Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01a9c214d1d98bd741653372524e063bac9b1f4d.roa
File:                     01a9c214d1d98bd741653372524e063bac9b1f4d.roa (raw, json)
Hash identifier:          Bu5MZpeez07rYlFwruzFFfEoFotD+EfcNmDa/fROTmE=
Subject key identifier:   73:8C:7E:26:0E:EA:3F:D9:9E:A9:DF:9D:48:D1:14:36:C3:76:E3:24
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       10B981
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01a9c214d1d98bd741653372524e063bac9b1f4d.roa
Signing time:             Thu 04 Nov 2021 16:15:36 +0000
ROA not before:           Tue 29 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     271799
IP address blocks:        179.61.229.0/24 maxlen: 24
                          191.101.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096065 (0x10b981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jun 29 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=01a9c214d1d98bd741653372524e063bac9b1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:9f:a7:12:a8:43:43:cb:20:43:94:2a:77:
                    52:4c:b1:09:8d:1c:a2:c0:9f:82:a4:da:24:57:1c:
                    47:3e:5d:a1:d5:be:0c:9d:06:58:80:fb:1d:6f:67:
                    c3:e3:36:75:39:aa:08:cd:07:7a:7f:48:b8:f5:10:
                    cd:31:98:df:be:aa:31:70:4c:9d:ee:3d:32:47:22:
                    8e:5a:51:83:a3:fc:f0:89:b4:1f:fd:b4:84:8c:13:
                    37:fc:c5:18:78:a3:be:46:04:ef:8e:e9:f3:5c:8a:
                    7d:72:3e:d1:41:3b:78:d3:23:0c:ea:45:b1:3a:10:
                    78:f3:31:59:2b:54:83:1b:d6:4b:3f:60:07:2a:3b:
                    fc:88:77:1e:c1:a6:3c:29:a6:f1:e9:1b:d8:1b:dc:
                    3c:ec:71:68:6a:50:ff:5a:38:d8:83:b5:b7:c6:eb:
                    3e:58:11:dd:b4:ca:58:55:a1:86:aa:62:76:ae:0c:
                    27:c3:4b:b4:93:b3:91:34:88:24:3f:9c:5e:75:c2:
                    0b:c8:19:74:f1:fd:a4:95:4d:f0:52:88:f5:a5:a1:
                    1e:60:b4:ee:b4:b6:4c:61:28:4a:42:8b:0d:56:6f:
                    a2:34:c5:2e:ca:ad:61:de:b4:67:91:b7:8d:d9:9d:
                    67:45:c4:b3:4b:9a:3f:77:19:da:55:bd:3d:a5:d8:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8C:7E:26:0E:EA:3F:D9:9E:A9:DF:9D:48:D1:14:36:C3:76:E3:24
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/01a9c214d1d98bd741653372524e063bac9b1f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.229.0/24
                  191.101.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:82:f8:60:30:c5:50:2f:05:89:b3:64:d0:da:54:02:71:
         45:c5:be:07:82:81:b0:fe:19:ff:fe:99:44:11:65:70:ed:5c:
         d9:c5:de:8b:d6:ae:cb:3b:f6:a4:93:e1:88:4a:d2:ff:56:fb:
         01:74:0b:a3:bb:b3:eb:5c:96:83:20:0e:f1:c4:5f:ee:0c:13:
         70:47:25:1d:bc:b8:96:10:27:aa:14:25:a4:28:8f:7d:54:71:
         29:da:a3:f2:26:0f:26:92:c7:9a:bc:1d:07:a5:55:63:7f:ee:
         53:0f:80:7a:c2:57:aa:1a:cd:48:1f:e7:70:a0:3a:83:e9:20:
         b3:83:3e:97:a2:89:a6:f2:12:ef:60:c1:f2:ca:7b:6c:5f:bc:
         88:63:0f:00:05:4c:84:b8:2c:e3:7d:00:cd:76:b0:53:3b:dc:
         f0:08:27:49:56:c1:21:3c:a3:27:e9:19:26:56:93:ac:f2:10:
         96:a7:1b:a4:1c:10:5f:fa:f1:cf:f7:db:94:b3:fe:90:e8:63:
         f4:20:38:91:0a:a3:4d:51:98:9a:01:76:5d:bc:b3:ff:c8:07:
         8e:57:d9:6e:22:3e:f5:01:60:41:62:42:03:ba:57:aa:20:da:
         f9:6e:c8:20:da:8a:74:6e:14:5e:bd:e2:02:b6:34:94:8c:37:
         03:68:74:23
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDELmBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwNjI5
MDMwMDAwWhcNMjMwNjI5MDMwMDAwWjAzMTEwLwYDVQQDEygwMWE5YzIxNGQxZDk4
YmQ3NDE2NTMzNzI1MjRlMDYzYmFjOWIxZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5efpxKoQ0PLIEOUKndSTLEJjRyiwJ+CpNokVxxHPl2h1b4M
nQZYgPsdb2fD4zZ1OaoIzQd6f0i49RDNMZjfvqoxcEyd7j0yRyKOWlGDo/zwibQf
/bSEjBM3/MUYeKO+RgTvjunzXIp9cj7RQTt40yMM6kWxOhB48zFZK1SDG9ZLP2AH
Kjv8iHcewaY8Kabx6RvYG9w87HFoalD/WjjYg7W3xus+WBHdtMpYVaGGqmJ2rgwn
w0u0k7ORNIgkP5xedcILyBl08f2klU3wUoj1paEeYLTutLZMYShKQosNVm+iNMUu
yq1h3rRnkbeN2Z1nRcSzS5o/dxnaVb09pdjANQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFHOMfiYO6j/ZnqnfnUjRFDbDduMkMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzAxYTljMjE0ZDFkOThiZDc0MTY1MzM3MjUyNGUwNjNiYWM5YjFmNGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALM95QMEAL9lOjANBgkqhkiG9w0BAQsFAAOCAQEADJ2C+GAw
xVAvBYmzZNDaVAJxRcW+B4KBsP4Z//6ZRBFlcO1c2cXei9auyzv2pJPhiErS/1b7
AXQLo7uz61yWgyAO8cRf7gwTcEclHby4lhAnqhQlpCiPfVRxKdqj8iYPJpLHmrwd
B6VVY3/uUw+AesJXqhrNSB/ncKA6g+kgs4M+l6KJpvIS72DB8sp7bF+8iGMPAAVM
hLgs430AzXawUzvc8AgnSVbBITyjJ+kZJlaTrPIQlqcbpBwQX/rxz/fblLP+kOhj
9CA4kQqjTVGYmgF2Xbyz/8gHjlfZbiI+9QFgQWJCA7pXqiDa+W7IINqKdG4UXr3i
ArY0lIw3A2h0Iw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org