Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa
File:                     0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa (raw, json)
Hash identifier:          X9aJagsQvt1++FF7qCR5N56AxHgeF1YB3OOXxxuPJ00=
Subject key identifier:   2B:8D:3F:37:14:C9:DD:4F:36:D1:5E:58:46:3F:04:AE:9E:D0:A2:1A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06CEFE
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa
Signing time:             Wed 24 Mar 2021 14:33:38 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     35913
IP address blocks:        179.61.245.0/24 maxlen: 24
                          191.101.133.0/24 maxlen: 24
                          191.101.129.0/24 maxlen: 24
                          191.101.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446206 (0x6cefe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=0d2257aa8faf3f986f1978f8baa79085005a2b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:1e:11:f1:0b:af:01:c0:2e:05:a2:bb:91:
                    9c:03:91:c9:10:9a:4a:cf:83:89:82:31:95:4f:13:
                    c3:74:d9:6a:67:00:53:8f:7c:96:f8:c7:fd:15:27:
                    67:a6:ba:c1:04:9e:a2:b5:ee:cf:d2:4a:34:cb:1f:
                    66:5c:fa:0f:0d:66:52:2b:f8:76:e3:6a:f5:d0:f9:
                    fd:e1:de:aa:b0:71:8e:8e:2c:d3:a3:3b:24:68:74:
                    5d:7c:ab:ab:ff:60:a1:14:50:d7:53:d8:bc:79:11:
                    46:6c:6a:60:40:95:13:5e:d8:42:50:96:f7:6c:bc:
                    fb:3f:8b:82:41:57:51:79:4f:2f:92:f9:d9:ee:6c:
                    6a:d3:3d:b8:5b:b2:6c:4f:f2:24:e7:77:45:f7:13:
                    57:8a:5b:11:ed:a2:b0:bb:69:88:53:82:9d:18:5d:
                    6e:c3:44:ac:c8:b3:0c:d6:c9:4c:bf:e3:60:73:47:
                    86:c4:6a:ef:02:33:1c:bc:da:d7:9a:20:aa:a3:01:
                    92:5e:54:60:ed:aa:51:08:31:aa:0b:03:e1:72:7b:
                    83:82:50:b0:5a:51:cd:cd:08:79:8c:e3:66:72:85:
                    9f:da:81:3b:4a:68:9d:25:83:78:0c:95:da:e2:ac:
                    be:59:fb:b6:0c:d7:50:ae:25:1b:b4:22:dd:f5:28:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:3F:37:14:C9:DD:4F:36:D1:5E:58:46:3F:04:AE:9E:D0:A2:1A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.245.0/24
                  191.101.42.0/24
                  191.101.129.0/24
                  191.101.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:31:be:45:a5:b7:fa:81:7a:82:2c:e7:55:de:f6:8a:6f:88:
         00:f3:21:41:72:ee:94:cf:c8:5e:47:6c:3d:7f:d7:ef:91:6e:
         3f:93:17:50:e6:68:04:2c:df:26:e1:fa:92:23:93:5e:78:00:
         b9:4c:70:86:67:bb:22:5c:75:25:7a:bc:8e:83:9b:3e:2c:40:
         2b:b7:65:97:20:ff:26:40:17:b1:92:80:0d:10:d0:d0:2c:24:
         3c:b4:02:26:c2:68:77:3b:3b:64:c5:50:3f:63:ed:6b:63:ea:
         67:db:42:a7:8f:4d:c3:87:4b:12:5e:d5:9d:f9:88:25:ad:8a:
         ec:be:6b:70:98:b8:61:1e:c4:d5:0b:85:e3:85:ae:5f:28:ff:
         4b:58:de:f3:a7:c3:d5:da:19:cc:5b:24:72:b2:2f:82:b9:10:
         c7:f2:ec:76:72:94:76:12:bc:e8:d9:aa:01:d9:b5:96:9d:3f:
         68:7e:b0:f2:59:7d:31:ce:01:df:ce:b0:0c:9d:84:2f:95:8f:
         b1:e1:f0:53:c2:32:ae:72:38:07:76:c0:e8:33:b4:ab:c6:d4:
         14:c1:c6:21:f7:96:5f:10:0f:67:cb:67:a2:83:82:68:22:ba:
         b3:9e:fa:35:5f:8e:99:bb:44:35:38:f0:af:20:8a:af:0b:42:
         4b:0e:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org