Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/c974dee1cdda8d6fcb25ea7e2100176c907c6941.roa
File:                     c974dee1cdda8d6fcb25ea7e2100176c907c6941.roa (raw, json)
Hash identifier:          NsB7UjzApZxLEDpkjD9KyQG/dYmrqy5kov5cDEXMNPA=
Subject key identifier:   14:77:B8:9D:3A:E1:CE:CC:93:2E:38:05:07:47:61:97:FB:DF:B6:DC
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       14A71F
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/c974dee1cdda8d6fcb25ea7e2100176c907c6941.roa
Signing time:             Thu 10 Feb 2022 01:32:12 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/22 maxlen: 22
                          179.0.40.0/24 maxlen: 24
                          179.0.42.0/23 maxlen: 23
                          179.0.42.0/24 maxlen: 24
                          2803:fc10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353503 (0x14a71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=c974dee1cdda8d6fcb25ea7e2100176c907c6941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:73:5f:a9:67:54:c2:05:78:bd:a3:b1:7b:
                    5f:44:3f:c3:2b:9d:de:8a:30:59:d5:ab:3e:d3:bd:
                    45:27:00:1b:4f:05:41:30:69:a4:65:89:b6:15:ad:
                    f9:91:fe:f1:25:d8:4c:b0:7f:2e:68:09:a6:6d:f4:
                    24:32:26:34:55:5f:9c:29:73:22:c8:87:e0:1a:55:
                    dd:39:90:92:1d:12:c9:b1:5e:0d:11:cc:a7:1a:3d:
                    9a:9f:76:2a:19:0c:90:07:aa:bf:26:6d:38:92:f0:
                    84:de:9b:c1:4b:2f:73:47:eb:57:e7:7a:30:9b:3d:
                    a6:a1:a0:03:a9:d7:6b:46:a2:01:95:28:d5:64:7d:
                    01:c1:62:68:b7:17:11:20:ca:7a:26:e5:ff:92:f8:
                    30:5b:d1:c5:14:17:aa:b6:48:4c:87:ed:ff:a8:67:
                    f6:ea:83:f7:6c:cf:e0:e5:11:8e:7c:f2:81:64:1c:
                    ec:e3:0a:9f:16:44:d5:c5:45:a5:a2:01:2a:99:28:
                    89:ff:0e:07:75:6c:98:51:52:70:4c:e4:5f:4c:74:
                    01:aa:07:84:18:b2:39:a7:ad:84:02:67:b9:90:e2:
                    cf:8c:a3:23:d6:0b:00:e9:63:5c:95:f4:4a:9c:8c:
                    78:bb:58:9d:64:98:8a:68:84:97:79:96:19:2b:72:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:77:B8:9D:3A:E1:CE:CC:93:2E:38:05:07:47:61:97:FB:DF:B6:DC
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/c974dee1cdda8d6fcb25ea7e2100176c907c6941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                IPv6:
                  2803:fc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:bc:4c:11:d2:a9:b7:cc:25:d7:42:75:eb:9d:3c:4d:f2:
         c0:7f:ea:6c:f8:fb:40:b4:ff:08:f5:e8:d8:08:8b:79:a6:c0:
         95:c3:be:16:81:44:23:ee:28:13:9e:28:02:8c:c2:1b:18:46:
         ba:0d:df:88:e1:50:e7:53:51:9d:c7:94:89:d9:cd:d3:42:0b:
         fa:25:b8:3b:7f:07:18:77:d2:81:6f:c7:b4:e5:d2:c1:05:bc:
         cc:7e:cb:63:80:01:88:c6:ae:42:08:12:4e:78:ec:71:17:ff:
         55:ff:cb:20:b0:da:02:33:c9:ae:b8:e1:59:e3:d2:5a:59:4f:
         5f:01:bd:cb:56:de:4c:85:86:f7:e6:26:01:d5:18:e4:fd:e5:
         bd:d0:5d:72:48:85:89:14:27:80:f4:da:d6:f1:0e:c0:53:30:
         81:c1:2e:e0:60:9b:95:e7:02:3d:74:fc:33:e8:da:08:57:fb:
         c0:24:1f:72:85:09:23:2d:cc:6c:9c:c8:52:c2:75:14:74:63:
         b6:c1:e3:86:e6:eb:57:29:1b:0b:68:c5:8a:14:b5:1f:d8:28:
         a7:0a:4b:97:6c:a2:98:c5:8f:36:50:b3:98:ff:92:27:07:b1:
         08:d4:5e:c8:39:f3:97:17:d2:c3:5d:41:d2:6e:96:32:6d:7b:
         07:42:67:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFKcfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
NTdmYTdlMGVlMTgzYWM3ZmY2YzUyNmFlZDNlOWVkZTBkMTQ4MmUwHhcNMjEwNzAy
MDMwMDAwWhcNMjMwNzAyMDMwMDAwWjAzMTEwLwYDVQQDEyhjOTc0ZGVlMWNkZGE4
ZDZmY2IyNWVhN2UyMTAwMTc2YzkwN2M2OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAirpzX6lnVMIFeL2jsXtfRD/DK53eijBZ1as+071FJwAbTwVB
MGmkZYm2Fa35kf7xJdhMsH8uaAmmbfQkMiY0VV+cKXMiyIfgGlXdOZCSHRLJsV4N
EcynGj2an3YqGQyQB6q/Jm04kvCE3pvBSy9zR+tX53owmz2moaADqddrRqIBlSjV
ZH0BwWJotxcRIMp6JuX/kvgwW9HFFBeqtkhMh+3/qGf26oP3bM/g5RGOfPKBZBzs
4wqfFkTVxUWlogEqmSiJ/w4HdWyYUVJwTORfTHQBqgeEGLI5p62EAme5kOLPjKMj
1gsA6WNclfRKnIx4u1idZJiKaISXeZYZK3IaLQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBR3uJ064c7Mky44BQdHYZf737bcMB8GA1UdIwQYMBaAFEUiGVZbETpmXf8C
OcncT5u0lSYtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWY1N2Zh
N2UwZWUxODNhYzdmZjZjNTI2YWVkM2U5ZWRlMGQxNDgyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzk0OTVhYWMtODU0Ny00YjllLWJjNWUtNjNjMzdk
MWRjZDQ4L2M5NzRkZWUxY2RkYThkNmZjYjI1ZWE3ZTIxMDAxNzZjOTA3YzY5NDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jOTQ5NWFhYy04NTQ3LTRiOWUtYmM1ZS02M2Mz
N2QxZGNkNDgvNWY1N2ZhN2UwZWUxODNhYzdmZjZjNTI2YWVkM2U5ZWRlMGQxNDgy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArMAKDANBAIAAjAHAwUAKAP8EDANBgkqhkiG9w0BAQsFAAOC
AQEAA/m8TBHSqbfMJddCdeudPE3ywH/qbPj7QLT/CPXo2AiLeabAlcO+FoFEI+4o
E54oAozCGxhGug3fiOFQ51NRnceUidnN00IL+iW4O38HGHfSgW/HtOXSwQW8zH7L
Y4ABiMauQggSTnjscRf/Vf/LILDaAjPJrrjhWePSWllPXwG9y1beTIWG9+YmAdUY
5P3lvdBdckiFiRQngPTa1vEOwFMwgcEu4GCblecCPXT8M+jaCFf7wCQfcoUJIy3M
bJzIUsJ1FHRjtsHjhubrVykbC2jFihS1H9gopwpLl2yimMWPNlCzmP+SJwexCNRe
yDnzlxfSw11B0m6WMm17B0JnOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org