Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/68e9b85d466a5be5f5bfd8fae4fd708462edfe4e.roa
File:                     68e9b85d466a5be5f5bfd8fae4fd708462edfe4e.roa (raw, json)
Hash identifier:          Owf95itTUnyaaiaR2EiBxMit9/uhBvELjVGVKq5Bsp4=
Subject key identifier:   F6:CB:12:D7:96:CE:5F:6D:95:08:0B:57:FD:29:AA:15:54:13:DA:FD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0FD80B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/68e9b85d466a5be5f5bfd8fae4fd708462edfe4e.roa
Signing time:             Mon 18 Oct 2021 03:50:32 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     51659
IP address blocks:        179.61.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038347 (0xfd80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=68e9b85d466a5be5f5bfd8fae4fd708462edfe4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:f5:27:59:ee:b0:c3:3e:0c:06:6e:db:71:
                    60:9a:b4:0b:aa:8c:b0:bc:11:47:92:aa:74:65:99:
                    7f:93:93:83:68:8b:78:4f:dd:09:35:3d:9d:42:cd:
                    46:79:80:f4:fd:a1:44:46:c3:10:fb:c8:44:26:8c:
                    43:57:ed:97:99:92:6c:5e:e0:93:aa:a8:94:59:67:
                    95:1d:81:28:0e:c5:11:66:86:b7:84:8e:12:86:e7:
                    ea:2b:8f:c7:f4:32:94:0c:72:9b:01:c4:77:53:b9:
                    e0:84:92:6e:93:d2:27:dc:3a:71:99:c6:66:01:88:
                    29:14:57:8f:50:29:2a:c3:6b:73:9b:3f:7b:b7:2a:
                    88:7a:f0:28:6f:fb:73:d1:5b:f1:c5:42:29:56:20:
                    28:07:4b:e3:13:ae:96:5c:7a:43:85:f9:08:a3:6a:
                    da:f8:03:8d:a8:2f:e7:3c:e4:d6:6d:12:98:3e:be:
                    56:07:d2:87:84:47:61:f5:f8:76:8d:f8:77:ea:3a:
                    8d:1d:06:74:a5:7a:74:3c:3c:5c:14:af:56:07:f2:
                    8e:38:cd:12:58:cc:b3:03:19:61:b5:0b:8e:e0:3b:
                    8c:c2:a5:b8:f7:26:c6:dd:bd:f5:c3:05:9e:c6:09:
                    52:2d:fc:da:fe:e0:ae:4a:49:0d:82:a4:c2:ec:c0:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:12:D7:96:CE:5F:6D:95:08:0B:57:FD:29:AA:15:54:13:DA:FD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/68e9b85d466a5be5f5bfd8fae4fd708462edfe4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:fb:b4:01:49:b6:cb:63:2f:fc:51:f2:1b:e2:ad:66:dd:
         d8:f0:5b:5e:5f:62:87:a0:65:04:cf:f1:ff:ab:08:d4:1b:d9:
         66:26:7b:a1:6d:79:5c:14:0d:ee:38:9b:2e:91:65:a5:5a:64:
         ec:35:a8:84:65:12:10:f8:31:5f:b7:b5:4f:66:0f:20:ed:54:
         ff:85:1e:53:a5:aa:99:7b:09:74:01:86:66:ab:2b:55:6d:2a:
         66:4a:8b:ad:88:83:4d:36:74:ec:e9:8a:5a:05:55:2b:d0:c8:
         bb:80:a1:8b:d0:34:6b:7a:ac:f2:30:84:21:69:1c:6c:03:b0:
         79:7e:81:10:81:8a:b4:92:59:36:6a:b1:fd:ea:11:6f:f9:cc:
         1b:0b:dc:03:99:38:2b:85:ab:89:e4:92:19:f0:4b:fb:49:f8:
         ab:8f:ba:22:56:f5:94:c4:c3:78:cb:55:0b:86:78:7c:4f:08:
         ef:cf:5d:68:30:aa:02:b5:07:bd:0f:99:de:26:d4:9f:1d:65:
         e8:ae:6f:e4:c2:0d:71:7c:85:18:76:30:03:07:6c:67:3c:8f:
         84:39:31:36:bc:bf:ec:88:ba:0e:cd:55:a9:8c:ac:50:9a:4d:
         3f:ed:d5:55:14:59:62:23:d7:4e:8b:26:bb:40:85:28:80:6b:
         e9:67:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org