Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/2cbc9d6f0d7f9cd803758af7473277430845f486.roa
File:                     2cbc9d6f0d7f9cd803758af7473277430845f486.roa (raw, json)
Hash identifier:          mhiYpNCqczKLckxLRrJ47ADVRinw0IrrNMf0JffFrI4=
Subject key identifier:   DC:1F:FD:7D:3A:13:CD:B7:9B:E1:DA:3A:C1:C6:E3:B2:BA:8E:DA:4E
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0C2E3B
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/2cbc9d6f0d7f9cd803758af7473277430845f486.roa
Signing time:             Tue 16 May 2023 23:52:21 +0000
ROA not before:           Mon 15 May 2023 23:52:16 +0000
ROA not after:            Fri 16 May 2025 23:52:16 +0000
asID:                     271929
IP address blocks:        179.0.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798267 (0xc2e3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: May 15 23:52:16 2023 GMT
            Not After : May 16 23:52:16 2025 GMT
        Subject: CN=2cbc9d6f0d7f9cd803758af7473277430845f486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:60:9a:84:55:95:69:a1:fa:14:5e:f6:b3:
                    af:ba:8f:fa:33:ab:15:dc:8c:0a:a6:77:19:0b:03:
                    2a:1b:97:7a:36:c8:11:76:9f:01:58:71:64:3c:25:
                    6e:71:21:29:a6:99:3e:c6:4a:08:52:5c:b6:f0:ce:
                    0e:80:29:9d:7a:22:36:10:cc:50:64:db:13:60:ce:
                    0c:39:73:c3:4b:de:7a:12:db:f6:40:7f:a3:e9:7a:
                    ec:1e:80:60:0d:c0:a7:c5:b0:d4:f1:cb:e7:78:8c:
                    9b:4b:e7:79:3c:b2:74:21:68:35:22:7a:58:66:34:
                    94:d2:de:5e:b4:6a:7a:26:ec:76:74:fc:dd:ac:f3:
                    08:b5:fd:0d:8e:7f:93:fd:25:a5:1b:d9:89:69:17:
                    fb:5a:f7:25:8f:7d:ce:c5:50:1f:da:d3:37:c5:a8:
                    dd:ff:e8:b5:02:2e:e2:f0:76:a9:e2:96:48:4f:87:
                    e1:08:32:37:41:02:5b:4e:f1:8e:ee:cd:f8:19:90:
                    0b:07:09:cc:ec:69:d9:f6:d7:97:13:16:31:95:be:
                    50:7e:77:a1:3d:d4:2b:e0:e6:1b:9a:1f:fb:43:cb:
                    1f:e2:dd:80:3d:7a:3e:c2:bf:05:6c:d6:eb:08:1f:
                    9b:5c:e0:02:1b:c4:0b:18:6b:ef:9c:79:09:0c:13:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:FD:7D:3A:13:CD:B7:9B:E1:DA:3A:C1:C6:E3:B2:BA:8E:DA:4E
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/2cbc9d6f0d7f9cd803758af7473277430845f486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:39:f1:a9:e8:95:5c:33:1a:20:83:16:71:1b:a2:c7:db:
         a6:a6:24:c8:f1:d1:35:02:94:57:57:ca:ee:13:84:17:c7:35:
         3c:04:5c:19:a7:89:8c:9f:4e:7f:63:fa:cc:2a:03:ec:9f:b1:
         55:84:54:40:b2:3c:28:6a:a1:b1:b0:62:44:78:0c:93:01:9b:
         a6:f4:74:69:94:8d:f3:83:ba:50:48:1e:e1:3c:12:fe:4a:0d:
         01:58:bb:73:3f:f2:51:76:9e:06:56:63:8b:6b:10:dd:8b:43:
         f1:20:39:99:8c:44:a8:a4:c9:88:e4:f3:07:2b:b8:c5:98:14:
         e8:51:a7:d9:23:e0:5c:00:12:ac:04:49:34:af:4f:a6:93:13:
         1f:4a:98:ad:08:2d:1d:03:13:1e:4f:e6:88:09:9e:26:ec:df:
         dc:f0:73:89:b1:a5:ec:8b:05:fa:3b:b0:45:a3:a6:52:e3:f5:
         4e:a1:7e:e2:f0:c3:8e:ba:6c:de:71:42:4b:1f:dc:2c:3c:67:
         4d:86:a1:af:4f:1b:7c:c3:d1:e9:5d:0b:4a:21:69:9d:7d:9a:
         fe:e1:fa:e3:6c:2a:b2:b2:36:0f:90:d0:77:bc:87:59:4f:58:
         b5:2a:50:89:82:6b:e9:01:25:65:f8:b5:d6:5b:4a:a2:c8:e1:
         74:ce:d0:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDC47MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZGE2YWQyNTI4YTI2NmVmYTk2M2M0NzJhOTQ1YjQ1MTE0ZDBjY2YwHhcNMjMwNTE1
MjM1MjE2WhcNMjUwNTE2MjM1MjE2WjAzMTEwLwYDVQQDEygyY2JjOWQ2ZjBkN2Y5
Y2Q4MDM3NThhZjc0NzMyNzc0MzA4NDVmNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiPBgmoRVlWmh+hRe9rOvuo/6M6sV3IwKpncZCwMqG5d6NsgR
dp8BWHFkPCVucSEpppk+xkoIUly28M4OgCmdeiI2EMxQZNsTYM4MOXPDS956Etv2
QH+j6XrsHoBgDcCnxbDU8cvneIybS+d5PLJ0IWg1InpYZjSU0t5etGp6Jux2dPzd
rPMItf0Njn+T/SWlG9mJaRf7Wvclj33OxVAf2tM3xajd/+i1Ai7i8Hap4pZIT4fh
CDI3QQJbTvGO7s34GZALBwnM7GnZ9teXExYxlb5QfnehPdQr4OYbmh/7Q8sf4t2A
PXo+wr8FbNbrCB+bXOACG8QLGGvvnHkJDBPjbwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNwf/X06E823m+HaOsHG47K6jtpOMB8GA1UdIwQYMBaAFA1bxD8SHr0G0UUp
azA2M39EQtlZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZkYTZh
ZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThlNjY3YzUtM2RhZS00MDc5LThjN2ItOGUyOTU3
M2Q1ZWQ0LzJjYmM5ZDZmMGQ3ZjljZDgwMzc1OGFmNzQ3MzI3NzQzMDg0NWY0ODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGU2NjdjNS0zZGFlLTQwNzktOGM3Yi04ZTI5
NTczZDVlZDQvNWZkYTZhZDI1MjhhMjY2ZWZhOTYzYzQ3MmE5NDViNDUxMTRkMGNj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbMAKjANBgkqhkiG9w0BAQsFAAOCAQEASiE58anolVwzGiCD
FnEbosfbpqYkyPHRNQKUV1fK7hOEF8c1PARcGaeJjJ9Of2P6zCoD7J+xVYRUQLI8
KGqhsbBiRHgMkwGbpvR0aZSN84O6UEge4TwS/koNAVi7cz/yUXaeBlZji2sQ3YtD
8SA5mYxEqKTJiOTzByu4xZgU6FGn2SPgXAASrARJNK9PppMTH0qYrQgtHQMTHk/m
iAmeJuzf3PBzibGl7IsF+juwRaOmUuP1TqF+4vDDjrps3nFCSx/cLDxnTYahr08b
fMPR6V0LSiFpnX2a/uH642wqsrI2D5DQd7yHWU9YtSpQiYJr6QElZfi11ltKosjh
dM7QNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org