Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c198ae59-4f59-4959-8422-e297bce0c2f9/075e664d060b4e4b2ba37b3000a68f8a788fbfb8.roa
File:                     075e664d060b4e4b2ba37b3000a68f8a788fbfb8.roa (raw, json)
Hash identifier:          Egiadm0ej3dYAobmVpaVzPF5F/QcsJh3x4yYu5Mhdak=
Subject key identifier:   12:29:2E:9C:D8:EF:95:83:4B:CA:43:44:A4:7C:30:02:12:83:7C:7C
Certificate issuer:       /CN=d01df69d564762e456b8a8b2ff641dcc8510ce61
Certificate serial:       11C94A
Authority key identifier: F3:E8:4B:0F:01:23:AC:6F:CF:A2:53:5C:56:F9:A8:2B:E0:0F:71:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d01df69d564762e456b8a8b2ff641dcc8510ce61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c198ae59-4f59-4959-8422-e297bce0c2f9/075e664d060b4e4b2ba37b3000a68f8a788fbfb8.roa
Signing time:             Thu 15 Feb 2024 07:30:00 +0000
ROA not before:           Thu 15 Feb 2024 07:30:00 +0000
ROA not after:            Sat 14 Feb 2026 07:30:00 +0000
asID:                     271829
IP address blocks:        181.233.144.0/23 maxlen: 23
                          181.233.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165642 (0x11c94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01df69d564762e456b8a8b2ff641dcc8510ce61
        Validity
            Not Before: Feb 15 07:30:00 2024 GMT
            Not After : Feb 14 07:30:00 2026 GMT
        Subject: CN=075e664d060b4e4b2ba37b3000a68f8a788fbfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:cc:2f:83:1d:d4:c7:a0:a2:2a:ad:04:25:
                    06:14:17:cd:1a:1e:86:ae:77:66:85:3a:6c:15:27:
                    87:b1:d7:a6:3d:42:a7:ae:84:26:a6:c4:94:30:32:
                    46:fa:ce:68:ff:e0:29:ce:62:7e:44:a3:92:7b:a3:
                    a3:c8:19:f9:ef:a7:49:bc:b6:26:0a:00:05:c0:ca:
                    5a:33:14:e5:92:82:92:14:48:7f:29:4e:35:16:71:
                    be:b8:72:1e:aa:ac:0a:aa:04:c0:c8:bf:8c:ae:e6:
                    fd:af:d3:d6:4f:dd:0f:e4:e4:0a:f2:48:39:c2:b3:
                    b0:3a:04:cd:b8:49:30:35:15:54:98:87:3e:93:a3:
                    8a:b2:6f:17:bd:bc:12:ec:68:b4:90:b4:b0:3d:60:
                    3d:ec:ec:ee:a4:98:55:7b:ce:f4:80:24:94:b6:39:
                    4f:71:5e:61:cf:06:59:82:2f:58:5c:8f:cc:0c:0f:
                    af:df:02:22:63:c3:95:91:bf:96:a5:90:85:84:6c:
                    37:e5:0a:76:40:ad:8f:8b:d7:aa:52:2b:5a:cd:14:
                    23:66:47:75:0a:76:71:f5:0c:73:30:9d:5b:f9:af:
                    e6:85:53:25:e7:46:40:05:82:47:90:09:01:6c:f1:
                    06:a1:63:e0:98:9b:86:bc:f4:09:ac:71:79:ba:4c:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:2E:9C:D8:EF:95:83:4B:CA:43:44:A4:7C:30:02:12:83:7C:7C
            X509v3 Authority Key Identifier:
                keyid:F3:E8:4B:0F:01:23:AC:6F:CF:A2:53:5C:56:F9:A8:2B:E0:0F:71:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d01df69d564762e456b8a8b2ff641dcc8510ce61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c198ae59-4f59-4959-8422-e297bce0c2f9/075e664d060b4e4b2ba37b3000a68f8a788fbfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c198ae59-4f59-4959-8422-e297bce0c2f9/d01df69d564762e456b8a8b2ff641dcc8510ce61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.144.0-181.233.146.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:8f:62:39:db:ee:9b:1a:91:e4:fe:2c:7e:a4:7d:6c:aa:
         e4:68:1e:d2:2f:24:be:a0:74:e0:3c:d6:f5:79:9c:cf:74:cd:
         cd:c2:ad:1f:c1:25:8a:f5:fb:23:52:db:e6:00:1a:26:9d:a4:
         91:96:e4:47:1e:6d:cf:ed:bd:4c:4c:f8:ee:93:ff:9f:38:93:
         bb:87:f4:b6:6f:11:b6:16:48:2a:a8:ef:93:f7:a7:98:66:17:
         fe:97:00:39:85:bb:be:cb:e9:59:8e:ed:d9:2c:7c:bf:2a:44:
         42:7b:66:6f:bc:76:21:4b:a4:d0:9f:ec:e2:20:fc:2f:1e:6d:
         22:ff:fa:ca:62:fd:8a:7d:ab:29:df:0f:d7:39:ad:61:74:30:
         2f:a6:f6:53:59:cf:ba:93:73:5e:2e:c3:ae:98:d5:4a:61:5d:
         a4:1c:b3:47:20:12:58:f8:cd:6c:b9:f4:14:9a:5d:f4:4e:b4:
         1d:66:14:a0:80:a9:41:f3:3d:39:df:08:04:8e:45:e9:ef:9a:
         02:26:59:ef:0d:42:3c:51:85:eb:ab:9a:6d:65:23:ee:db:ed:
         b7:7a:3c:b8:29:7c:1b:02:96:de:b2:91:66:ea:a1:f7:61:01:
         3c:f0:fd:84:c7:f4:48:f2:81:ca:9c:f7:6c:d2:e6:14:d0:57:
         31:14:4e:a8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEclKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
MWRmNjlkNTY0NzYyZTQ1NmI4YThiMmZmNjQxZGNjODUxMGNlNjEwHhcNMjQwMjE1
MDczMDAwWhcNMjYwMjE0MDczMDAwWjAzMTEwLwYDVQQDEygwNzVlNjY0ZDA2MGI0
ZTRiMmJhMzdiMzAwMGE2OGY4YTc4OGZiZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArNbML4Md1MegoiqtBCUGFBfNGh6GrndmhTpsFSeHsdemPUKn
roQmpsSUMDJG+s5o/+ApzmJ+RKOSe6OjyBn576dJvLYmCgAFwMpaMxTlkoKSFEh/
KU41FnG+uHIeqqwKqgTAyL+Mrub9r9PWT90P5OQK8kg5wrOwOgTNuEkwNRVUmIc+
k6OKsm8XvbwS7Gi0kLSwPWA97OzupJhVe870gCSUtjlPcV5hzwZZgi9YXI/MDA+v
3wIiY8OVkb+WpZCFhGw35Qp2QK2Pi9eqUitazRQjZkd1CnZx9QxzMJ1b+a/mhVMl
50ZABYJHkAkBbPEGoWPgmJuGvPQJrHF5ukyHiQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFBIpLpzY75WDS8pDRKR8MAISg3x8MB8GA1UdIwQYMBaAFPPoSw8BI6xvz6JT
XFb5qCvgD3HeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDAxZGY2
OWQ1NjQ3NjJlNDU2YjhhOGIyZmY2NDFkY2M4NTEwY2U2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE5OGFlNTktNGY1OS00OTU5LTg0MjItZTI5N2Jj
ZTBjMmY5LzA3NWU2NjRkMDYwYjRlNGIyYmEzN2IzMDAwYTY4ZjhhNzg4ZmJmYjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTk4YWU1OS00ZjU5LTQ5NTktODQyMi1lMjk3
YmNlMGMyZjkvZDAxZGY2OWQ1NjQ3NjJlNDU2YjhhOGIyZmY2NDFkY2M4NTEwY2U2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQEtemQAwQAtemSMA0GCSqGSIb3DQEBCwUAA4IBAQBeiY9i
OdvumxqR5P4sfqR9bKrkaB7SLyS+oHTgPNb1eZzPdM3Nwq0fwSWK9fsjUtvmABom
naSRluRHHm3P7b1MTPjuk/+fOJO7h/S2bxG2FkgqqO+T96eYZhf+lwA5hbu+y+lZ
ju3ZLHy/KkRCe2ZvvHYhS6TQn+ziIPwvHm0i//rKYv2Kfasp3w/XOa1hdDAvpvZT
Wc+6k3NeLsOumNVKYV2kHLNHIBJY+M1sufQUml30TrQdZhSggKlB8z053wgEjkXp
75oCJlnvDUI8UYXrq5ptZSPu2+23ejy4KXwbApbespFm6qH3YQE88P2Ex/RI8oHK
nPds0uYU0FcxFE6o
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org