Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/a05ca5ea30c345001a7138402caab1afc0ab932d.roa
File:                     a05ca5ea30c345001a7138402caab1afc0ab932d.roa (raw, json)
Hash identifier:          x+4aNPfowbGRh7PsxR9PUQ68ZAX5Bqf5wubsMYvahKM=
Subject key identifier:   18:02:42:A0:86:95:29:34:15:3E:5C:68:DB:B4:07:B2:86:75:85:45
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       21BBE1
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/a05ca5ea30c345001a7138402caab1afc0ab932d.roa
Signing time:             Wed 19 Jul 2023 16:23:48 +0000
ROA not before:           Tue 18 Jul 2023 16:23:48 +0000
ROA not after:            Sat 19 Jul 2025 16:23:48 +0000
asID:                     27831
IP address blocks:        181.68.0.0/14 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210785 (0x21bbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 18 16:23:48 2023 GMT
            Not After : Jul 19 16:23:48 2025 GMT
        Subject: CN=a05ca5ea30c345001a7138402caab1afc0ab932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:4b:81:81:22:2c:bc:44:00:a6:12:99:05:
                    51:6e:7b:80:08:10:b6:17:1d:01:67:ac:f1:85:a6:
                    5b:5d:46:be:3b:38:85:c1:a3:f6:23:3e:19:c0:69:
                    f1:53:38:06:eb:75:5e:3f:04:6b:90:a0:f9:89:87:
                    e1:b4:6e:4e:31:54:e5:16:d8:00:38:cb:af:20:f2:
                    8d:1d:f3:cc:30:12:3f:94:79:69:09:bb:85:54:70:
                    f8:6b:49:54:2d:c8:44:d3:b5:0b:09:f3:ea:8e:45:
                    2c:f6:7d:31:f3:cd:23:55:41:78:7d:ee:45:df:c7:
                    66:c3:97:aa:8e:80:16:42:78:05:14:51:a2:cd:9a:
                    0d:e1:2c:d2:9e:0c:b5:4e:60:09:da:49:87:9a:51:
                    a7:d9:09:2a:0e:f7:18:22:ec:43:56:4a:20:f3:c8:
                    11:0b:b5:ec:0c:01:21:58:ce:a9:80:9e:e9:9e:24:
                    84:06:54:66:1d:25:12:36:db:9d:fc:87:ce:84:07:
                    9d:24:1a:bb:58:03:c7:54:67:11:4e:0a:90:47:99:
                    96:8d:7c:1d:98:57:ce:30:e6:d6:52:93:0e:ed:8d:
                    fa:30:2c:39:f8:ed:44:e4:ea:da:94:e5:ad:5d:09:
                    5b:8d:de:2c:76:36:c4:29:24:81:ad:ce:6e:c9:38:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:42:A0:86:95:29:34:15:3E:5C:68:DB:B4:07:B2:86:75:85:45
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/a05ca5ea30c345001a7138402caab1afc0ab932d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         87:84:ff:c7:d5:cb:16:3f:21:72:eb:9f:5e:71:c0:bd:70:1d:
         5b:05:ab:7e:9d:65:4b:3e:0e:92:42:08:0d:75:48:53:6a:38:
         c3:6d:2a:3a:18:c6:61:b5:da:2d:c7:fc:dd:59:d0:e7:e3:bd:
         8d:2e:ea:e1:2e:2c:80:0f:c4:8b:2d:ed:33:d7:68:7c:33:4e:
         7b:05:9e:b5:72:e4:f6:3e:86:65:79:26:6d:e2:25:a9:67:b4:
         a7:1f:6a:a3:fc:03:eb:ae:85:78:f8:87:ef:41:13:65:c9:73:
         f1:24:24:3c:0a:dc:88:cd:f8:5a:99:b8:b8:fb:3d:22:8e:19:
         51:6f:bd:42:6d:30:84:2a:b1:ba:9c:05:51:0a:ad:a7:b4:5b:
         51:d8:2c:31:98:56:e3:c5:98:53:f0:d1:e8:68:3e:99:63:16:
         31:d0:55:f4:07:a5:56:94:5f:5b:c0:e5:53:38:66:3d:52:a8:
         76:81:bd:f2:20:44:55:21:68:b9:74:7c:fd:f3:98:65:14:cc:
         9d:bb:e7:a0:67:27:d2:1a:76:89:73:1f:9f:28:a7:a6:64:c1:
         08:66:74:83:e9:85:19:b4:bd:a0:35:b8:31:fd:31:d6:7a:4a:
         88:cb:86:92:46:a5:6f:42:92:17:c0:d0:ba:3f:32:d8:ce:c9:
         7c:50:08:9e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDIbvhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MGEwNTI0OGE5MDdkZWY3NjQxMDAyNzg4MmIyZjRhODA4NWMwN2EwHhcNMjMwNzE4
MTYyMzQ4WhcNMjUwNzE5MTYyMzQ4WjAzMTEwLwYDVQQDEyhhMDVjYTVlYTMwYzM0
NTAwMWE3MTM4NDAyY2FhYjFhZmMwYWI5MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsv9LgYEiLLxEAKYSmQVRbnuACBC2Fx0BZ6zxhaZbXUa+OziF
waP2Iz4ZwGnxUzgG63VePwRrkKD5iYfhtG5OMVTlFtgAOMuvIPKNHfPMMBI/lHlp
CbuFVHD4a0lULchE07ULCfPqjkUs9n0x880jVUF4fe5F38dmw5eqjoAWQngFFFGi
zZoN4SzSngy1TmAJ2kmHmlGn2QkqDvcYIuxDVkog88gRC7XsDAEhWM6pgJ7pniSE
BlRmHSUSNtud/IfOhAedJBq7WAPHVGcRTgqQR5mWjXwdmFfOMObWUpMO7Y36MCw5
+O1E5OralOWtXQlbjd4sdjbEKSSBrc5uyTj/mwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFBgCQqCGlSk0FT5caNu0B7KGdYVFMB8GA1UdIwQYMBaAFLw7/0tdqAv1RCeu
JaVAuwwRfNLKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjAwYTA1
MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWJlYTZjYWQtMjlkNi00Mzg1LWE0ZjktY2JlNGJh
M2QxMjFmL2EwNWNhNWVhMzBjMzQ1MDAxYTcxMzg0MDJjYWFiMWFmYzBhYjkzMmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YmVhNmNhZC0yOWQ2LTQzODUtYTRmOS1jYmU0
YmEzZDEyMWYvNjAwYTA1MjQ4YTkwN2RlZjc2NDEwMDI3ODgyYjJmNGE4MDg1YzA3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDArVEMA0GCSqGSIb3DQEBCwUAA4IBAQCHhP/H1csWPyFy659e
ccC9cB1bBat+nWVLPg6SQggNdUhTajjDbSo6GMZhtdotx/zdWdDn472NLurhLiyA
D8SLLe0z12h8M057BZ61cuT2PoZleSZt4iWpZ7SnH2qj/APrroV4+IfvQRNlyXPx
JCQ8CtyIzfhambi4+z0ijhlRb71CbTCEKrG6nAVRCq2ntFtR2CwxmFbjxZhT8NHo
aD6ZYxYx0FX0B6VWlF9bwOVTOGY9Uqh2gb3yIERVIWi5dHz985hlFMydu+egZyfS
GnaJcx+fKKemZMEIZnSD6YUZtL2gNbgx/THWekqIy4aSRqVvQpIXwNC6PzLYzsl8
UAie
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org