Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/878fb5a9-a616-447c-9379-b7ad7adde0ec/22a1e95f504b8c9a7e4388b9a42831bcf98b299b.roa
File:                     22a1e95f504b8c9a7e4388b9a42831bcf98b299b.roa (raw, json)
Hash identifier:          SmSAGOgAC0PjIjI6yeFJGaB1l9UDqmvzBYXmhOzWMCA=
Subject key identifier:   BF:A1:5F:6C:D5:E7:A6:7E:52:91:53:4D:93:64:55:18:21:61:4A:E9
Certificate issuer:       /CN=df1415c33947c25ca12181e4eb1643c5c66272bc
Certificate serial:       68FC
Authority key identifier: 21:DD:C1:4B:9C:0D:13:17:80:3C:22:23:41:CE:8B:82:3C:F5:33:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df1415c33947c25ca12181e4eb1643c5c66272bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/878fb5a9-a616-447c-9379-b7ad7adde0ec/22a1e95f504b8c9a7e4388b9a42831bcf98b299b.roa
Signing time:             Wed 19 Apr 2023 22:57:53 +0000
ROA not before:           Tue 18 Apr 2023 22:57:53 +0000
ROA not after:            Sat 19 Apr 2025 22:57:53 +0000
asID:                     272061
IP address blocks:        181.233.62.0/23 maxlen: 24
                          181.189.27.0/24 maxlen: 24
                          2803:fd10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26876 (0x68fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df1415c33947c25ca12181e4eb1643c5c66272bc
        Validity
            Not Before: Apr 18 22:57:53 2023 GMT
            Not After : Apr 19 22:57:53 2025 GMT
        Subject: CN=22a1e95f504b8c9a7e4388b9a42831bcf98b299b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:01:a6:f4:4a:04:40:03:4a:f2:d6:e8:75:
                    86:f0:db:14:15:7e:a2:b0:3c:7f:3e:e2:f3:a4:1b:
                    23:74:b0:ae:97:46:04:f3:48:33:a0:26:d1:2b:5a:
                    58:25:f1:1f:ea:0a:ce:35:0a:62:ea:21:4c:1e:f6:
                    d9:29:88:1d:7e:10:f2:66:81:9e:1c:f4:39:71:9b:
                    08:bd:22:4a:29:11:f7:9a:c9:d6:d9:96:02:32:e9:
                    44:0c:d6:71:aa:3d:60:0d:71:0c:43:e3:22:70:ec:
                    fd:02:bc:73:4e:89:56:ee:41:23:4a:52:55:33:34:
                    64:5d:20:bd:0c:38:f9:f1:e5:5f:34:5f:11:88:a7:
                    be:d7:04:42:10:24:ec:46:75:b3:1e:f7:9d:82:d8:
                    7e:34:08:bd:47:6a:e8:4e:ad:e0:75:1b:2d:af:70:
                    af:ca:c2:ef:69:da:26:7a:21:dc:e0:39:bf:a1:c5:
                    5b:4c:15:76:04:f7:ca:cc:04:88:0c:8d:f2:e1:88:
                    01:f5:4d:18:b7:c2:12:d6:4c:e2:9d:74:7d:eb:72:
                    a9:20:81:ae:42:46:64:77:ad:f6:0e:91:e5:9c:98:
                    50:9e:46:4d:7a:a4:bd:5d:4a:9b:57:92:05:24:f5:
                    55:20:a8:fa:60:7b:39:16:30:a0:e3:66:4b:4e:93:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:5F:6C:D5:E7:A6:7E:52:91:53:4D:93:64:55:18:21:61:4A:E9
            X509v3 Authority Key Identifier:
                keyid:21:DD:C1:4B:9C:0D:13:17:80:3C:22:23:41:CE:8B:82:3C:F5:33:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df1415c33947c25ca12181e4eb1643c5c66272bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/878fb5a9-a616-447c-9379-b7ad7adde0ec/22a1e95f504b8c9a7e4388b9a42831bcf98b299b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/878fb5a9-a616-447c-9379-b7ad7adde0ec/df1415c33947c25ca12181e4eb1643c5c66272bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.27.0/24
                  181.233.62.0/23
                IPv6:
                  2803:fd10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:e2:4a:bf:7f:58:c4:3c:fb:56:0e:c2:e9:02:2c:a8:85:
         4c:02:98:2f:21:cd:a0:0f:9e:f8:4c:b9:c9:91:95:a8:0a:43:
         00:d1:e8:2d:23:bd:0a:85:46:92:8c:5a:45:d1:8d:6a:39:f9:
         98:e2:7a:3b:cb:f6:4d:ef:ca:bd:5a:20:a8:7a:ce:a4:79:3f:
         7f:56:5f:b8:19:8a:35:c0:a6:1b:a4:bb:98:4c:f9:65:b5:6f:
         5e:d2:23:6f:cf:90:cf:2d:b5:3f:00:33:a0:17:dc:67:36:c3:
         a1:c6:01:5f:3a:69:d2:73:bd:d7:db:2b:54:d1:10:29:03:fc:
         fe:cc:cf:03:d7:fd:17:11:4e:90:90:6b:71:e7:0b:91:49:ad:
         10:31:1f:4c:00:3e:08:81:53:d6:3e:1d:f1:ec:0d:b0:d2:c8:
         66:7c:79:3d:4d:d8:51:20:e5:55:c2:0c:57:94:aa:a4:2c:67:
         72:96:ba:4e:53:ae:34:f9:27:b2:f8:36:f0:15:db:0b:99:47:
         0b:b1:09:15:7e:2b:b7:24:a9:87:bd:c6:a5:0d:40:a2:96:93:
         6b:09:b7:1e:21:82:e9:77:00:1e:c1:32:34:29:66:38:40:73:
         bd:d8:52:e8:13:a2:36:32:20:e7:1d:ac:36:74:84:08:1e:b0:
         8c:68:31:68
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICaPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGYx
NDE1YzMzOTQ3YzI1Y2ExMjE4MWU0ZWIxNjQzYzVjNjYyNzJiYzAeFw0yMzA0MTgy
MjU3NTNaFw0yNTA0MTkyMjU3NTNaMDMxMTAvBgNVBAMTKDIyYTFlOTVmNTA0Yjhj
OWE3ZTQzODhiOWE0MjgzMWJjZjk4YjI5OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWQwGm9EoEQANK8tbodYbw2xQVfqKwPH8+4vOkGyN0sK6XRgTz
SDOgJtErWlgl8R/qCs41CmLqIUwe9tkpiB1+EPJmgZ4c9Dlxmwi9IkopEfeaydbZ
lgIy6UQM1nGqPWANcQxD4yJw7P0CvHNOiVbuQSNKUlUzNGRdIL0MOPnx5V80XxGI
p77XBEIQJOxGdbMe952C2H40CL1HauhOreB1Gy2vcK/Kwu9p2iZ6IdzgOb+hxVtM
FXYE98rMBIgMjfLhiAH1TRi3whLWTOKddH3rcqkgga5CRmR3rfYOkeWcmFCeRk16
pL1dSptXkgUk9VUgqPpgezkWMKDjZktOk1InAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQUv6FfbNXnpn5SkVNNk2RVGCFhSukwHwYDVR0jBBgwFoAUId3BS5wNExeAPCIj
Qc6Lgjz1M4kwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kZjE0MTVj
MzM5NDdjMjVjYTEyMTgxZTRlYjE2NDNjNWM2NjI3MmJjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84NzhmYjVhOS1hNjE2LTQ0N2MtOTM3OS1iN2FkN2Fk
ZGUwZWMvMjJhMWU5NWY1MDRiOGM5YTdlNDM4OGI5YTQyODMxYmNmOThiMjk5Yi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzg3OGZiNWE5LWE2MTYtNDQ3Yy05Mzc5LWI3YWQ3
YWRkZTBlYy9kZjE0MTVjMzM5NDdjMjVjYTEyMTgxZTRlYjE2NDNjNWM2NjI3MmJj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQAtb0bAwQBtek+MA0EAgACMAcDBQAoA/0QMA0GCSqGSIb3DQEB
CwUAA4IBAQCPQOJKv39YxDz7Vg7C6QIsqIVMApgvIc2gD574TLnJkZWoCkMA0egt
I70KhUaSjFpF0Y1qOfmY4no7y/ZN78q9WiCoes6keT9/Vl+4GYo1wKYbpLuYTPll
tW9e0iNvz5DPLbU/ADOgF9xnNsOhxgFfOmnSc73X2ytU0RApA/z+zM8D1/0XEU6Q
kGtx5wuRSa0QMR9MAD4IgVPWPh3x7A2w0shmfHk9TdhRIOVVwgxXlKqkLGdylrpO
U640+Sey+DbwFdsLmUcLsQkVfiu3JKmHvcalDUCilpNrCbceIYLpdwAewTI0KWY4
QHO92FLoE6I2MiDnHaw2dIQIHrCMaDFo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org