Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/21ae84f917ef731167f4b292635d1ec4b922c733.roa
File:                     21ae84f917ef731167f4b292635d1ec4b922c733.roa (raw, json)
Hash identifier:          BK+ISb8euPUSPd8/Gp/0O+nlC0bPdDTCSznZ0hJJ8xw=
Subject key identifier:   BC:4E:C4:14:0C:66:70:C2:69:EA:C4:62:09:E5:06:D0:30:03:E7:FF
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       0377
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/21ae84f917ef731167f4b292635d1ec4b922c733.roa
Signing time:             Thu 10 Feb 2022 20:55:16 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     270047
IP address blocks:        179.0.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=21ae84f917ef731167f4b292635d1ec4b922c733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:b5:e5:b4:1c:42:e1:1a:6e:db:82:4a:f6:
                    5d:57:ac:89:b3:f2:b8:cf:63:75:e3:a0:9e:13:3a:
                    bc:f5:a7:4a:ae:60:74:de:a7:97:cf:eb:ff:bd:76:
                    2a:33:f8:34:74:7c:92:ab:d8:fc:63:12:23:02:43:
                    d6:74:68:14:b2:7d:40:5a:66:84:2d:24:73:55:01:
                    1a:4d:7e:aa:db:4b:ad:a6:51:98:a0:e0:fe:c7:af:
                    97:10:2d:18:1d:8e:dc:5f:f1:e6:9e:8a:c2:a7:fc:
                    a4:c0:1d:7c:4b:a4:81:1e:45:3c:fa:52:0f:b8:10:
                    98:58:d2:a6:1c:7f:f6:92:18:cf:a6:f5:0c:02:8e:
                    67:b7:65:20:80:f1:6a:56:41:ff:b9:8b:a3:ef:9f:
                    ea:35:e7:b4:0f:9d:a3:26:83:96:1d:b0:45:ca:48:
                    b8:56:ce:b9:45:8f:c5:08:63:c6:6f:0c:ef:1b:21:
                    9d:22:28:a4:9b:49:f5:70:d6:d5:26:30:58:f4:69:
                    dd:46:17:6b:ac:e2:b7:4f:8f:3c:0e:df:be:3a:e6:
                    42:d4:57:a8:0f:45:73:02:79:64:c1:99:46:7c:19:
                    b1:c4:bd:99:b7:da:42:6a:a4:e6:3b:df:7b:29:c5:
                    c9:ec:4c:ca:d2:ab:1c:b2:1c:44:f2:b2:87:2f:e6:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4E:C4:14:0C:66:70:C2:69:EA:C4:62:09:E5:06:D0:30:03:E7:FF
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/21ae84f917ef731167f4b292635d1ec4b922c733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:3c:d5:ff:5e:e6:4e:68:f1:21:a8:27:0e:b0:39:99:4f:
         be:95:43:99:56:13:63:39:3d:34:24:de:93:50:ae:f7:7c:65:
         91:2d:03:2a:f1:ba:79:93:24:59:49:fa:01:d2:65:c3:f6:8f:
         cc:01:a9:61:46:4d:ab:cd:f8:86:8b:4b:04:46:88:a2:10:42:
         30:9e:8b:08:69:cb:0b:8e:74:04:7c:05:13:dc:29:84:fb:e6:
         1b:bd:d8:68:16:d7:d9:39:d2:da:90:e3:07:80:4e:e3:5b:ac:
         9f:66:cb:85:d0:d2:74:38:7f:09:61:99:b6:39:7d:5d:6f:47:
         9f:7a:5e:c1:5a:8c:39:9f:57:dc:82:37:29:6f:a4:70:cb:03:
         e0:fe:33:60:b9:20:e1:1f:3f:b2:c9:44:91:59:2e:6c:c9:38:
         17:49:12:b8:76:08:a5:a4:34:c1:9d:81:03:d2:ff:c8:98:00:
         ba:b4:a0:2e:fd:e6:e5:b1:13:a2:bf:fe:1e:56:52:76:26:75:
         86:e4:90:4f:4c:38:7b:b9:10:ed:cf:71:82:14:32:d0:52:2d:
         ec:11:35:96:96:07:42:61:bd:3e:61:6a:83:b8:41:96:46:78:
         b9:45:a4:91:88:8f:8f:87:93:b1:b9:67:a1:a1:cf:fe:fe:fd:
         0f:bd:4e:fb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTIz
YzIwZGRkYTZiZWQwMzA2NjMzOGRmZDU5MDNlMzQ5NDgwODA1MjAeFw0yMjAyMTAw
MzAwMDBaFw0yNDAyMTAwMzAwMDBaMDMxMTAvBgNVBAMTKDIxYWU4NGY5MTdlZjcz
MTE2N2Y0YjI5MjYzNWQxZWM0YjkyMmM3MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw0bXltBxC4Rpu24JK9l1XrImz8rjPY3XjoJ4TOrz1p0quYHTe
p5fP6/+9dioz+DR0fJKr2PxjEiMCQ9Z0aBSyfUBaZoQtJHNVARpNfqrbS62mUZig
4P7Hr5cQLRgdjtxf8eaeisKn/KTAHXxLpIEeRTz6Ug+4EJhY0qYcf/aSGM+m9QwC
jme3ZSCA8WpWQf+5i6Pvn+o157QPnaMmg5YdsEXKSLhWzrlFj8UIY8ZvDO8bIZ0i
KKSbSfVw1tUmMFj0ad1GF2us4rdPjzwO37465kLUV6gPRXMCeWTBmUZ8GbHEvZm3
2kJqpOY733spxcnsTMrSqxyyHETysocv5lktAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUvE7EFAxmcMJp6sRiCeUG0DAD5/8wHwYDVR0jBBgwFoAUIHcYnp65vXCcX7eT
gG7n1KK/GHcwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lMjNjMjBk
ZGRhNmJlZDAzMDY2MzM4ZGZkNTkwM2UzNDk0ODA4MDUyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zYWViZDY5MS1mOTVkLTRhZWItYmNmMy1kYjY3NDE4
NDYyYjcvMjFhZTg0ZjkxN2VmNzMxMTY3ZjRiMjkyNjM1ZDFlYzRiOTIyYzczMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNhZWJkNjkxLWY5NWQtNGFlYi1iY2YzLWRiNjc0
MTg0NjJiNy9lMjNjMjBkZGRhNmJlZDAzMDY2MzM4ZGZkNTkwM2UzNDk0ODA4MDUy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAswC4MA0GCSqGSIb3DQEBCwUAA4IBAQAm2DzV/17mTmjxIagn
DrA5mU++lUOZVhNjOT00JN6TUK73fGWRLQMq8bp5kyRZSfoB0mXD9o/MAalhRk2r
zfiGi0sERoiiEEIwnosIacsLjnQEfAUT3CmE++YbvdhoFtfZOdLakOMHgE7jW6yf
ZsuF0NJ0OH8JYZm2OX1db0efel7BWow5n1fcgjcpb6RwywPg/jNguSDhHz+yyUSR
WS5syTgXSRK4dgilpDTBnYED0v/ImAC6tKAu/eblsROiv/4eVlJ2JnWG5JBPTDh7
uRDtz3GCFDLQUi3sETWWlgdCYb0+YWqDuEGWRni5RaSRiI+Ph5OxuWehoc/+/v0P
vU77
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org