Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/2b7a992fe6aedf5994120406f3da7cbe153aae4a.roa
File:                     2b7a992fe6aedf5994120406f3da7cbe153aae4a.roa (raw, json)
Hash identifier:          u4TLxl1qWhPB732CkPrTRCZLNIOXfogHe0mFB+hTRXk=
Subject key identifier:   F9:43:72:98:E6:B6:73:64:63:91:C2:68:07:97:DE:72:A2:E1:64:E5
Certificate issuer:       /CN=b80851dbe630162fa48a971618bbb58a4472f664
Certificate serial:       0D4000
Authority key identifier: A4:A6:89:EF:41:2A:2A:64:AA:27:89:7A:AC:D0:DB:0C:BE:80:C1:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b80851dbe630162fa48a971618bbb58a4472f664.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/2b7a992fe6aedf5994120406f3da7cbe153aae4a.roa
Signing time:             Wed 24 Mar 2021 14:47:05 +0000
ROA not before:           Wed 24 Mar 2021 14:47:05 +0000
ROA not after:            Tue 24 Mar 2026 14:47:05 +0000
asID:                     27800
IP address blocks:        181.118.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868352 (0xd4000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80851dbe630162fa48a971618bbb58a4472f664
        Validity
            Not Before: Mar 24 14:47:05 2021 GMT
            Not After : Mar 24 14:47:05 2026 GMT
        Subject: CN=2b7a992fe6aedf5994120406f3da7cbe153aae4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:d5:d7:30:2b:9b:cc:45:75:00:0e:74:27:
                    ba:57:b4:ca:38:0c:94:af:a8:9c:80:ac:28:1e:f2:
                    1e:86:dd:95:b0:92:f9:d8:81:d3:17:03:ac:3f:44:
                    04:8c:e5:8d:29:c7:6a:91:a5:0b:57:bf:41:dc:3e:
                    d6:af:ab:c9:f5:13:a0:97:92:0d:7e:e7:18:58:ed:
                    21:6f:da:9f:1c:c1:4a:61:e4:37:4a:d1:3e:31:fe:
                    bb:15:44:a7:ac:18:81:32:aa:fa:eb:ac:aa:eb:ed:
                    98:ea:29:59:a1:70:1a:37:b8:9e:1a:96:bb:f5:f5:
                    73:3d:7f:2d:ea:ae:88:e7:20:cf:c7:13:cf:40:e0:
                    13:82:8d:cf:8f:9c:f7:5f:61:95:1b:4a:5e:74:c4:
                    fb:b2:89:40:f9:37:e7:d6:16:ae:4c:a7:b1:6f:3e:
                    70:8a:68:cb:88:c8:20:12:97:90:8f:6a:34:c3:15:
                    70:b9:4a:bd:07:4a:8e:b3:de:bf:3e:dc:0b:20:22:
                    40:05:43:b3:b9:85:c0:45:52:4a:1f:f3:c1:1a:ee:
                    00:ba:62:ef:78:91:92:95:39:4e:81:00:74:b3:72:
                    87:08:d6:3c:d0:b8:78:16:20:18:e2:b6:d8:9b:80:
                    60:be:7b:6b:d3:17:73:d0:6c:f5:8c:98:f1:13:8e:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:72:98:E6:B6:73:64:63:91:C2:68:07:97:DE:72:A2:E1:64:E5
            X509v3 Authority Key Identifier:
                keyid:A4:A6:89:EF:41:2A:2A:64:AA:27:89:7A:AC:D0:DB:0C:BE:80:C1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b80851dbe630162fa48a971618bbb58a4472f664.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/2b7a992fe6aedf5994120406f3da7cbe153aae4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c1e57fa-5211-43f2-8bc5-4ce86d437d57/b80851dbe630162fa48a971618bbb58a4472f664.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d8:49:f0:c2:40:c5:55:0f:96:b1:b1:7b:d0:d0:ad:47:32:
         7b:a7:db:28:27:11:3a:26:4c:d0:37:f2:4f:7d:46:28:f1:86:
         e2:3e:ae:0f:f0:1b:74:d8:31:8c:6c:1e:52:3d:ce:89:6c:ed:
         dd:03:e2:ae:90:7c:61:8b:e9:60:b1:0c:b7:00:f0:a7:94:fe:
         4e:b3:22:b7:29:c9:9c:e1:34:38:ae:94:64:b1:c3:95:c9:16:
         5c:38:06:f4:8a:67:f6:00:91:57:ad:05:2e:f9:8c:06:de:2c:
         0d:26:40:b7:b9:2b:6c:37:c7:dc:f0:a4:21:25:c1:3c:e9:b7:
         48:92:7d:48:3b:48:93:9a:22:6b:2d:76:ec:32:95:e7:0a:8f:
         02:95:9d:3c:4b:03:1c:f6:b1:e6:71:99:d1:7c:0a:ca:c6:6a:
         63:9f:08:0e:13:a7:d4:b9:51:1b:e7:56:ff:d8:dc:08:ef:89:
         92:bb:84:e0:1d:cf:16:ca:07:1c:8e:d0:2c:36:6f:07:55:8e:
         d7:67:85:a9:1e:5e:0f:a8:b2:06:c9:f4:60:a1:2a:dd:e5:73:
         72:32:17:d2:3b:c4:9a:c9:6e:66:51:d8:ce:55:5e:f2:ca:41:
         40:52:25:e2:05:f5:57:68:fa:40:2e:c5:f4:23:78:fa:8d:64:
         72:d6:e9:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDUAAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
MDg1MWRiZTYzMDE2MmZhNDhhOTcxNjE4YmJiNThhNDQ3MmY2NjQwHhcNMjEwMzI0
MTQ0NzA1WhcNMjYwMzI0MTQ0NzA1WjAzMTEwLwYDVQQDEygyYjdhOTkyZmU2YWVk
ZjU5OTQxMjA0MDZmM2RhN2NiZTE1M2FhZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj13V1zArm8xFdQAOdCe6V7TKOAyUr6icgKwoHvIeht2VsJL5
2IHTFwOsP0QEjOWNKcdqkaULV79B3D7Wr6vJ9ROgl5INfucYWO0hb9qfHMFKYeQ3
StE+Mf67FUSnrBiBMqr666yq6+2Y6ilZoXAaN7ieGpa79fVzPX8t6q6I5yDPxxPP
QOATgo3Pj5z3X2GVG0pedMT7solA+Tfn1hauTKexbz5wimjLiMggEpeQj2o0wxVw
uUq9B0qOs96/PtwLICJABUOzuYXARVJKH/PBGu4AumLveJGSlTlOgQB0s3KHCNY8
0Lh4FiAY4rbYm4Bgvntr0xdz0Gz1jJjxE44SywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPlDcpjmtnNkY5HCaAeX3nKi4WTlMB8GA1UdIwQYMBaAFKSmie9BKipkqieJ
eqzQ2wy+gMHJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjgwODUx
ZGJlNjMwMTYyZmE0OGE5NzE2MThiYmI1OGE0NDcyZjY2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmMxZTU3ZmEtNTIxMS00M2YyLThiYzUtNGNlODZk
NDM3ZDU3LzJiN2E5OTJmZTZhZWRmNTk5NDEyMDQwNmYzZGE3Y2JlMTUzYWFlNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzFlNTdmYS01MjExLTQzZjItOGJjNS00Y2U4
NmQ0MzdkNTcvYjgwODUxZGJlNjMwMTYyZmE0OGE5NzE2MThiYmI1OGE0NDcyZjY2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALV2IDANBgkqhkiG9w0BAQsFAAOCAQEAV9hJ8MJAxVUPlrGx
e9DQrUcye6fbKCcROiZM0DfyT31GKPGG4j6uD/AbdNgxjGweUj3OiWzt3QPirpB8
YYvpYLEMtwDwp5T+TrMitynJnOE0OK6UZLHDlckWXDgG9Ipn9gCRV60FLvmMBt4s
DSZAt7krbDfH3PCkISXBPOm3SJJ9SDtIk5oiay127DKV5wqPApWdPEsDHPax5nGZ
0XwKysZqY58IDhOn1LlRG+dW/9jcCO+JkruE4B3PFsoHHI7QLDZvB1WO12eFqR5e
D6iyBsn0YKEq3eVzcjIX0jvEmsluZlHYzlVe8spBQFIl4gX1V2j6QC7F9CN4+o1k
ctbpWA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org