Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/e3eaaaea142f1714e01f7cf338b3594fe2eddc1d.roa
File:                     e3eaaaea142f1714e01f7cf338b3594fe2eddc1d.roa (raw, json)
Hash identifier:          WZECheODsBNmU932KQ5kV+TPIaH+3y4QNGDYvCcQhqQ=
Subject key identifier:   34:CC:0C:82:D1:FD:37:09:63:7D:9B:51:0E:8A:C7:67:B1:12:8E:A0
Certificate issuer:       /CN=6693e93c486e730f1cfef8fe615bcbd143f57d5b
Certificate serial:       26F745
Authority key identifier: 49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/e3eaaaea142f1714e01f7cf338b3594fe2eddc1d.roa
Signing time:             Mon 19 Feb 2024 22:52:51 +0000
ROA not before:           Mon 19 Feb 2024 22:52:51 +0000
ROA not after:            Thu 19 Feb 2026 22:52:51 +0000
asID:                     264800
IP address blocks:        170.79.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553669 (0x26f745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6693e93c486e730f1cfef8fe615bcbd143f57d5b
        Validity
            Not Before: Feb 19 22:52:51 2024 GMT
            Not After : Feb 19 22:52:51 2026 GMT
        Subject: CN=e3eaaaea142f1714e01f7cf338b3594fe2eddc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:57:25:b8:1d:79:53:74:9e:c5:dd:de:16:
                    cc:04:0d:f7:33:3d:79:50:c4:67:f1:40:88:3e:26:
                    1d:7f:2c:e2:f8:d7:82:b7:08:16:ab:6d:c9:cc:de:
                    5c:1d:eb:41:64:9f:1b:c9:95:58:ea:02:14:87:e8:
                    0e:d6:3f:1f:d6:a2:b6:0a:30:98:23:68:47:80:48:
                    57:d5:d9:7b:db:07:c1:cd:47:b8:ef:04:93:95:7a:
                    7b:73:43:54:cb:ea:4e:fe:7e:3d:ef:63:db:41:b5:
                    95:fd:32:c0:1a:2a:c6:25:ec:fd:98:64:bc:cb:7e:
                    03:84:45:5a:d2:83:26:d8:da:71:5c:01:b7:ce:8e:
                    3b:66:b4:34:65:fe:64:e1:38:dd:57:fe:6f:da:aa:
                    48:23:a6:0f:3b:71:6b:d5:c2:77:b1:e5:f5:72:51:
                    6d:96:e0:08:cf:59:5a:d0:0a:66:0e:1f:f3:03:ed:
                    e2:13:2c:6c:b3:76:95:64:97:ef:63:8d:a9:be:b5:
                    64:d5:f7:17:02:c1:f9:9f:8c:6c:44:e6:40:b2:49:
                    1d:10:6f:70:df:1a:01:e2:e9:dc:92:46:83:9a:c6:
                    86:26:5e:31:27:65:8e:a7:3a:04:51:13:00:91:a3:
                    fa:af:fe:d7:fa:54:85:c7:8e:45:1c:00:54:85:7a:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CC:0C:82:D1:FD:37:09:63:7D:9B:51:0E:8A:C7:67:B1:12:8E:A0
            X509v3 Authority Key Identifier:
                keyid:49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/e3eaaaea142f1714e01f7cf338b3594fe2eddc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/6693e93c486e730f1cfef8fe615bcbd143f57d5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:8b:a7:28:39:6e:b2:53:60:ef:de:83:12:2c:be:ec:a3:
         67:5d:ad:ec:a7:9e:5b:c6:3f:7f:98:05:5d:95:a8:f0:ae:95:
         0b:c9:a2:ef:fa:79:82:2f:d5:c6:d2:8a:4e:58:00:4f:ac:99:
         e4:2d:9d:24:27:b6:c0:bc:9c:7b:89:8d:41:20:41:10:88:44:
         ae:4c:02:aa:e4:8d:8b:13:53:20:ae:d3:3f:6a:02:2e:54:f0:
         d0:fe:a4:67:05:82:5c:6a:da:16:d1:50:bb:61:d3:6d:0f:dc:
         28:33:8b:61:cb:7c:f7:68:51:91:2b:df:47:42:23:10:bb:17:
         ab:34:15:2e:2e:48:c0:61:e6:3e:a2:3e:a9:68:ae:55:81:e5:
         e6:71:76:1c:fe:c3:45:21:8e:50:39:c5:4b:26:41:80:5b:6b:
         1b:d3:a1:d8:b1:7b:b0:ca:93:70:df:92:d1:ed:ba:bc:0a:67:
         b8:dd:18:04:b0:b8:26:d6:df:16:89:7a:0d:a3:7e:51:39:e5:
         02:63:cd:59:d0:13:df:12:31:26:a9:eb:29:1c:0f:df:5d:80:
         e2:d7:c4:fb:c2:09:b5:f3:42:f7:12:02:b6:d5:56:20:23:c2:
         b6:67:41:b4:99:91:79:42:e4:5c:c7:43:a5:c6:da:c1:e7:03:
         95:b1:73:78
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJvdFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY2
OTNlOTNjNDg2ZTczMGYxY2ZlZjhmZTYxNWJjYmQxNDNmNTdkNWIwHhcNMjQwMjE5
MjI1MjUxWhcNMjYwMjE5MjI1MjUxWjAzMTEwLwYDVQQDEyhlM2VhYWFlYTE0MmYx
NzE0ZTAxZjdjZjMzOGIzNTk0ZmUyZWRkYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr+lXJbgdeVN0nsXd3hbMBA33Mz15UMRn8UCIPiYdfyzi+NeC
twgWq23JzN5cHetBZJ8byZVY6gIUh+gO1j8f1qK2CjCYI2hHgEhX1dl72wfBzUe4
7wSTlXp7c0NUy+pO/n4972PbQbWV/TLAGirGJez9mGS8y34DhEVa0oMm2NpxXAG3
zo47ZrQ0Zf5k4TjdV/5v2qpII6YPO3Fr1cJ3seX1clFtluAIz1la0ApmDh/zA+3i
Eyxss3aVZJfvY42pvrVk1fcXAsH5n4xsROZAskkdEG9w3xoB4unckkaDmsaGJl4x
J2WOpzoEURMAkaP6r/7X+lSFx45FHABUhXraxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDTMDILR/TcJY32bUQ6Kx2exEo6gMB8GA1UdIwQYMBaAFEliqQ4wjr5k/z0+
IL4ZOKQt0YkAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjY5M2U5
M2M0ODZlNzMwZjFjZmVmOGZlNjE1YmNiZDE0M2Y1N2Q1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2RkNjE1ZmQtOTlhOS00ODQxLTllNjMtYzFiNTBl
MTYwMzY1L2UzZWFhYWVhMTQyZjE3MTRlMDFmN2NmMzM4YjM1OTRmZTJlZGRjMWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZGQ2MTVmZC05OWE5LTQ4NDEtOWU2My1jMWI1
MGUxNjAzNjUvNjY5M2U5M2M0ODZlNzMwZjFjZmVmOGZlNjE1YmNiZDE0M2Y1N2Q1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpPtjANBgkqhkiG9w0BAQsFAAOCAQEAQsmLpyg5brJTYO/e
gxIsvuyjZ12t7KeeW8Y/f5gFXZWo8K6VC8mi7/p5gi/VxtKKTlgAT6yZ5C2dJCe2
wLyce4mNQSBBEIhErkwCquSNixNTIK7TP2oCLlTw0P6kZwWCXGraFtFQu2HTbQ/c
KDOLYct892hRkSvfR0IjELsXqzQVLi5IwGHmPqI+qWiuVYHl5nF2HP7DRSGOUDnF
SyZBgFtrG9Oh2LF7sMqTcN+S0e26vApnuN0YBLC4JtbfFol6DaN+UTnlAmPNWdAT
3xIxJqnrKRwP312A4tfE+8IJtfNC9xICttVWICPCtmdBtJmReULkXMdDpcbawecD
lbFzeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org