Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1ca2679cf4e5669d1d764da501801434cf6b0a4e.roa
File:                     1ca2679cf4e5669d1d764da501801434cf6b0a4e.roa (raw, json)
Hash identifier:          DdpqogaEkFxjlP6mxHa77nH/4m88wlGWPqMl2t7BpvQ=
Subject key identifier:   E1:8A:90:DA:10:02:D1:17:FF:A8:81:66:09:38:8D:9C:33:53:BF:6E
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       065CA3
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1ca2679cf4e5669d1d764da501801434cf6b0a4e.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     203786
IP address blocks:        179.61.238.0/24 maxlen: 24
                          181.214.99.0/24 maxlen: 24
                          181.214.234.0/24 maxlen: 24
                          181.215.185.0/24 maxlen: 24
                          181.215.235.0/24 maxlen: 24
                          181.215.254.0/23 maxlen: 24
                          191.96.230.0/24 maxlen: 24
                          191.96.235.0/24 maxlen: 24
                          191.101.160.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416931 (0x65ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=1ca2679cf4e5669d1d764da501801434cf6b0a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:34:3a:f3:76:b2:45:9d:66:dc:13:8b:b7:
                    ad:a5:70:82:02:e2:84:7c:fd:6b:21:49:c4:74:75:
                    0b:ef:ff:05:7e:87:d7:5f:91:d8:51:9e:1f:0d:d0:
                    31:93:f6:42:00:70:85:f0:95:b7:90:ad:b9:8f:ca:
                    f4:ec:e2:0a:f8:11:e2:75:fe:10:46:2f:ca:73:f0:
                    a8:60:5d:1b:96:d1:74:ac:d5:51:c7:c0:0d:b2:8e:
                    ef:9f:54:da:58:a9:8d:d4:d6:86:1b:76:87:e4:f5:
                    ee:ca:55:6a:d8:b5:6f:ad:2f:8a:93:7a:ce:a1:e5:
                    9f:a7:ac:ac:f7:3e:1a:0d:cc:23:75:ab:3d:29:11:
                    dc:4a:b6:b9:f9:93:a1:15:36:fc:75:b0:92:54:9f:
                    70:1e:96:6e:1c:86:90:8f:32:f5:1c:64:8d:ce:4e:
                    e7:0c:91:56:fd:7b:42:e9:68:57:e5:df:6f:ce:bc:
                    dd:d4:2b:46:a1:44:59:aa:95:bc:ac:53:0d:8c:02:
                    75:88:bd:26:79:9b:54:61:5f:d7:7f:45:6c:e8:8f:
                    18:58:8d:ed:6f:a7:9b:b2:7a:cd:48:a1:62:e6:38:
                    7c:99:bb:d3:e1:51:df:dc:08:ca:27:78:b0:54:3c:
                    7f:1f:83:8f:23:67:77:fc:ad:65:11:56:93:78:99:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:90:DA:10:02:D1:17:FF:A8:81:66:09:38:8D:9C:33:53:BF:6E
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1ca2679cf4e5669d1d764da501801434cf6b0a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.238.0/24
                  181.214.99.0/24
                  181.214.234.0/24
                  181.215.185.0/24
                  181.215.235.0/24
                  181.215.254.0/23
                  191.96.230.0/24
                  191.96.235.0/24
                  191.101.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:98:b4:57:4f:8c:1d:91:71:87:94:16:c7:da:d2:14:0b:ba:
         47:2d:7a:a3:f8:27:2e:e1:40:55:2f:f8:33:ee:5f:dc:c8:13:
         2f:55:50:c4:ad:d1:85:90:94:9b:b5:92:dd:1f:c7:a4:14:35:
         8c:b9:a8:51:44:7f:a8:49:1a:1a:b3:4f:06:00:87:55:ec:1e:
         b8:5b:c9:af:b2:d6:5f:53:05:56:e8:65:02:ff:ef:1b:41:aa:
         a9:ab:82:15:80:91:aa:8a:36:e1:2c:0f:e0:99:c9:96:65:be:
         09:5f:a2:0e:43:98:12:bd:0c:1f:19:a0:c8:bb:26:34:e4:96:
         c6:99:59:e5:41:f7:26:43:88:a9:2d:69:cc:47:a6:3e:6d:ad:
         09:a5:0f:0e:8d:5f:14:5e:9c:7d:65:79:31:0c:47:32:77:51:
         eb:37:85:41:5c:7d:97:be:7e:06:a0:e0:ef:50:07:b5:c2:1f:
         ab:16:ea:60:39:ed:12:47:51:33:92:5a:f3:dc:29:fc:8a:f1:
         3a:8c:05:ae:7c:6f:bb:91:a6:cc:8b:c4:97:48:57:e4:85:97:
         93:09:1f:4f:6c:df:1e:55:d0:13:7e:0f:06:c0:73:4c:c9:75:
         47:1a:97:d5:d2:10:b8:74:bc:fe:dc:8d:52:b9:4e:99:78:71:
         dd:a8:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----