Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6b56185ba1a7b1018a71e291bb54c8838b6b27b0.roa
File:                     6b56185ba1a7b1018a71e291bb54c8838b6b27b0.roa (raw, json)
Hash identifier:          SRGjBs5651pktpPvnfZY8mDAi0wLw2cbncEgZl3G/GY=
Subject key identifier:   B0:E1:7E:0A:18:DD:D1:17:49:0C:92:62:2B:C8:C7:A3:EB:38:A0:09
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       1325E4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6b56185ba1a7b1018a71e291bb54c8838b6b27b0.roa
Signing time:             Tue 28 Dec 2021 15:59:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     397071
IP address blocks:        179.61.218.0/24 maxlen: 24
                          181.214.234.0/24 maxlen: 24
                          181.215.11.0/24 maxlen: 24
                          181.215.25.0/24 maxlen: 24
                          181.215.198.0/24 maxlen: 24
                          181.215.214.0/24 maxlen: 24
                          181.215.27.0/24 maxlen: 24
                          181.215.43.0/24 maxlen: 24
                          181.215.189.0/24 maxlen: 24
                          181.215.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254884 (0x1325e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6b56185ba1a7b1018a71e291bb54c8838b6b27b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:52:7f:31:27:43:1b:01:21:80:7a:e1:32:
                    fb:e7:15:4f:dd:1e:44:91:12:30:9a:b0:a7:16:b1:
                    dc:f0:b3:28:ba:dd:fd:74:2c:14:06:0a:5a:04:f1:
                    1d:50:a7:f2:e0:65:ca:9c:0d:4c:a9:18:6b:9e:86:
                    c9:62:d8:4e:b9:1d:88:1d:ec:1a:de:3c:5a:87:61:
                    72:ea:c4:bc:c2:78:ad:52:8c:b3:3c:3f:b5:99:6a:
                    d0:9c:1c:78:84:57:3a:18:e6:7d:77:f2:ba:e5:ee:
                    5f:4a:6a:43:f0:0c:0a:45:11:0d:a6:fb:40:9d:ea:
                    5b:74:2e:4f:23:6c:fb:dc:9f:52:51:41:ed:0f:d1:
                    c5:98:0e:01:c2:52:29:5f:47:38:7b:68:90:04:e6:
                    12:f7:b8:59:99:64:96:be:22:e8:86:25:80:5a:ae:
                    a4:ab:3b:c0:7f:b2:36:3f:d0:4b:f0:04:0e:e8:f1:
                    3b:58:ff:58:ce:39:24:86:c5:fa:1f:bf:dd:81:f4:
                    28:57:4f:5b:c4:2d:e9:cb:9a:23:93:42:3f:07:9c:
                    fc:9d:90:8b:b9:52:55:3d:b5:43:83:cc:50:62:bd:
                    85:2a:ed:a2:7e:dd:1b:b1:52:80:d7:09:35:ca:16:
                    86:f6:6d:34:d7:47:d3:cd:68:b9:05:01:75:39:83:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E1:7E:0A:18:DD:D1:17:49:0C:92:62:2B:C8:C7:A3:EB:38:A0:09
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6b56185ba1a7b1018a71e291bb54c8838b6b27b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.218.0/24
                  181.214.234.0/24
                  181.215.11.0/24
                  181.215.25.0/24
                  181.215.27.0/24
                  181.215.43.0/24
                  181.215.189.0-181.215.190.255
                  181.215.198.0/24
                  181.215.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:de:02:5e:37:e7:73:24:80:bd:f0:8b:2b:62:57:b9:40:
         21:4b:d9:0b:98:06:7d:a1:29:d1:b0:b7:25:38:67:c8:d3:17:
         fa:de:2f:2f:e1:0c:60:d8:35:d6:27:c8:1d:7c:01:91:bf:53:
         bf:b7:4f:b9:af:ed:c1:35:55:6d:3c:74:83:8e:89:5b:24:6c:
         58:c4:73:29:e5:bf:9b:66:e1:97:d2:f3:12:dc:ec:26:5f:ef:
         8f:22:e3:55:fc:b6:ee:c7:cf:5e:2b:00:c7:b7:25:9a:1d:5d:
         b2:37:fb:f1:53:08:0d:fe:9b:ce:b4:54:43:43:8b:92:54:73:
         c4:00:4b:26:5e:d1:d7:81:94:74:2c:46:fb:07:46:eb:a7:5c:
         5f:12:bf:89:cc:e4:4e:c0:92:ae:f1:4c:de:bf:cb:9f:6c:56:
         10:3c:43:86:7d:3f:f7:41:c2:d1:ee:ea:2e:27:72:92:e8:dd:
         aa:1e:90:7c:76:1e:e4:ba:99:44:0b:62:da:58:ed:61:ac:a8:
         d1:54:e2:d3:0f:8e:af:ca:99:65:2d:fc:60:30:11:85:bc:e1:
         b9:1f:56:31:6e:c0:a1:b0:d0:0d:84:8d:e2:4a:1f:76:14:f9:
         01:2c:22:3b:53:2e:b5:4b:9f:79:d8:aa:78:63:db:8e:ea:80:
         6a:70:18:03
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIDEyXkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2YjU2MTg1YmExYTdi
MTAxOGE3MWUyOTFiYjU0Yzg4MzhiNmIyN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnzNSfzEnQxsBIYB64TL75xVP3R5EkRIwmrCnFrHc8LMout39
dCwUBgpaBPEdUKfy4GXKnA1MqRhrnobJYthOuR2IHewa3jxah2Fy6sS8wnitUoyz
PD+1mWrQnBx4hFc6GOZ9d/K65e5fSmpD8AwKRRENpvtAnepbdC5PI2z73J9SUUHt
D9HFmA4BwlIpX0c4e2iQBOYS97hZmWSWviLohiWAWq6kqzvAf7I2P9BL8AQO6PE7
WP9YzjkkhsX6H7/dgfQoV09bxC3py5ojk0I/B5z8nZCLuVJVPbVDg8xQYr2FKu2i
ft0bsVKA1wk1yhaG9m0010fTzWi5BQF1OYMSmwIDAQABo4ICkzCCAo8wHQYDVR0O
BBYEFLDhfgoY3dEXSQySYivIx6PrOKAJMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzZiNTYxODViYTFhN2IxMDE4YTcxZTI5MWJiNTRjODgzOGI2YjI3YjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggrBgEFBQcBBwEB/wRI
MEYwRAQCAAEwPgMEALM92gMEALXW6gMEALXXCwMEALXXGQMEALXXGwMEALXXKzAM
AwQAtde9AwQAtde+AwQAtdfGAwQAtdfWMA0GCSqGSIb3DQEBCwUAA4IBAQCdB94C
XjfncySAvfCLK2JXuUAhS9kLmAZ9oSnRsLclOGfI0xf63i8v4Qxg2DXWJ8gdfAGR
v1O/t0+5r+3BNVVtPHSDjolbJGxYxHMp5b+bZuGX0vMS3OwmX++PIuNV/Lbux89e
KwDHtyWaHV2yN/vxUwgN/pvOtFRDQ4uSVHPEAEsmXtHXgZR0LEb7B0brp1xfEr+J
zOROwJKu8Uzev8ufbFYQPEOGfT/3QcLR7uouJ3KS6N2qHpB8dh7kuplEC2LaWO1h
rKjRVOLTD46vypllLfxgMBGFvOG5H1YxbsChsNANhI3iSh92FPkBLCI7Uy61S595
2Kp4Y9uO6oBqcBgD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org