Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/3214a2f2d43170d73c88477a1807c66fdfaba5de.roa
File:                     3214a2f2d43170d73c88477a1807c66fdfaba5de.roa (raw, json)
Hash identifier:          0wLPAQPysYkIejTIwXFaKBW7xtHWVA7ZSEulI+6/fpQ=
Subject key identifier:   25:94:FA:93:0C:F7:6D:C6:10:47:34:DC:35:2C:68:A5:0F:30:F3:88
Certificate issuer:       /CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
Certificate serial:       1329F2
Authority key identifier: 03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/3214a2f2d43170d73c88477a1807c66fdfaba5de.roa
Signing time:             Tue 04 Apr 2023 08:30:02 +0000
ROA not before:           Mon 03 Apr 2023 08:30:02 +0000
ROA not after:            Wed 02 Apr 2025 08:30:02 +0000
asID:                     14618
IP address blocks:        179.0.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255922 (0x1329f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
        Validity
            Not Before: Apr  3 08:30:02 2023 GMT
            Not After : Apr  2 08:30:02 2025 GMT
        Subject: CN=3214a2f2d43170d73c88477a1807c66fdfaba5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:38:86:a5:cb:57:00:85:38:82:b2:24:58:
                    bf:df:52:48:99:81:b7:cc:2d:87:7c:3c:6b:cf:f0:
                    4e:30:8d:f3:fd:4e:0a:9a:f8:79:12:df:c1:66:e6:
                    85:89:a4:f4:34:e8:07:10:72:bb:a8:78:ed:1e:88:
                    f5:04:a8:d5:6a:2c:64:4a:57:64:3a:ea:99:04:41:
                    3c:48:cf:96:0a:cb:10:58:d1:60:be:b9:f0:42:07:
                    de:8a:fe:96:06:75:ee:23:1e:aa:99:6c:f1:9d:f6:
                    67:cc:60:8f:47:b4:f0:01:ea:3d:ec:d8:5a:aa:86:
                    ee:85:01:28:55:db:b4:6b:4b:8d:c5:a6:98:22:29:
                    66:be:d4:74:0e:98:2d:24:07:8b:71:f3:09:65:08:
                    7d:b3:98:c8:f8:8f:07:04:b2:93:c5:a3:1c:b6:b7:
                    42:29:db:98:12:ca:ab:2a:83:d4:37:7d:09:b2:44:
                    2d:3a:47:19:44:d0:39:18:aa:af:62:f8:34:0f:2d:
                    9d:d2:e9:42:e6:0f:f0:20:c0:a1:80:d1:31:20:32:
                    39:ef:98:a7:3f:1d:85:d9:30:96:ab:9f:e1:db:77:
                    92:4a:2c:06:fd:c9:b0:fc:8e:0c:b7:8a:bf:b9:e4:
                    7d:5c:7e:4b:df:cc:f0:42:d4:b9:d8:d2:b6:fb:09:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:FA:93:0C:F7:6D:C6:10:47:34:DC:35:2C:68:A5:0F:30:F3:88
            X509v3 Authority Key Identifier:
                keyid:03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/3214a2f2d43170d73c88477a1807c66fdfaba5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:a3:39:02:c4:d3:7c:d2:e5:63:b7:fa:3f:53:e4:ec:cd:
         5b:1d:6a:a5:12:10:25:ef:3f:4c:0a:4c:7c:12:5c:4c:00:62:
         bd:2f:2d:3b:50:99:0b:2d:6e:fe:b3:b0:05:64:46:28:c5:16:
         c9:b1:dd:02:d4:2e:15:27:ce:f5:d1:93:5a:4d:a2:fe:60:5f:
         b4:7a:f4:7c:e5:b5:15:d6:a6:68:d3:90:1f:28:0c:1a:74:0b:
         cb:87:a0:7b:7d:26:bc:76:c9:27:2b:63:70:2e:cc:44:da:eb:
         89:d5:83:7f:62:51:38:aa:48:b8:4b:2f:32:af:f1:15:2a:37:
         37:f9:54:ac:a9:5b:50:75:85:f5:89:9c:e8:e2:1b:90:25:b6:
         7b:85:c8:a8:54:0a:89:a6:99:48:05:26:e6:9b:4c:60:b2:17:
         ac:37:69:f4:28:3f:41:ae:c3:bf:3f:93:98:de:0f:1f:14:83:
         94:24:77:98:77:bf:50:4e:ac:43:01:1e:76:e6:44:78:70:9e:
         8f:3f:5d:1e:1f:a4:53:1d:cb:34:92:95:27:65:d9:05:e5:b0:
         3e:50:59:ab:77:4b:c9:29:cb:00:02:ea:1c:90:78:52:35:06:
         d9:f9:e6:23:54:22:8f:31:34:f3:5c:eb:0b:7e:6c:b6:58:74:
         1a:ff:0a:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEynyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
ZjViNzNhMzAzNjdhOTgzMmU2ZGRjZGU0ZjNjNmQ4MTk2ZjNlYTIwHhcNMjMwNDAz
MDgzMDAyWhcNMjUwNDAyMDgzMDAyWjAzMTEwLwYDVQQDEygzMjE0YTJmMmQ0MzE3
MGQ3M2M4ODQ3N2ExODA3YzY2ZmRmYWJhNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAncA4hqXLVwCFOIKyJFi/31JImYG3zC2HfDxrz/BOMI3z/U4K
mvh5Et/BZuaFiaT0NOgHEHK7qHjtHoj1BKjVaixkSldkOuqZBEE8SM+WCssQWNFg
vrnwQgfeiv6WBnXuIx6qmWzxnfZnzGCPR7TwAeo97NhaqobuhQEoVdu0a0uNxaaY
IilmvtR0DpgtJAeLcfMJZQh9s5jI+I8HBLKTxaMctrdCKduYEsqrKoPUN30JskQt
OkcZRNA5GKqvYvg0Dy2d0ulC5g/wIMChgNExIDI575inPx2F2TCWq5/h23eSSiwG
/cmw/I4Mt4q/ueR9XH5L38zwQtS52NK2+wnn0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCWU+pMM923GEEc03DUsaKUPMPOIMB8GA1UdIwQYMBaAFAPgSzzJb59wfLVL
BQvLpBld3b5WMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JmNWI3
M2EzMDM2N2E5ODMyZTZkZGNkZTRmM2M2ZDgxOTZmM2VhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWI1MjUyMDItZjUzOS00MDNmLWE3MWYtZjBjNGYw
YzcwNWQwLzMyMTRhMmYyZDQzMTcwZDczYzg4NDc3YTE4MDdjNjZmZGZhYmE1ZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYjUyNTIwMi1mNTM5LTQwM2YtYTcxZi1mMGM0
ZjBjNzA1ZDAvY2JmNWI3M2EzMDM2N2E5ODMyZTZkZGNkZTRmM2M2ZDgxOTZmM2Vh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMAETANBgkqhkiG9w0BAQsFAAOCAQEAPcqjOQLE03zS5WO3
+j9T5OzNWx1qpRIQJe8/TApMfBJcTABivS8tO1CZCy1u/rOwBWRGKMUWybHdAtQu
FSfO9dGTWk2i/mBftHr0fOW1FdamaNOQHygMGnQLy4ege30mvHbJJytjcC7MRNrr
idWDf2JROKpIuEsvMq/xFSo3N/lUrKlbUHWF9Ymc6OIbkCW2e4XIqFQKiaaZSAUm
5ptMYLIXrDdp9Cg/Qa7Dvz+TmN4PHxSDlCR3mHe/UE6sQwEeduZEeHCejz9dHh+k
Ux3LNJKVJ2XZBeWwPlBZq3dLySnLAALqHJB4UjUG2fnmI1QijzE081zrC35stlh0
Gv8KsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org