Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c34ffd2a506bbdf13905c2fa33f828ba408eab8.roa
File:                     6c34ffd2a506bbdf13905c2fa33f828ba408eab8.roa (raw, json)
Hash identifier:          wfyPg5NkDbSM2OrStIg2KuqZGXtPQOwGtQV8n5SEOR0=
Subject key identifier:   97:A7:F9:81:96:87:1B:1F:95:5C:EF:D5:DD:A6:AD:74:CF:9A:F0:6A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       05F8A5
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c34ffd2a506bbdf13905c2fa33f828ba408eab8.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     14935
IP address blocks:        179.61.223.0/24 maxlen: 24
                          179.61.252.0/24 maxlen: 24
                          181.214.47.0/24 maxlen: 24
                          181.215.248.0/22 maxlen: 24
                          191.96.177.0/24 maxlen: 24
                          191.96.246.0/24 maxlen: 24
                          191.96.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391333 (0x5f8a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=6c34ffd2a506bbdf13905c2fa33f828ba408eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:04:29:14:01:10:4d:5c:a7:05:ae:e6:4b:
                    26:bd:06:23:b8:5d:69:ad:d4:26:2b:95:a5:51:a1:
                    9b:63:0d:93:3e:1d:5b:c2:8d:f4:e7:10:79:de:08:
                    a4:58:b8:65:f0:16:ff:ac:1d:52:cb:aa:23:8c:08:
                    d2:67:f1:3b:7b:94:c5:5f:7e:63:e9:f2:ea:6c:c6:
                    a2:1f:b5:74:95:f6:b6:92:5d:9a:4a:5a:24:56:d0:
                    0c:59:ff:73:6a:89:25:c4:26:55:a8:a6:b7:82:42:
                    c4:22:24:25:93:2d:7c:90:a2:51:df:e7:be:69:64:
                    34:c8:88:f9:85:90:2a:9c:38:d1:bf:44:1b:08:ee:
                    0f:d5:68:8b:f7:57:62:4e:84:9d:50:a8:47:8f:55:
                    1b:49:1d:9f:bf:5c:63:48:70:8a:bd:f3:d8:2c:e6:
                    c4:d9:58:d9:f4:00:13:98:3e:0b:87:2e:fd:66:2f:
                    4d:79:04:25:ad:d1:ae:20:d1:ac:56:88:0f:ce:58:
                    b1:af:77:f8:90:18:ab:fd:1d:56:f6:94:19:28:21:
                    b2:20:5d:29:6a:be:98:95:97:fe:06:f7:fb:b5:34:
                    9c:e5:c5:7e:d4:34:fb:cf:d1:01:80:2e:e3:1a:30:
                    0e:2d:37:83:b6:b9:77:d8:29:06:3d:1d:74:c4:6e:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:F9:81:96:87:1B:1F:95:5C:EF:D5:DD:A6:AD:74:CF:9A:F0:6A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c34ffd2a506bbdf13905c2fa33f828ba408eab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.223.0/24
                  179.61.252.0/24
                  181.214.47.0/24
                  181.215.248.0/22
                  191.96.30.0/24
                  191.96.177.0/24
                  191.96.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:bd:a6:3f:48:af:3a:16:06:05:6f:98:dd:6b:0e:8c:5b:
         a0:76:33:b0:00:79:54:81:3a:6d:f0:33:68:97:e5:b8:d7:0e:
         41:b0:13:a6:98:9c:f5:4b:60:84:e3:d1:e5:1c:87:98:c9:28:
         87:3c:74:45:70:18:5e:93:52:e7:45:4c:3a:eb:c4:d7:42:3c:
         ef:8b:e0:38:da:3c:44:cf:be:60:ee:de:56:fa:e0:c7:52:48:
         c4:3e:27:e8:2b:b2:57:34:3d:a4:b8:65:cf:7e:a3:5e:72:39:
         fa:2c:e7:c8:91:f8:dd:16:e0:a9:b4:35:6e:57:65:e6:7e:a8:
         c5:7b:56:ed:63:5f:57:96:82:b8:e2:b1:69:a6:c9:f4:24:e2:
         e3:59:5a:b0:ae:ce:da:a6:93:a9:13:6a:8b:e1:2d:69:56:dc:
         fe:b5:a8:6a:59:c4:7b:e0:a2:6b:ed:a4:f1:29:90:2d:c7:9e:
         74:d4:6a:60:47:c5:4d:22:ac:16:46:be:ba:79:58:70:00:b3:
         30:b3:4c:2b:3f:b7:7d:d5:66:43:35:6f:99:71:6e:a7:a5:84:
         5d:f6:c2:48:93:59:ee:e6:33:75:2c:a5:5d:81:8b:bd:7b:69:
         d0:49:07:1f:01:5c:b7:0e:09:7a:16:d3:e6:aa:8f:6c:ef:43:
         21:88:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org