Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d480511-7d24-43eb-8913-d62e6e305b12/c5e8dc06a025d0f0301a517c1c8b8235af9b2e32.roa
File:                     c5e8dc06a025d0f0301a517c1c8b8235af9b2e32.roa (raw, json)
Hash identifier:          nW8q085e2yxEHLuVTXYQ3TmFawgMqdTYuD3SwDt2Dmg=
Subject key identifier:   1B:42:06:9C:8B:10:7D:D3:5E:05:3E:B0:DB:63:BC:B5:A7:2B:AE:F4
Certificate issuer:       /CN=de10f2221681d4da3945014bc45c998d35c5e740
Certificate serial:       029C
Authority key identifier: 61:B7:1A:57:2C:01:52:62:83:01:B2:9C:30:FD:9F:94:C7:7C:CC:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de10f2221681d4da3945014bc45c998d35c5e740.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d480511-7d24-43eb-8913-d62e6e305b12/c5e8dc06a025d0f0301a517c1c8b8235af9b2e32.roa
Signing time:             Wed 02 Aug 2023 11:44:03 +0000
ROA not before:           Tue 01 Aug 2023 11:44:03 +0000
ROA not after:            Sat 02 Aug 2025 11:44:03 +0000
asID:                     272824
IP address blocks:        179.63.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de10f2221681d4da3945014bc45c998d35c5e740
        Validity
            Not Before: Aug  1 11:44:03 2023 GMT
            Not After : Aug  2 11:44:03 2025 GMT
        Subject: CN=c5e8dc06a025d0f0301a517c1c8b8235af9b2e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:5e:29:da:b7:5d:e0:b0:2e:fa:1a:07:61:
                    f2:36:b6:dd:d7:c8:df:0f:04:d3:56:b6:bf:2a:9e:
                    3e:e6:f3:47:ba:a0:a6:34:b8:2a:c4:c0:56:54:33:
                    52:f4:e5:40:cb:ad:7f:50:ad:0f:e5:c7:ab:f6:61:
                    b8:e4:96:42:9f:11:3d:31:b6:24:eb:b6:9d:c5:5a:
                    4a:1d:37:ea:64:f4:0d:77:1b:be:43:87:4a:5c:0a:
                    c5:bd:77:0e:3a:15:cb:92:26:16:1a:c7:d9:c5:fe:
                    07:78:f9:bc:54:f0:c2:b4:a3:88:f1:63:41:d6:d9:
                    01:46:bb:d8:fc:36:e9:13:f6:c9:a8:de:e3:3a:ef:
                    75:81:c4:9e:56:b6:b8:6c:50:60:87:9a:db:95:72:
                    96:7f:03:cc:6f:39:64:18:ac:24:0d:74:f5:cf:69:
                    b1:ac:da:8c:da:4b:f3:ea:7f:b8:90:ba:14:65:90:
                    23:51:df:c9:82:b9:c7:b6:f2:71:42:e6:7e:4a:68:
                    72:3e:03:42:24:ef:85:b0:ca:c8:a1:37:ea:32:05:
                    10:35:e0:3d:4f:44:dc:6d:6b:4a:7c:9b:f3:d2:5c:
                    15:ea:fb:b8:ba:21:8a:0f:8c:87:53:68:0e:f8:72:
                    91:94:92:54:50:5a:b8:3e:3a:5a:0d:a0:59:06:d3:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:06:9C:8B:10:7D:D3:5E:05:3E:B0:DB:63:BC:B5:A7:2B:AE:F4
            X509v3 Authority Key Identifier:
                keyid:61:B7:1A:57:2C:01:52:62:83:01:B2:9C:30:FD:9F:94:C7:7C:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de10f2221681d4da3945014bc45c998d35c5e740.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d480511-7d24-43eb-8913-d62e6e305b12/c5e8dc06a025d0f0301a517c1c8b8235af9b2e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d480511-7d24-43eb-8913-d62e6e305b12/de10f2221681d4da3945014bc45c998d35c5e740.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:e6:69:cb:98:7c:a0:3e:6e:ad:a9:90:0d:38:f9:e7:89:
         5c:ce:60:e6:fb:70:d0:a0:2d:46:e9:34:44:bc:c5:a7:d3:82:
         b7:c9:47:90:bc:d9:fb:b9:c1:c7:0b:73:44:e0:bf:0f:62:42:
         33:91:2c:91:7d:76:b3:cb:5b:cf:4e:75:40:79:dd:8d:b0:27:
         11:28:35:4b:20:f8:93:61:63:ae:7b:d7:d5:2f:4a:e6:9b:d7:
         d5:a1:10:db:7c:56:ea:3e:14:a6:f7:66:93:ec:8e:dc:17:36:
         fd:19:97:f3:a5:76:f2:00:c7:ce:2b:80:72:ed:02:f8:e6:d3:
         11:95:f7:34:2a:cd:b9:09:33:08:74:61:c7:e8:0d:59:89:d2:
         3a:8b:02:70:c7:89:e6:59:17:1e:ba:3e:0f:1c:3a:62:ef:da:
         ff:74:2c:40:4d:35:2b:15:d6:ad:fa:23:16:6c:67:74:ea:69:
         62:22:8e:d5:15:7f:c3:e8:75:2d:e9:db:b1:18:6a:c3:e8:b9:
         f7:2a:61:4b:ed:1a:a6:67:6e:45:9f:96:72:0c:27:4e:57:0c:
         ec:77:cb:90:07:0f:d5:d1:e6:02:e5:8e:d8:85:53:39:7e:b7:
         04:8e:5d:21:e8:ee:76:f3:8a:a5:34:e0:a5:52:d9:b7:3b:81:
         28:7e:46:9a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZGUx
MGYyMjIxNjgxZDRkYTM5NDUwMTRiYzQ1Yzk5OGQzNWM1ZTc0MDAeFw0yMzA4MDEx
MTQ0MDNaFw0yNTA4MDIxMTQ0MDNaMDMxMTAvBgNVBAMTKGM1ZThkYzA2YTAyNWQw
ZjAzMDFhNTE3YzFjOGI4MjM1YWY5YjJlMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCogF4p2rdd4LAu+hoHYfI2tt3XyN8PBNNWtr8qnj7m80e6oKY0
uCrEwFZUM1L05UDLrX9QrQ/lx6v2YbjklkKfET0xtiTrtp3FWkodN+pk9A13G75D
h0pcCsW9dw46FcuSJhYax9nF/gd4+bxU8MK0o4jxY0HW2QFGu9j8NukT9smo3uM6
73WBxJ5WtrhsUGCHmtuVcpZ/A8xvOWQYrCQNdPXPabGs2ozaS/Pqf7iQuhRlkCNR
38mCuce28nFC5n5KaHI+A0Ik74WwysihN+oyBRA14D1PRNxta0p8m/PSXBXq+7i6
IYoPjIdTaA74cpGUklRQWrg+OloNoFkG00OJAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUG0IGnIsQfdNeBT6w22O8tacrrvQwHwYDVR0jBBgwFoAUYbcaVywBUmKDAbKc
MP2flMd8zPQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kZTEwZjIy
MjE2ODFkNGRhMzk0NTAxNGJjNDVjOTk4ZDM1YzVlNzQwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wZDQ4MDUxMS03ZDI0LTQzZWItODkxMy1kNjJlNmUz
MDViMTIvYzVlOGRjMDZhMDI1ZDBmMDMwMWE1MTdjMWM4YjgyMzVhZjliMmUzMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBkNDgwNTExLTdkMjQtNDNlYi04OTEzLWQ2MmU2
ZTMwNWIxMi9kZTEwZjIyMjE2ODFkNGRhMzk0NTAxNGJjNDVjOTk4ZDM1YzVlNzQw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCsz+oMA0GCSqGSIb3DQEBCwUAA4IBAQBl4OZpy5h8oD5uramQ
DTj554lczmDm+3DQoC1G6TREvMWn04K3yUeQvNn7ucHHC3NE4L8PYkIzkSyRfXaz
y1vPTnVAed2NsCcRKDVLIPiTYWOue9fVL0rmm9fVoRDbfFbqPhSm92aT7I7cFzb9
GZfzpXbyAMfOK4By7QL45tMRlfc0Ks25CTMIdGHH6A1ZidI6iwJwx4nmWRceuj4P
HDpi79r/dCxATTUrFdat+iMWbGd06mliIo7VFX/D6HUt6duxGGrD6Ln3KmFL7Rqm
Z25Fn5ZyDCdOVwzsd8uQBw/V0eYC5Y7YhVM5frcEjl0h6O5284qlNOClUtm3O4Eo
fkaa
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org