Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d075279aa73e1677f3e84f52b0581ab285e0a762.roa
File:                     d075279aa73e1677f3e84f52b0581ab285e0a762.roa (raw, json)
Hash identifier:          +I+VFtZL8mB5iqBF0Nuq0XkLrpfEipHvQc5ox88Nmoc=
Subject key identifier:   76:D9:BF:3C:06:DF:A2:6D:2A:F0:61:D3:7E:BE:14:95:17:16:3B:87
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0B8891
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d075279aa73e1677f3e84f52b0581ab285e0a762.roa
Signing time:             Wed 21 Jul 2021 06:55:50 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     60458
IP address blocks:        179.61.203.0/24 maxlen: 24
                          181.214.27.0/24 maxlen: 24
                          181.214.55.0/24 maxlen: 24
                          181.214.244.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          191.96.66.0/24 maxlen: 24
                          191.96.231.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24
                          191.101.25.0/24 maxlen: 24
                          191.101.27.0/24 maxlen: 24
                          191.101.150.0/23 maxlen: 24
                          191.101.168.0/24 maxlen: 24
                          191.101.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755857 (0xb8891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d075279aa73e1677f3e84f52b0581ab285e0a762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:2e:28:12:0f:83:69:4e:71:92:c4:ae:cd:
                    16:9c:e9:23:e3:8d:a7:d4:4d:ba:b3:a5:14:e6:68:
                    9e:b0:e4:57:c8:ab:a9:45:c1:53:62:a0:e5:1a:4d:
                    67:15:f0:5a:15:7d:c1:85:b8:3a:3b:78:e6:1e:90:
                    c9:58:64:f1:eb:36:c1:df:fe:36:7f:be:f8:ed:c4:
                    6b:63:55:c9:9e:b0:4a:97:52:a7:0b:0c:e8:03:c5:
                    01:6c:d5:73:d6:41:f9:c2:30:4c:dd:1c:a7:54:55:
                    79:fa:d5:2c:7e:3d:fb:ec:4e:44:0c:fc:73:0f:b9:
                    95:ec:ce:7a:5f:88:3f:b0:70:09:1b:a0:8a:0b:9c:
                    3a:82:c7:58:54:d4:ec:ab:49:ed:98:3d:bc:97:b4:
                    f9:f0:03:01:c3:4c:a3:e6:8a:b6:e2:67:d8:d2:e6:
                    38:c8:a8:a1:c4:9f:bf:05:fb:a6:c1:ba:a0:d4:73:
                    23:ff:0d:6a:4d:5b:de:07:bb:d3:8c:22:e1:e0:81:
                    3d:2b:c3:0a:31:f7:3a:64:38:e5:61:46:7a:ed:dc:
                    26:20:28:d6:cc:bd:c0:61:ae:2a:e7:b7:04:bf:b1:
                    bb:a5:49:b1:0f:5d:f3:ae:42:6c:de:f6:e4:27:6c:
                    95:df:29:22:35:14:94:9c:6f:97:bf:08:b0:b5:8e:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:BF:3C:06:DF:A2:6D:2A:F0:61:D3:7E:BE:14:95:17:16:3B:87
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d075279aa73e1677f3e84f52b0581ab285e0a762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.203.0/24
                  181.214.27.0/24
                  181.214.55.0/24
                  181.214.244.0/24
                  181.215.9.0/24
                  191.96.66.0/24
                  191.96.231.0/24
                  191.96.245.0/24
                  191.101.25.0/24
                  191.101.27.0/24
                  191.101.150.0/23
                  191.101.168.0/24
                  191.101.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:39:10:56:34:5a:fe:ba:02:de:1c:e4:ed:65:ae:3f:e3:
         e8:50:5a:c9:30:7a:d8:34:3c:06:75:48:77:09:25:f5:cb:cb:
         00:42:6a:77:b9:00:fc:36:64:31:ce:01:f2:76:0d:3e:20:1f:
         e7:86:3d:4f:95:bc:82:1e:07:01:56:1f:ea:82:b1:ae:32:f9:
         12:0a:28:30:af:bb:57:77:cf:32:39:36:5e:4e:9d:65:61:4c:
         65:4a:47:09:85:09:d0:55:3a:4d:82:75:5b:2a:ef:5c:b0:b5:
         69:4a:bb:a8:5b:29:40:9f:dd:3b:31:31:80:b2:56:5b:7b:3a:
         cd:12:49:f1:f1:71:67:3e:41:9c:8c:fb:0c:6f:0e:4d:c6:8f:
         52:d5:e4:85:7e:bb:48:4f:f0:f1:24:2f:e1:0f:37:6b:20:92:
         31:57:67:49:4d:cd:5c:4e:92:c3:a6:f1:ae:3f:d7:17:23:de:
         9e:40:8e:17:62:39:ee:bc:e3:eb:4c:39:4a:f4:71:e1:64:21:
         eb:f3:29:0c:f9:5b:ec:84:f6:4c:2a:d2:b9:42:81:58:4c:87:
         32:d7:99:23:3f:30:47:42:65:7e:08:87:01:b1:e3:cc:21:70:
         96:64:ac:13:da:d4:67:9c:14:86:8c:7f:48:9e:c3:42:69:c3:
         ee:fb:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org