Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c43cd97b55d1a2685394ae8d03471dcdbb50999.roa
File:                     6c43cd97b55d1a2685394ae8d03471dcdbb50999.roa (raw, json)
Hash identifier:          tlC5gT26HjNwo4G/oCaced8D+kb15XwQ94umwJPASpE=
Subject key identifier:   1A:B4:64:AE:6E:7E:77:62:88:F5:70:BA:B7:38:06:40:14:22:2F:29
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06AC1F
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c43cd97b55d1a2685394ae8d03471dcdbb50999.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     30823
IP address blocks:        191.101.204.0/24 maxlen: 24
                          191.96.103.0/24 maxlen: 24
                          179.61.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437279 (0x6ac1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=6c43cd97b55d1a2685394ae8d03471dcdbb50999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:1a:35:d1:11:33:23:5b:fd:55:9a:d7:71:
                    44:4e:2e:9e:b6:92:45:0b:08:7c:32:3a:47:28:6a:
                    73:2d:8f:a4:cf:57:8b:03:ee:c3:f0:d0:ea:80:a6:
                    10:4f:d8:69:a3:4e:a9:95:9a:df:8e:c5:26:c4:97:
                    38:fa:25:9a:ae:89:99:09:57:c1:7b:12:5c:50:f3:
                    b7:6f:a0:c4:c4:15:34:41:fe:5a:c4:af:3a:0a:ff:
                    31:b9:b2:6d:59:18:f2:65:a6:11:a8:bf:1c:97:90:
                    58:46:2a:98:73:b8:f8:d2:49:8a:11:9d:b2:37:45:
                    fd:7a:47:ad:76:75:b4:69:bb:15:02:57:08:27:79:
                    b0:2f:b2:8a:21:59:ff:17:ae:67:8a:4d:4f:65:0f:
                    b7:50:6e:56:89:c1:0e:f1:6c:3c:10:16:b2:e2:24:
                    bb:c1:46:a7:cf:06:9f:8a:51:49:9d:1b:f4:06:94:
                    d0:a3:86:2d:ee:d4:c9:99:97:67:04:07:47:54:e4:
                    23:7f:74:39:1d:66:92:0c:3e:52:25:ac:54:e7:dd:
                    76:a3:b5:fc:b6:9b:f8:53:17:bb:a4:2b:ae:08:a0:
                    28:a5:02:0e:5e:de:ea:a2:f2:76:ec:5c:12:58:a2:
                    49:80:b2:eb:ec:c5:fc:24:98:8e:a3:79:ce:39:d7:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:64:AE:6E:7E:77:62:88:F5:70:BA:B7:38:06:40:14:22:2F:29
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c43cd97b55d1a2685394ae8d03471dcdbb50999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.237.0/24
                  191.96.103.0/24
                  191.101.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:6b:a7:c4:4f:22:1c:40:2e:bb:11:85:6f:1c:dd:8f:29:
         63:1b:4e:4b:d1:24:67:52:f6:f0:4c:04:eb:40:82:3a:f1:69:
         42:2d:0d:f8:60:5f:03:b1:30:5c:b5:60:ea:98:73:19:de:f1:
         a2:b8:dc:9b:49:0c:26:42:95:df:b6:9a:25:5c:30:4c:82:ac:
         9a:f4:72:53:5d:d2:95:11:8c:0e:93:76:74:b8:a6:01:0f:80:
         97:f7:f6:f7:61:f0:60:05:4f:d7:a6:fc:29:96:b4:5d:8a:d0:
         32:26:c2:0d:64:ff:fe:34:a4:46:3b:8b:41:38:71:0e:a2:b6:
         61:7c:45:7b:17:49:b8:32:79:d8:a7:d0:f8:16:f1:c3:9f:d2:
         63:4b:4e:ab:3c:78:b5:f3:c2:d4:5d:e1:be:48:fe:c2:48:7b:
         6d:c9:de:51:b1:e0:b3:42:13:33:b4:73:56:a3:3f:04:18:b1:
         65:c4:7b:b7:d8:0d:6c:53:b6:63:39:4d:25:45:c5:03:10:47:
         eb:c4:c1:58:5a:ac:c4:58:39:b1:fa:da:f6:85:c4:4c:cc:40:
         5a:44:64:3a:b1:b3:aa:fb:c5:94:4c:a8:cd:14:cb:0d:90:04:
         7e:d4:98:f1:56:ff:22:02:ba:a5:17:51:05:72:b9:9d:1e:d2:
         46:40:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org