Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ef3da12191b67430dfca26db2a81de39c0cfa521.roa
File:                     ef3da12191b67430dfca26db2a81de39c0cfa521.roa (raw, json)
Hash identifier:          0rRE+LsDsfYO+d3pDW3wh9XR+rjrGZxsUQMl5ydioK4=
Subject key identifier:   B8:59:E3:A7:5E:34:58:9B:34:6C:0E:A7:E8:B2:5C:DF:4C:39:11:D7
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0B5970
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ef3da12191b67430dfca26db2a81de39c0cfa521.roa
Signing time:             Wed 14 Jul 2021 07:11:59 +0000
ROA not before:           Wed 14 Jul 2021 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     262287
IP address blocks:        179.61.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743792 (0xb5970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jul 14 03:00:00 2021 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=ef3da12191b67430dfca26db2a81de39c0cfa521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:51:e2:00:c9:9f:a6:ff:a7:2b:3c:a7:e0:
                    c8:83:91:9c:42:0a:b2:90:7e:17:2e:8e:54:87:0c:
                    cf:df:f0:f0:28:38:bf:aa:75:ba:0d:70:5b:ab:d5:
                    80:04:05:6f:15:66:53:ae:73:4a:26:c1:3d:41:c0:
                    91:3d:aa:9c:ca:d2:b4:c4:c3:8a:9c:f4:88:94:5a:
                    34:f7:c9:38:c1:bf:e6:c1:d8:88:93:68:ed:25:2b:
                    35:5e:ca:58:96:9d:6b:44:2e:d5:13:fc:40:29:bf:
                    b0:0a:82:ff:44:f5:50:4a:17:e6:69:e9:66:8b:e4:
                    37:0e:ed:1f:2e:d9:70:31:93:cd:23:8a:48:32:1d:
                    33:42:6a:7a:aa:b7:f2:66:f0:7f:ac:9b:65:26:09:
                    6b:2e:84:7f:4b:7c:56:9f:ca:e7:52:04:25:b1:e5:
                    a3:39:ef:f4:6f:6a:bd:a2:06:ea:26:c7:da:ab:97:
                    55:bb:a9:40:e7:74:64:6f:53:f8:18:69:b4:0d:f5:
                    78:c7:ac:db:cb:38:65:09:60:1a:ab:fb:de:61:f6:
                    ea:c9:13:ac:5e:38:b4:70:5b:e1:45:2a:cc:48:84:
                    3f:3f:20:a9:13:a8:37:4d:15:66:6d:11:a2:41:a4:
                    a9:6f:09:ab:5b:77:0f:d1:32:c6:c6:05:13:3f:e4:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:59:E3:A7:5E:34:58:9B:34:6C:0E:A7:E8:B2:5C:DF:4C:39:11:D7
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ef3da12191b67430dfca26db2a81de39c0cfa521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:61:ae:65:11:00:0a:15:51:c0:ce:d4:3f:02:24:a5:5e:72:
         25:90:3a:f3:0b:65:3c:c3:48:56:37:40:17:85:b6:9b:54:1a:
         5d:b6:86:83:3c:74:50:1c:bc:e9:4a:37:55:66:86:f5:18:e3:
         8c:90:df:b5:9f:6a:8d:37:79:73:97:3f:56:be:93:29:b9:d2:
         21:f0:b3:81:4b:bd:ca:d7:b2:f3:bd:b6:69:1f:1c:b7:08:ce:
         dc:dd:ff:17:44:47:b4:49:e7:72:b3:9c:46:67:9f:fc:62:c1:
         bb:19:df:33:33:6b:15:a3:7a:cb:2b:99:05:9a:04:b5:0e:99:
         c6:b5:6f:f1:18:20:57:02:10:dc:13:67:6d:bc:2b:69:ad:03:
         4f:de:89:29:d8:e5:ca:b8:58:58:7f:ce:58:3c:21:a7:4c:60:
         a8:36:8c:e6:d9:6e:27:d7:ae:79:cb:56:13:c7:79:49:95:34:
         67:a8:0c:d9:f9:2e:61:9e:b0:13:b5:af:db:f6:2e:8e:a0:7f:
         58:80:fd:bd:3c:ee:ce:69:f2:5b:11:9f:8e:b9:4b:46:4f:ae:
         a7:5e:47:ff:31:ff:e5:6f:7f:d3:a2:a8:37:f0:51:1f:0e:a2:
         7b:fb:c0:e0:0a:5c:0f:54:2b:70:e2:57:c1:d1:3a:2a:f1:04:
         b3:14:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org