Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5a6497fc8bdd43c896bbe4d2ec9959abc3e5feff.roa
File:                     5a6497fc8bdd43c896bbe4d2ec9959abc3e5feff.roa (raw, json)
Hash identifier:          8wz4DKzrhihk2IEW5enXzvCddeZxR6pWA5/6HRBg00w=
Subject key identifier:   E5:E9:75:5D:19:6F:45:73:69:9C:8C:12:C9:74:83:EF:4B:FC:80:04
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       062221
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5a6497fc8bdd43c896bbe4d2ec9959abc3e5feff.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     13951
IP address blocks:        179.61.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401953 (0x62221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=5a6497fc8bdd43c896bbe4d2ec9959abc3e5feff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:ce:2a:7d:c3:ee:e1:54:36:6b:5a:c1:57:
                    6a:f8:ba:82:c1:24:15:61:7c:c8:00:56:46:64:cd:
                    3d:a3:56:ea:8a:9c:2c:65:51:b8:f8:af:13:3b:88:
                    c2:92:13:4b:8b:b1:68:7b:2b:53:7d:f9:68:08:71:
                    f0:34:1d:04:fd:f2:65:92:26:cc:2a:aa:e4:9d:81:
                    60:b0:ab:b1:6a:c3:7b:57:fe:6b:18:af:f2:06:24:
                    1f:45:77:61:b7:df:3d:d0:5e:55:e0:a2:56:73:4b:
                    73:a7:9d:70:a5:ec:c3:b2:ab:f0:3c:e2:25:87:bd:
                    53:7b:18:2d:31:08:0c:a6:71:9b:d2:64:8e:f6:00:
                    a4:6d:e0:07:2f:ae:5b:e5:7f:93:45:90:40:b2:5f:
                    b9:8a:5a:25:07:00:6b:b2:0d:d1:b1:e1:2a:1a:6c:
                    97:f2:4c:ef:eb:16:e1:d3:d8:e1:b3:b7:c6:d3:ab:
                    b0:fa:00:b5:e1:f4:a8:f3:bb:44:f6:10:43:f0:91:
                    e8:3d:41:eb:1e:78:67:d5:77:5f:ed:96:64:44:9a:
                    de:d4:86:d9:71:7c:40:5c:f6:f0:54:9d:50:16:05:
                    1c:aa:e1:4f:96:91:6c:26:8c:8e:6c:15:cf:04:3c:
                    b7:83:6f:50:25:83:b5:6b:f5:de:ea:a3:7f:9b:52:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:75:5D:19:6F:45:73:69:9C:8C:12:C9:74:83:EF:4B:FC:80:04
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5a6497fc8bdd43c896bbe4d2ec9959abc3e5feff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:ab:21:40:c5:75:01:cd:a2:0c:ee:84:58:ba:c0:40:c8:
         e6:65:68:8a:a2:07:d8:d5:52:f1:86:e8:70:f1:b9:10:60:cc:
         1f:44:b5:52:e9:33:26:c0:bf:9b:7f:d0:4b:84:4a:a3:0b:20:
         6b:ed:21:da:a2:09:93:08:b0:df:6b:e5:14:af:68:73:0e:b8:
         56:c1:3b:ea:c0:fd:0a:53:b7:1c:76:89:d7:53:ab:a0:9a:40:
         f3:ba:b2:7c:14:35:aa:2e:15:e0:fa:23:91:51:52:0b:24:4d:
         a1:9e:e7:40:f3:56:98:22:c4:5d:54:81:59:d2:be:72:f2:89:
         1c:0d:3b:6a:95:0b:7a:ea:ce:ad:e2:dc:d9:42:bd:c4:b6:2d:
         d3:48:dc:ac:b4:1b:7e:99:ea:4a:df:aa:9e:b5:33:b9:ff:f0:
         3b:86:ff:f0:f7:a6:57:89:fb:53:35:16:32:2b:9d:ec:3e:d9:
         7e:cd:c1:be:79:cd:38:a7:28:66:44:1a:62:4d:20:46:c0:26:
         65:55:f7:2a:d7:4b:fd:e1:76:da:f5:c7:d9:d5:91:19:ba:76:
         f5:4a:68:f0:0a:9c:02:28:8b:46:66:07:6b:15:40:3a:80:59:
         fb:66:7e:e4:93:f0:1c:ca:79:75:0f:d8:07:47:30:c1:3f:af:
         c7:5d:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org