Subject key identifier:   7F:63:C4:0A:87:3F:E2:7B:09:06:77:67:BD:2A:60:CF:BA:CD:A5:3E
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       299218
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa
Signing time:             Tue 06 Feb 2024 15:36:59 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        181.188.192.0/18 maxlen: 18
                          181.188.192.0/20 maxlen: 20
                          181.188.192.0/24 maxlen: 24
                          181.188.200.0/24 maxlen: 24
                          181.188.201.0/24 maxlen: 24
                          181.188.224.0/24 maxlen: 24
                          181.188.232.0/24 maxlen: 24
                          181.188.240.0/24 maxlen: 24
                          181.188.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724376 (0x299218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=9e33c752bc289048aaf46de12c7e7e63bc94e1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:d3:b0:cf:9a:de:95:7e:0f:7d:ec:91:d3:
                    ba:ec:4e:f1:20:a8:d9:c6:ca:76:c0:36:f3:93:1c:
                    39:fb:04:b1:08:6e:50:0a:33:28:a7:15:61:ba:21:
                    43:e5:98:48:8a:7d:6b:9b:a7:8d:58:42:d5:21:d0:
                    06:97:b8:7c:75:a0:2a:32:66:d5:66:e2:86:84:8c:
                    66:62:3b:a2:0f:52:1e:cd:d6:44:76:81:2e:f9:0d:
                    d1:84:3e:85:c6:10:1d:93:5d:3f:75:ff:d2:9f:c5:
                    5d:8d:40:b2:83:5b:4b:d5:63:74:ca:a2:0c:e7:22:
                    b4:6a:db:f6:c8:be:64:f9:39:74:7f:47:e2:df:77:
                    f2:aa:0e:49:1f:34:ea:34:7a:0d:3b:0b:0d:31:88:
                    99:93:5f:09:6a:f1:b9:99:b6:f2:c4:6f:ee:79:22:
                    42:ba:c3:e9:d4:a9:9f:81:7d:42:6c:d2:d9:f9:8e:
                    a9:fd:7d:b8:60:ae:fa:70:fb:ab:52:b4:a0:dd:17:
                    d5:96:dc:db:d7:a4:c6:4b:58:01:f9:0b:3d:29:5c:
                    39:ec:99:33:fc:0b:d2:5e:67:24:d5:f3:7f:04:5c:
                    65:14:5d:e9:87:ce:1f:1e:87:55:c4:cf:6d:ec:c5:
                    e6:62:1c:8d:de:e6:6e:a9:47:d2:6a:7e:2a:5b:53:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:C4:0A:87:3F:E2:7B:09:06:77:67:BD:2A:60:CF:BA:CD:A5:3E
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:59:1b:5f:64:ca:72:a3:45:06:99:f9:f1:ab:fa:b3:5a:
         f1:ad:82:73:7f:7f:c3:77:af:4e:fb:34:9a:6a:30:4d:11:a4:
         c1:ba:d7:50:f0:ba:4f:41:de:ed:e3:36:25:c5:99:ac:99:90:
         c6:a9:2f:09:ad:32:7a:4a:0b:7a:a5:f8:8f:6a:2e:97:1a:ed:
         2a:9a:84:9d:d7:43:39:ed:52:67:6c:ca:3d:9b:f1:a5:58:23:
         da:4c:bb:0c:95:2e:60:11:10:61:a0:3b:28:b0:ef:bb:64:47:
         8b:4f:c4:71:3f:4d:e8:10:e8:61:97:87:b3:88:27:76:b2:b9:
         33:a7:73:f5:fd:20:02:6f:49:13:14:31:65:33:43:ef:c9:2c:
         97:75:31:f2:d4:b3:d9:e7:b3:8d:7c:a7:21:32:ff:53:81:dc:
         92:6d:cb:7b:98:cf:d0:78:cf:c6:97:8c:43:0e:cf:04:ec:29:
         a6:35:22:52:56:d4:77:9a:1e:e1:b7:e3:55:2f:49:d5:ce:91:
         55:7a:14:ce:4c:80:4a:d4:1f:f4:08:af:a5:76:1a:bf:d9:38:
         28:21:6c:56:e8:18:aa:43:4c:b1:63:2c:76:79:6c:d2:ef:32:
         60:27:9e:78:f1:05:38:5f:a2:d7:9e:fa:86:b0:a2:a5:cf:f7:
         e0:d7:3b:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKZIYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEyg5ZTMzYzc1MmJjMjg5
MDQ4YWFmNDZkZTEyYzdlN2U2M2JjOTRlMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp+fTsM+a3pV+D33skdO67E7xIKjZxsp2wDbzkxw5+wSxCG5Q
CjMopxVhuiFD5ZhIin1rm6eNWELVIdAGl7h8daAqMmbVZuKGhIxmYjuiD1IezdZE
doEu+Q3RhD6FxhAdk10/df/Sn8VdjUCyg1tL1WN0yqIM5yK0atv2yL5k+Tl0f0fi
33fyqg5JHzTqNHoNOwsNMYiZk18JavG5mbbyxG/ueSJCusPp1KmfgX1CbNLZ+Y6p
/X24YK76cPurUrSg3RfVltzb16TGS1gB+Qs9KVw57Jkz/AvSXmck1fN/BFxlFF3p
h84fHodVxM9t7MXmYhyN3uZuqUfSan4qW1PC8QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH9jxAqHP+J7CQZ3Z70qYM+6zaU+MB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzllMzNjNzUyYmMyODkwNDhhYWY0NmRlMTJjN2U3ZTYzYmM5NGUxZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBrW8wDANBgkqhkiG9w0BAQsFAAOCAQEATe5ZG19kynKjRQaZ
+fGr+rNa8a2Cc39/w3evTvs0mmowTRGkwbrXUPC6T0He7eM2JcWZrJmQxqkvCa0y
ekoLeqX4j2oulxrtKpqEnddDOe1SZ2zKPZvxpVgj2ky7DJUuYBEQYaA7KLDvu2RH
i0/EcT9N6BDoYZeHs4gndrK5M6dz9f0gAm9JExQxZTND78ksl3Ux8tSz2eezjXyn
ITL/U4Hckm3Le5jP0HjPxpeMQw7PBOwppjUiUlbUd5oe4bfjVS9J1c6RVXoUzkyA
StQf9AivpXYav9k4KCFsVugYqkNMsWMsdnls0u8yYCeeePEFOF+i1576hrCipc/3
4Nc7Fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org