Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/4ee087d39bf9c38c6b6bf17a4b6cea3965cdbcae.roa
File:                     4ee087d39bf9c38c6b6bf17a4b6cea3965cdbcae.roa (raw, json)
Hash identifier:          h2DJ90IZlmqlN4rTH/WZHJiIH7jjU3nZfohG+tuQtMc=
Subject key identifier:   E5:CC:87:9A:A2:A3:95:CA:29:9B:F2:DC:B9:85:76:70:98:A1:98:E2
Certificate issuer:       /CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
Certificate serial:       1CDC82
Authority key identifier: 19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/4ee087d39bf9c38c6b6bf17a4b6cea3965cdbcae.roa
Signing time:             Mon 11 Dec 2023 21:41:04 +0000
ROA not before:           Mon 11 Dec 2023 21:41:04 +0000
ROA not after:            Thu 11 Dec 2025 21:41:04 +0000
asID:                     270095
IP address blocks:        179.51.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891458 (0x1cdc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
        Validity
            Not Before: Dec 11 21:41:04 2023 GMT
            Not After : Dec 11 21:41:04 2025 GMT
        Subject: CN=4ee087d39bf9c38c6b6bf17a4b6cea3965cdbcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:be:6d:2d:e6:4c:83:0a:e9:c1:45:bf:f0:
                    45:18:fa:6e:11:97:f7:97:32:66:77:bb:76:30:d7:
                    a0:e2:75:bf:a0:8a:99:94:4c:1b:95:57:76:d6:9c:
                    32:6f:23:47:e5:ad:e6:a2:cf:5d:98:fd:52:5f:e0:
                    95:e8:27:48:89:ec:a9:df:7a:59:40:d7:fe:21:e0:
                    86:c8:9e:e8:94:5a:a9:8d:d8:89:bb:fc:8f:7a:df:
                    d1:d7:ec:c6:20:72:e0:20:b5:b5:64:71:e4:f3:c4:
                    e8:d3:08:78:30:6d:77:3a:7c:56:16:c2:b7:6a:1b:
                    72:0f:dd:a8:58:1c:0a:c1:62:9e:cc:44:87:3b:73:
                    5d:cb:75:8e:82:59:cb:f2:f6:28:96:e9:0f:67:7d:
                    ba:be:f2:b1:bd:09:98:29:83:f4:ab:33:84:8a:24:
                    38:c6:37:d8:c0:2f:77:85:9d:14:e5:12:46:3c:ca:
                    d2:e5:d4:67:57:dd:03:cc:c7:b6:77:df:da:66:10:
                    17:13:4a:5d:9c:10:d4:93:ad:44:c2:df:6c:d8:f1:
                    f2:e1:cc:ed:39:24:77:b5:1d:1e:76:dd:ad:ee:87:
                    a8:39:ec:19:b2:3b:c2:e0:af:8b:0e:28:fe:43:8a:
                    94:3d:f2:da:66:36:25:61:97:56:82:44:56:2f:46:
                    21:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:87:9A:A2:A3:95:CA:29:9B:F2:DC:B9:85:76:70:98:A1:98:E2
            X509v3 Authority Key Identifier:
                keyid:19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/4ee087d39bf9c38c6b6bf17a4b6cea3965cdbcae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:31:bc:dc:ac:25:53:0c:f1:b8:d0:f3:9d:05:8f:95:09:
         d6:34:53:57:7a:2e:74:7a:a8:ac:ab:91:dc:8a:52:1f:fa:d8:
         f0:c2:54:b6:ff:6a:a5:c0:c1:0b:46:b0:70:8e:f7:12:f5:0f:
         82:ee:33:40:f7:77:68:fb:15:c4:5a:c6:44:e9:45:8f:ee:20:
         8c:53:20:22:9f:97:50:e7:4d:0a:a8:6c:1b:c3:50:49:81:be:
         77:36:4d:f0:c5:12:71:e7:cd:89:c7:4a:10:10:89:96:ba:d4:
         97:cd:9a:29:38:ab:59:f5:5a:78:65:f0:c8:a8:b5:a0:fb:88:
         9e:4c:42:a7:76:df:69:45:af:69:5d:c7:09:b2:b1:b1:00:80:
         06:75:36:33:bf:7d:c7:85:ee:2e:22:39:87:8a:9c:5d:55:cd:
         e1:47:41:51:db:68:df:d3:1c:e4:b0:5e:e7:77:94:cf:8f:f8:
         ad:3d:e7:b7:67:87:2a:97:7f:b5:49:c5:bf:e7:0a:c5:06:63:
         d7:77:3e:2a:fe:fd:cb:90:f6:5f:a8:66:69:86:05:af:90:e5:
         bf:18:5e:10:01:d1:e7:a1:b5:2f:85:e4:00:11:6f:a9:b5:05:
         eb:b4:b8:55:cd:2f:9e:9f:7b:9a:63:55:c4:54:de:61:d4:8f:
         0c:96:a8:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHNyCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZGFmZDVjZDQ0ZTg5YTdlOTQ0MzFiNTU5YmIxNmJjYmNhM2MzZTQwHhcNMjMxMjEx
MjE0MTA0WhcNMjUxMjExMjE0MTA0WjAzMTEwLwYDVQQDEyg0ZWUwODdkMzliZjlj
MzhjNmI2YmYxN2E0YjZjZWEzOTY1Y2RiY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmu6+bS3mTIMK6cFFv/BFGPpuEZf3lzJmd7t2MNeg4nW/oIqZ
lEwblVd21pwybyNH5a3mos9dmP1SX+CV6CdIieyp33pZQNf+IeCGyJ7olFqpjdiJ
u/yPet/R1+zGIHLgILW1ZHHk88To0wh4MG13OnxWFsK3ahtyD92oWBwKwWKezESH
O3Ndy3WOglnL8vYolukPZ326vvKxvQmYKYP0qzOEiiQ4xjfYwC93hZ0U5RJGPMrS
5dRnV90DzMe2d9/aZhAXE0pdnBDUk61Ewt9s2PHy4cztOSR3tR0edt2t7oeoOewZ
sjvC4K+LDij+Q4qUPfLaZjYlYZdWgkRWL0YhvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOXMh5qio5XKKZvy3LmFdnCYoZjiMB8GA1UdIwQYMBaAFBmVxXoVSmEI5qRw
ImUqgT8Nr2DGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBkYWZk
NWNkNDRlODlhN2U5NDQzMWI1NTliYjE2YmNiY2EzYzNlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmUwOTlhYjUtMjYzMS00NjQ0LTkxN2UtMTM3MGQy
MTM0ODA3LzRlZTA4N2QzOWJmOWMzOGM2YjZiZjE3YTRiNmNlYTM5NjVjZGJjYWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZTA5OWFiNS0yNjMxLTQ2NDQtOTE3ZS0xMzcw
ZDIxMzQ4MDcvYjBkYWZkNWNkNDRlODlhN2U5NDQzMWI1NTliYjE2YmNiY2EzYzNl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMziDANBgkqhkiG9w0BAQsFAAOCAQEAIeIxvNysJVMM8bjQ
850Fj5UJ1jRTV3oudHqorKuR3IpSH/rY8MJUtv9qpcDBC0awcI73EvUPgu4zQPd3
aPsVxFrGROlFj+4gjFMgIp+XUOdNCqhsG8NQSYG+dzZN8MUScefNicdKEBCJlrrU
l82aKTirWfVaeGXwyKi1oPuInkxCp3bfaUWvaV3HCbKxsQCABnU2M799x4XuLiI5
h4qcXVXN4UdBUdto39Mc5LBe53eUz4/4rT3nt2eHKpd/tUnFv+cKxQZj13c+Kv79
y5D2X6hmaYYFr5DlvxheEAHR56G1L4XkABFvqbUF67S4Vc0vnp97mmNVxFTeYdSP
DJaoaQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org