Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/eddc99c7ad438924aa20f74e51b7898b02b6c2d8.roa
File:                     eddc99c7ad438924aa20f74e51b7898b02b6c2d8.roa (raw, json)
Hash identifier:          g/M+m5Jbc9lfMbj5FpPIzL0GmKYJekgskeRfZ/cAeck=
Subject key identifier:   E8:90:D8:65:6C:4F:B0:26:F8:E6:8E:7E:A6:4B:5F:40:92:38:27:84
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       064B89
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/eddc99c7ad438924aa20f74e51b7898b02b6c2d8.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     205329
IP address blocks:        179.61.199.0/24 maxlen: 24
                          181.215.33.0/24 maxlen: 24
                          191.96.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412553 (0x64b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=eddc99c7ad438924aa20f74e51b7898b02b6c2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:7e:70:46:cf:52:86:f1:f4:aa:11:5a:37:
                    4b:ad:a0:e1:11:a8:ef:5c:a4:c6:a6:9c:43:3e:e2:
                    24:74:c3:63:6a:09:f9:91:89:95:13:48:04:e1:33:
                    b1:4c:57:0f:34:75:02:d4:6a:f6:54:e8:22:98:cc:
                    c9:11:fb:1c:36:d4:dc:26:31:21:53:f0:9d:58:15:
                    c9:f1:98:4c:93:d5:28:0e:70:93:2f:84:21:02:53:
                    16:8f:b1:d4:25:62:fb:8b:24:fc:4e:59:66:20:c1:
                    95:9a:2d:b5:a9:e2:33:86:ce:0e:bf:97:5b:8f:24:
                    ac:33:a0:66:af:15:75:bc:13:03:8e:43:05:5b:9b:
                    1d:33:4e:c9:23:ba:a7:25:30:bb:b5:62:48:81:5c:
                    cc:ae:cf:4d:19:2a:fa:0d:c1:3d:12:8b:10:95:10:
                    5c:80:5e:ed:40:f5:ad:66:c7:ab:d7:a1:55:43:34:
                    6d:33:cb:30:54:8a:e9:21:8b:c5:54:83:f9:37:bc:
                    1c:70:b3:38:78:5b:61:88:49:9c:34:d4:ed:84:60:
                    ca:29:1f:ad:73:0f:aa:fd:71:cf:5e:04:36:a3:06:
                    52:67:f2:12:ad:e1:ba:c4:e1:83:e5:59:01:01:87:
                    21:ed:cd:92:99:f5:07:2c:61:86:ac:c7:8f:4f:48:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:D8:65:6C:4F:B0:26:F8:E6:8E:7E:A6:4B:5F:40:92:38:27:84
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/eddc99c7ad438924aa20f74e51b7898b02b6c2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.199.0/24
                  181.215.33.0/24
                  191.96.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:58:d0:18:3b:0f:e5:f5:17:d8:df:19:5f:cd:09:71:ec:f8:
         b2:af:d4:c3:44:5c:4d:24:c9:10:dc:08:eb:a7:ba:2c:d7:8b:
         6c:e5:f3:d8:29:68:15:8d:c2:33:e6:7a:78:8a:b9:0d:c2:74:
         7f:14:f1:59:4d:70:5b:46:99:68:5e:93:34:10:5f:b4:bf:0b:
         5b:e9:18:dd:06:ab:cb:4d:54:29:37:5c:6d:07:ec:26:09:36:
         39:c7:14:a6:b9:0a:55:43:68:3e:21:6a:8b:50:bd:be:8c:ee:
         15:47:8e:f5:c8:2d:9b:b6:74:35:8d:a4:78:86:22:b9:15:ae:
         af:40:0f:60:b3:40:a7:5e:af:a2:14:b4:e8:af:4e:92:f7:22:
         10:04:f3:10:25:96:66:a8:7a:d4:6d:a7:d2:99:ff:17:b6:08:
         16:98:da:9f:b1:51:50:c7:5e:89:e2:00:8a:28:80:76:b6:42:
         48:69:fe:08:d6:cf:18:9e:75:d4:f5:30:ef:c5:0d:e5:5c:e5:
         fc:e0:85:31:fa:c9:a9:cf:21:5b:8f:b4:52:9a:a3:6c:6c:41:
         2c:cd:47:79:54:b8:04:17:f7:7f:7d:f0:d7:14:0b:85:15:1e:
         0b:ee:3b:dd:49:d7:15:44:9b:ad:bb:a8:26:9e:4e:b5:d7:fd:
         03:b8:79:98
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDBkuJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyhlZGRjOTljN2FkNDM4
OTI0YWEyMGY3NGU1MWI3ODk4YjAyYjZjMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlTx+cEbPUobx9KoRWjdLraDhEajvXKTGppxDPuIkdMNjagn5
kYmVE0gE4TOxTFcPNHUC1Gr2VOgimMzJEfscNtTcJjEhU/CdWBXJ8ZhMk9UoDnCT
L4QhAlMWj7HUJWL7iyT8TllmIMGVmi21qeIzhs4Ov5dbjySsM6BmrxV1vBMDjkMF
W5sdM07JI7qnJTC7tWJIgVzMrs9NGSr6DcE9EosQlRBcgF7tQPWtZser16FVQzRt
M8swVIrpIYvFVIP5N7wccLM4eFthiEmcNNTthGDKKR+tcw+q/XHPXgQ2owZSZ/IS
reG6xOGD5VkBAYch7c2SmfUHLGGGrMePT0g4+wIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFOiQ2GVsT7Am+OaOfqZLX0CSOCeEMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2VkZGM5OWM3YWQ0Mzg5MjRhYTIwZjc0ZTUxYjc4OThiMDJiNmMyZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEALM9xwMEALXXIQMEAL9gvDANBgkqhkiG9w0BAQsFAAOCAQEA
kFjQGDsP5fUX2N8ZX80Jcez4sq/Uw0RcTSTJENwI66e6LNeLbOXz2CloFY3CM+Z6
eIq5DcJ0fxTxWU1wW0aZaF6TNBBftL8LW+kY3Qary01UKTdcbQfsJgk2OccUprkK
VUNoPiFqi1C9vozuFUeO9cgtm7Z0NY2keIYiuRWur0APYLNAp16vohS06K9Okvci
EATzECWWZqh61G2n0pn/F7YIFpjan7FRUMdeieIAiiiAdrZCSGn+CNbPGJ511PUw
78UN5Vzl/OCFMfrJqc8hW4+0UpqjbGxBLM1HeVS4BBf3f33w1xQLhRUeC+473UnX
FUSbrbuoJp5Otdf9A7h5mA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org