Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/66a6b2efc26f19e81fa6d76f7f396f415e5cbc15.roa
File:                     66a6b2efc26f19e81fa6d76f7f396f415e5cbc15.roa (raw, json)
Hash identifier:          NmywAbgtd4XavEL2MeafVw/kIfKHUY34Ws5IQ9Hk0zc=
Subject key identifier:   DB:CD:BE:6B:8D:97:C7:62:CF:71:6F:B4:D0:ED:7A:D4:64:0F:6E:34
Certificate issuer:       /CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
Certificate serial:       1F9944
Authority key identifier: 6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/66a6b2efc26f19e81fa6d76f7f396f415e5cbc15.roa
Signing time:             Fri 12 May 2023 08:30:01 +0000
ROA not before:           Thu 11 May 2023 08:30:01 +0000
ROA not after:            Sat 10 May 2025 08:30:01 +0000
asID:                     52475
IP address blocks:        179.63.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070852 (0x1f9944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
        Validity
            Not Before: May 11 08:30:01 2023 GMT
            Not After : May 10 08:30:01 2025 GMT
        Subject: CN=66a6b2efc26f19e81fa6d76f7f396f415e5cbc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:d4:3d:17:7e:e2:a8:55:52:3e:c1:01:43:
                    0a:ba:14:48:fa:c0:76:a1:7a:12:95:d3:15:cf:dd:
                    46:71:2e:9c:e3:09:5b:63:25:4f:92:db:f5:c3:41:
                    b7:ac:e4:12:8d:41:ec:a8:80:c9:df:71:59:e2:0b:
                    e0:2f:bd:0e:eb:b3:16:cf:f7:9e:8c:7b:87:64:98:
                    71:c0:01:13:a5:10:62:e6:6b:ab:f3:3a:79:77:f8:
                    41:e7:20:c4:8d:50:5f:66:d0:ea:c2:79:9b:8a:62:
                    47:b0:8a:b1:ce:6f:61:e6:de:56:06:6a:db:29:61:
                    06:93:e5:88:8b:b5:6c:e5:f9:2d:e3:f0:5f:d6:d9:
                    31:cd:f0:f3:58:47:ea:14:e6:8f:aa:a4:7d:c3:62:
                    8d:1a:39:31:72:85:7e:88:e7:8d:87:1a:ed:79:4f:
                    34:8c:b4:de:36:e2:0e:08:d7:d2:7d:41:d1:fb:7c:
                    b5:ea:97:d6:06:7a:53:17:72:5f:e8:ba:0b:2a:c9:
                    33:3f:d6:cd:f7:a7:51:15:0b:27:1b:9a:c6:be:e9:
                    8e:f4:83:4f:c5:6e:1f:b1:9d:31:2a:ea:a6:18:bb:
                    f0:6b:8a:54:05:0d:86:cf:af:a2:d5:70:97:64:49:
                    09:f7:74:4e:b8:62:b4:9b:43:06:1a:44:e1:c8:fd:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:BE:6B:8D:97:C7:62:CF:71:6F:B4:D0:ED:7A:D4:64:0F:6E:34
            X509v3 Authority Key Identifier:
                keyid:6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/66a6b2efc26f19e81fa6d76f7f396f415e5cbc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:5d:6f:b5:4b:25:04:0f:27:88:85:8f:5d:56:15:82:9e:3b:
         d6:75:66:43:1d:a9:3b:97:df:d3:fa:f4:5b:88:1e:be:28:77:
         53:7f:e9:52:03:06:37:6a:54:f1:71:43:a0:6c:13:86:20:87:
         67:8c:a4:86:eb:c2:f6:b8:31:8a:29:87:02:42:df:cb:3e:47:
         1c:af:bb:ca:7e:26:d2:b2:31:d7:68:8d:37:58:56:0b:b8:34:
         4d:8b:69:de:35:5b:25:3a:9e:b2:6a:6a:04:91:39:d9:96:c3:
         91:e0:e7:94:8f:b5:9a:b1:48:66:21:b0:f9:52:01:37:ae:ec:
         92:c3:96:72:16:72:55:3d:20:25:26:d7:98:c8:54:25:42:4a:
         dd:dd:f5:d0:22:98:9b:6e:5d:22:fe:6d:01:96:db:e9:0b:e0:
         ef:bd:24:0e:32:2f:82:be:5a:a2:c5:70:f7:4a:72:7e:57:a2:
         48:f0:57:cb:fc:f2:60:2f:99:66:3d:5d:53:c2:6b:6f:3d:c9:
         31:0f:2c:22:3c:1b:05:b0:26:69:0b:dd:7b:4c:60:9f:da:f8:
         a1:ae:d3:a2:45:13:28:77:6d:1d:56:c1:f2:58:1e:8e:e0:91:
         a4:80:53:50:fc:c4:61:a3:04:43:fc:5a:7b:83:47:79:0b:17:
         2e:33:66:ca
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH5lEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
NmI4ZjJhMzBmMWM5MTU5ZTcyOGE2MTRiM2E2Njk1YmY4OTAxNmIwHhcNMjMwNTEx
MDgzMDAxWhcNMjUwNTEwMDgzMDAxWjAzMTEwLwYDVQQDEyg2NmE2YjJlZmMyNmYx
OWU4MWZhNmQ3NmY3ZjM5NmY0MTVlNWNiYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmCPUPRd+4qhVUj7BAUMKuhRI+sB2oXoSldMVz91GcS6c4wlb
YyVPktv1w0G3rOQSjUHsqIDJ33FZ4gvgL70O67MWz/eejHuHZJhxwAETpRBi5mur
8zp5d/hB5yDEjVBfZtDqwnmbimJHsIqxzm9h5t5WBmrbKWEGk+WIi7Vs5fkt4/Bf
1tkxzfDzWEfqFOaPqqR9w2KNGjkxcoV+iOeNhxrteU80jLTeNuIOCNfSfUHR+3y1
6pfWBnpTF3Jf6LoLKskzP9bN96dRFQsnG5rGvumO9INPxW4fsZ0xKuqmGLvwa4pU
BQ2Gz6+i1XCXZEkJ93ROuGK0m0MGGkThyP1uNwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNvNvmuNl8diz3FvtNDtetRkD240MB8GA1UdIwQYMBaAFGqhII/v6/Hpsu/N
TmGN3+Jo9z6oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGY2Yjhm
MmEzMGYxYzkxNTllNzI4YTYxNGIzYTY2OTViZjg5MDE2Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzY3ZjQxNjktOTM1YS00N2FhLTljY2EtNjQ1ZTI4
NzAyN2ViLzY2YTZiMmVmYzI2ZjE5ZTgxZmE2ZDc2ZjdmMzk2ZjQxNWU1Y2JjMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjdmNDE2OS05MzVhLTQ3YWEtOWNjYS02NDVl
Mjg3MDI3ZWIvMGY2YjhmMmEzMGYxYzkxNTllNzI4YTYxNGIzYTY2OTViZjg5MDE2
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArM/8DANBgkqhkiG9w0BAQsFAAOCAQEAwF1vtUslBA8niIWP
XVYVgp471nVmQx2pO5ff0/r0W4gevih3U3/pUgMGN2pU8XFDoGwThiCHZ4ykhuvC
9rgxiimHAkLfyz5HHK+7yn4m0rIx12iNN1hWC7g0TYtp3jVbJTqesmpqBJE52ZbD
keDnlI+1mrFIZiGw+VIBN67sksOWchZyVT0gJSbXmMhUJUJK3d310CKYm25dIv5t
AZbb6Qvg770kDjIvgr5aosVw90pyfleiSPBXy/zyYC+ZZj1dU8Jrbz3JMQ8sIjwb
BbAmaQvde0xgn9r4oa7TokUTKHdtHVbB8lgejuCRpIBTUPzEYaMEQ/xae4NHeQsX
LjNmyg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org