Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a365fbaef752bb5652b576c9ff74b7161646a7f2.roa
File:                     a365fbaef752bb5652b576c9ff74b7161646a7f2.roa (raw, json)
Hash identifier:          zIvHhNrLM2tJsTVTa+9KJ8BArMl90Nu7D4ZJfji78uE=
Subject key identifier:   5C:E7:61:5C:6C:92:7E:FE:A1:5E:DC:23:F5:57:94:6C:19:A3:39:CA
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       104AF9
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a365fbaef752bb5652b576c9ff74b7161646a7f2.roa
Signing time:             Thu 28 Oct 2021 15:50:18 +0000
ROA not before:           Thu 28 Oct 2021 03:00:00 +0000
ROA not after:            Sat 28 Oct 2023 03:00:00 +0000
asID:                     272221
IP address blocks:        179.61.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067769 (0x104af9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 28 03:00:00 2021 GMT
            Not After : Oct 28 03:00:00 2023 GMT
        Subject: CN=a365fbaef752bb5652b576c9ff74b7161646a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:09:44:56:04:20:08:8e:ba:a3:54:05:db:
                    33:e9:21:5a:50:9e:78:33:a2:06:d5:ff:87:76:12:
                    93:9d:bb:a3:82:69:0d:55:91:c0:f9:de:d7:78:8e:
                    e3:ac:f9:db:c0:5f:68:42:12:c8:fd:17:56:f0:8f:
                    73:19:d1:14:1b:95:f2:30:ad:2f:24:10:f6:74:c3:
                    71:cb:4b:ca:41:ea:0c:15:fa:38:79:15:50:06:6e:
                    f0:19:e7:c1:be:13:12:55:20:2b:e7:bc:0e:d8:30:
                    46:57:f1:7e:06:36:2d:8b:b9:63:41:83:2a:94:e2:
                    8a:39:68:30:2e:45:cb:1a:d3:95:1b:0f:dd:82:5a:
                    55:00:f9:6a:40:b0:0f:01:7b:9f:68:5a:f7:87:4d:
                    cf:7c:71:d9:70:8f:d3:70:75:2c:67:d3:23:7f:61:
                    11:05:d0:13:23:2b:26:8d:c6:8e:b1:84:cf:92:89:
                    62:da:85:e6:46:d0:3e:c7:f5:22:88:cf:53:66:f9:
                    44:38:eb:91:7d:50:ba:d3:18:5a:eb:cc:a2:02:9d:
                    2c:99:88:b0:f8:92:67:fd:84:8f:09:3c:47:39:29:
                    53:ec:b2:ea:31:b3:ce:2e:c2:c4:b6:2e:64:a6:e1:
                    9e:a9:0e:be:d6:f8:7b:fa:67:5d:ae:a8:01:70:7b:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:61:5C:6C:92:7E:FE:A1:5E:DC:23:F5:57:94:6C:19:A3:39:CA
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a365fbaef752bb5652b576c9ff74b7161646a7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:14:56:25:9a:01:eb:00:f3:46:9d:59:78:0a:ec:8b:6f:
         74:ef:8b:9c:24:62:b2:4e:ad:3d:87:7a:25:5a:ed:1d:75:09:
         0c:c3:0f:68:d1:e0:23:b2:d3:bf:ae:8d:5a:6d:0c:91:25:ed:
         b9:c0:dc:1d:cf:6e:2a:d0:05:cb:98:76:32:17:23:66:87:00:
         11:b3:50:81:3d:13:0d:0e:cd:55:2e:6e:89:8f:e9:5c:e2:36:
         21:6d:e0:d5:87:dd:6c:51:3e:3d:b1:8b:7b:03:90:de:63:c0:
         60:7c:3e:3a:7b:59:9c:25:33:65:7d:4f:a5:73:83:38:cb:9f:
         16:50:d7:09:44:65:fd:2d:1c:f9:89:5b:cd:a7:25:1d:4d:e0:
         ea:b4:a8:fc:1a:3a:83:4a:13:de:99:c6:bf:ce:3e:8e:0e:64:
         2c:e7:c8:14:94:50:29:fc:5e:f9:ab:1b:1e:c7:e0:9c:9b:62:
         58:8a:c3:19:bd:b0:90:ec:d0:52:fc:79:c2:6b:cc:5e:ac:61:
         f0:ad:1e:a7:91:73:57:f6:d3:cf:11:c0:c2:dc:c8:54:e4:5a:
         29:dd:1a:a3:bb:cd:1f:5d:7b:91:54:c4:63:49:79:d7:3c:03:
         8b:30:7a:2d:69:79:3e:7a:bd:27:c7:d5:46:93:07:b1:aa:51:
         7c:6d:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org