Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/037023547b275da1a64509a479cfb59cb03c6225.roa
File:                     037023547b275da1a64509a479cfb59cb03c6225.roa (raw, json)
Hash identifier:          1RXvRDYH8VWHeyCPjomUNkwMDT63gVGjcfswf/hbgf8=
Subject key identifier:   66:F4:CB:65:DF:76:B5:9E:E6:FC:91:65:B7:53:FA:EB:3C:36:28:DE
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       063366
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/037023547b275da1a64509a479cfb59cb03c6225.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     62563
IP address blocks:        179.61.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406374 (0x63366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=037023547b275da1a64509a479cfb59cb03c6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:66:52:27:a6:bc:21:f6:5d:05:0d:18:0e:
                    e0:32:10:f4:fd:4e:05:49:18:5b:ea:7c:6b:44:7f:
                    1f:34:0e:6e:15:0d:6d:41:ba:72:33:5b:16:d8:b7:
                    ac:a9:6c:dc:3f:32:73:7b:67:7f:3e:b0:fb:1a:45:
                    cb:25:c3:cc:2d:8c:62:af:39:b3:c5:00:42:a9:89:
                    b7:87:f4:37:54:c3:63:77:51:bb:99:29:30:f5:f8:
                    73:c4:11:25:d3:2d:dd:de:86:45:54:e0:96:fe:ba:
                    56:63:45:e3:27:84:29:43:32:b1:18:75:e9:ad:ca:
                    c5:3f:1b:1b:c3:12:02:7a:fc:82:17:22:11:e6:d5:
                    cf:bd:0d:6e:4b:31:fc:2f:60:8d:45:93:51:ed:59:
                    a5:9d:cb:69:5f:8a:1b:8b:f0:ea:15:9e:cf:80:b8:
                    26:50:6d:f1:cb:cb:48:39:82:14:f6:cd:54:d6:3a:
                    0c:8f:e7:bc:65:91:fc:03:2e:a5:4e:fd:92:df:e0:
                    f3:b6:c7:fa:51:64:58:fb:52:3f:63:38:81:8f:2f:
                    c3:89:48:d0:d6:bc:11:11:6c:d2:01:34:a5:fb:54:
                    4c:46:dc:09:28:b2:14:2c:4c:72:dc:d1:b7:f0:10:
                    0e:c0:82:3b:00:dc:18:44:52:95:a5:3c:24:09:c0:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:CB:65:DF:76:B5:9E:E6:FC:91:65:B7:53:FA:EB:3C:36:28:DE
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/037023547b275da1a64509a479cfb59cb03c6225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:e3:d7:b8:c8:d7:59:4a:b4:0a:4c:32:f6:8c:e2:82:1b:
         8f:b0:50:a2:ce:96:83:ab:be:ea:81:d7:66:fb:ba:17:1c:b4:
         34:ff:9f:e9:d8:b6:3b:71:f7:ec:d5:0d:8d:89:36:4d:9c:dd:
         fb:2d:16:ae:72:28:ab:5b:0a:d2:8f:b8:c5:c7:b9:0c:59:1e:
         9d:1b:68:6e:37:61:9e:5c:1b:16:a4:42:91:1b:19:11:50:f9:
         00:8a:e6:20:21:21:4e:70:11:24:71:7b:56:9c:50:69:ff:23:
         e0:58:6a:e5:b9:a5:5c:b1:0e:e6:45:bc:73:4c:4a:2e:a3:a3:
         30:13:ab:74:36:5f:62:ef:61:a9:20:5a:7d:c6:14:52:ad:13:
         42:2c:12:7f:f5:d5:c0:4a:c7:ea:ca:e6:51:e4:4c:de:33:33:
         a4:b3:1a:ed:24:1e:73:0e:38:3a:19:30:24:b4:e9:3e:63:bb:
         05:1d:4a:99:b4:ae:55:3a:32:22:d4:17:ad:0f:bc:f1:27:d3:
         e5:73:db:5d:16:28:01:70:2e:d6:d6:06:fc:b2:90:dd:f7:a7:
         b4:18:d6:ab:ee:d4:2c:1b:ab:f1:36:c9:08:07:49:9f:61:d1:
         9f:1b:02:7a:8c:80:3b:5a:7d:da:1e:ae:9e:37:1c:e0:cb:ff:
         50:b9:82:46
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBjNmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEygwMzcwMjM1NDdiMjc1
ZGExYTY0NTA5YTQ3OWNmYjU5Y2IwM2M2MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApPVmUiemvCH2XQUNGA7gMhD0/U4FSRhb6nxrRH8fNA5uFQ1t
QbpyM1sW2LesqWzcPzJze2d/PrD7GkXLJcPMLYxirzmzxQBCqYm3h/Q3VMNjd1G7
mSkw9fhzxBEl0y3d3oZFVOCW/rpWY0XjJ4QpQzKxGHXprcrFPxsbwxICevyCFyIR
5tXPvQ1uSzH8L2CNRZNR7VmlnctpX4obi/DqFZ7PgLgmUG3xy8tIOYIU9s1U1joM
j+e8ZZH8Ay6lTv2S3+Dztsf6UWRY+1I/YziBjy/DiUjQ1rwREWzSATSl+1RMRtwJ
KLIULExy3NG38BAOwII7ANwYRFKVpTwkCcBNmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGb0y2XfdrWe5vyRZbdT+us8NijeMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzAzNzAyMzU0N2IyNzVkYTFhNjQ1MDlhNDc5Y2ZiNTljYjAzYzYyMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALM94TANBgkqhkiG9w0BAQsFAAOCAQEAZDrj17jI11lKtApM
MvaM4oIbj7BQos6Wg6u+6oHXZvu6Fxy0NP+f6di2O3H37NUNjYk2TZzd+y0WrnIo
q1sK0o+4xce5DFkenRtobjdhnlwbFqRCkRsZEVD5AIrmICEhTnARJHF7VpxQaf8j
4Fhq5bmlXLEO5kW8c0xKLqOjMBOrdDZfYu9hqSBafcYUUq0TQiwSf/XVwErH6srm
UeRM3jMzpLMa7SQecw44OhkwJLTpPmO7BR1KmbSuVToyItQXrQ+88SfT5XPbXRYo
AXAu1tYG/LKQ3fentBjWq+7ULBur8TbJCAdJn2HRnxsCeoyAO1p92h6unjcc4Mv/
ULmCRg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org