Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e6026cb6d7891757ff85f05b9eada59142a62fba.roa
File:                     e6026cb6d7891757ff85f05b9eada59142a62fba.roa (raw, json)
Hash identifier:          5vSnMe6SKQ43r/ONKNM56WEgo1K1eoxH2djqrXcaGLA=
Subject key identifier:   45:D8:96:6B:42:3E:79:D6:1F:71:DD:1B:D2:8C:7E:35:A8:05:EB:0E
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       148CD7
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e6026cb6d7891757ff85f05b9eada59142a62fba.roa
Signing time:             Mon 17 Jan 2022 20:23:14 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     33696
IP address blocks:        179.61.200.0/24 maxlen: 24
                          191.101.207.0/24 maxlen: 24
                          181.214.39.0/24 maxlen: 24
                          181.214.41.0/24 maxlen: 24
                          191.96.197.0/24 maxlen: 24
                          191.96.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346775 (0x148cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e6026cb6d7891757ff85f05b9eada59142a62fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b6:c9:bd:9c:71:23:6c:57:88:70:5d:14:e0:
                    1b:b4:a8:b8:ed:a3:bf:04:0d:d2:c8:0b:6d:72:59:
                    70:c6:09:93:dc:aa:41:5b:1c:96:5f:db:2d:cf:65:
                    fa:96:2f:30:f4:8e:89:b3:20:54:64:3a:44:a7:fd:
                    f2:56:7d:c1:12:5c:26:5a:2f:93:bc:23:d4:c5:f6:
                    15:65:bc:eb:de:a9:ad:3c:12:1a:6a:a9:a1:ab:99:
                    91:5c:74:d5:c2:32:ff:7c:21:e8:b3:59:7a:17:38:
                    d6:7e:3b:19:0b:dd:45:f8:1b:8e:08:3d:2b:85:0e:
                    f4:85:c8:4c:4c:7f:4b:79:2e:e8:12:cc:29:25:5f:
                    fd:62:52:dc:a4:f9:b5:0e:80:ab:3d:59:dc:df:2f:
                    d3:1b:7f:56:1d:32:73:67:22:5c:fa:90:92:c8:2e:
                    78:11:eb:94:86:06:7b:80:a7:1d:18:4d:5b:b1:65:
                    c0:f9:f7:3e:2b:9a:41:d8:6c:35:56:95:af:10:c1:
                    2c:3e:88:1e:0b:ee:37:b2:b1:96:35:a4:f2:ca:4a:
                    59:93:d9:65:ca:5d:15:e7:72:90:d5:7e:af:fd:09:
                    8c:bb:1f:de:be:72:01:26:78:9d:64:2e:e1:d7:8e:
                    65:76:9b:27:27:da:71:8a:56:36:84:8c:92:4b:a0:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:96:6B:42:3E:79:D6:1F:71:DD:1B:D2:8C:7E:35:A8:05:EB:0E
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e6026cb6d7891757ff85f05b9eada59142a62fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.200.0/24
                  181.214.39.0/24
                  181.214.41.0/24
                  191.96.197.0/24
                  191.96.199.0/24
                  191.101.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:ee:02:85:4b:8d:e4:68:aa:79:c0:4c:2b:ce:c6:b6:63:
         05:3c:ca:ed:1a:b9:4f:9b:f1:8a:51:a2:4b:bd:f5:26:5e:69:
         b0:7a:05:b5:ee:72:c5:9f:d8:3d:ec:af:f6:07:e9:f6:0b:e3:
         77:30:19:19:31:6e:d8:06:7a:9a:7c:06:67:3d:93:b2:05:fe:
         f8:de:8a:27:8b:50:0a:e8:84:21:05:5b:18:4c:42:29:67:27:
         4c:c5:f1:a3:a0:35:34:bb:f5:44:dc:16:a2:5e:a6:64:34:9e:
         38:46:97:3d:24:70:7e:05:bc:d7:4f:17:25:6c:a7:46:54:b2:
         3d:d7:8d:95:0b:c5:05:40:7e:bf:e0:ee:4b:37:5f:fd:60:b5:
         a4:3e:d7:71:3f:33:a3:6e:3d:5d:4d:1d:08:5e:fb:6e:1d:27:
         21:93:2f:7c:a9:1b:c3:fb:1a:3b:8d:35:44:89:28:3e:56:9e:
         4e:c1:f1:fa:1c:7c:50:db:5a:b1:f8:72:58:3a:ca:f6:39:56:
         98:51:83:d4:00:f9:c7:50:05:72:61:11:31:89:41:de:1d:83:
         b6:f2:c0:f8:42:b8:30:02:25:5b:9d:3c:b2:55:89:ed:3e:a7:
         73:16:cd:0a:2f:23:81:0b:6c:12:52:cd:20:c5:ac:59:e0:98:
         b1:18:7c:44
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDFIzXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlNjAyNmNiNmQ3ODkx
NzU3ZmY4NWYwNWI5ZWFkYTU5MTQyYTYyZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjLbJvZxxI2xXiHBdFOAbtKi47aO/BA3SyAttcllwxgmT3KpB
WxyWX9stz2X6li8w9I6JsyBUZDpEp/3yVn3BElwmWi+TvCPUxfYVZbzr3qmtPBIa
aqmhq5mRXHTVwjL/fCHos1l6FzjWfjsZC91F+BuOCD0rhQ70hchMTH9LeS7oEswp
JV/9YlLcpPm1DoCrPVnc3y/TG39WHTJzZyJc+pCSyC54EeuUhgZ7gKcdGE1bsWXA
+fc+K5pB2Gw1VpWvEMEsPogeC+43srGWNaTyykpZk9llyl0V53KQ1X6v/QmMux/e
vnIBJnidZC7h145ldpsnJ9pxilY2hIySS6BceQIDAQABo4ICeTCCAnUwHQYDVR0O
BBYEFEXYlmtCPnnWH3HdG9KMfjWoBesOMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2U2MDI2Y2I2ZDc4OTE3NTdmZjg1ZjA1YjllYWRhNTkxNDJhNjJmYmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQu
MCwwKgQCAAEwJAMEALM9yAMEALXWJwMEALXWKQMEAL9gxQMEAL9gxwMEAL9lzzAN
BgkqhkiG9w0BAQsFAAOCAQEASwbuAoVLjeRoqnnATCvOxrZjBTzK7Rq5T5vxilGi
S731Jl5psHoFte5yxZ/YPeyv9gfp9gvjdzAZGTFu2AZ6mnwGZz2TsgX++N6KJ4tQ
CuiEIQVbGExCKWcnTMXxo6A1NLv1RNwWol6mZDSeOEaXPSRwfgW8108XJWynRlSy
PdeNlQvFBUB+v+DuSzdf/WC1pD7XcT8zo249XU0dCF77bh0nIZMvfKkbw/saO401
RIkoPlaeTsHx+hx8UNtasfhyWDrK9jlWmFGD1AD5x1AFcmERMYlB3h2DtvLA+EK4
MAIlW508slWJ7T6ncxbNCi8jgQtsElLNIMWsWeCYsRh8RA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org