Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f38de4c78aad05fb3ede166cdb3bd2695d9ae0c.roa
File:                     7f38de4c78aad05fb3ede166cdb3bd2695d9ae0c.roa (raw, json)
Hash identifier:          XMxDek5GSdU67uqcXYlXEunJqYaeyyLflPmVBv9edYo=
Subject key identifier:   B2:6C:8C:22:D8:2C:C3:97:3A:B5:D9:31:D2:D9:3E:18:3E:FB:28:6F
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       04C62A
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f38de4c78aad05fb3ede166cdb3bd2695d9ae0c.roa
Signing time:             Wed 13 Jul 2022 11:43:09 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Thu 04 Jul 2024 03:00:00 +0000
asID:                     52444
IP address blocks:        179.40.69.0/24 maxlen: 24
                          179.40.70.0/24 maxlen: 24
                          186.38.8.0/24 maxlen: 24
                          186.38.9.0/24 maxlen: 24
                          186.38.42.0/24 maxlen: 24
                          201.251.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312874 (0x4c62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2024 GMT
        Subject: CN=7f38de4c78aad05fb3ede166cdb3bd2695d9ae0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:f3:d9:7b:74:4b:18:86:27:ac:ef:0e:95:
                    53:6e:62:d5:70:a7:8b:dd:18:ed:64:54:3c:79:45:
                    a2:0b:86:f6:b7:3e:35:49:a2:81:d7:c5:7e:3f:ab:
                    10:cb:7e:e6:fc:c4:c8:92:65:e2:fa:80:73:61:e4:
                    1a:44:a9:da:a8:79:1d:02:b4:29:77:bf:51:a2:02:
                    1d:9d:c1:e2:18:38:d8:51:43:d6:92:61:56:a7:ae:
                    1a:09:d5:f8:46:c0:19:14:41:e3:43:72:20:6d:60:
                    b7:55:0d:19:bd:d9:3b:1c:1d:5f:b6:06:d0:d8:0b:
                    6a:18:f4:2d:c4:21:ba:76:53:24:2a:43:3d:4a:99:
                    ac:43:80:fb:8a:65:cb:13:82:03:dd:b9:1e:be:f3:
                    6d:31:7a:c4:b5:b3:c3:67:3a:05:e3:85:7c:b6:6b:
                    90:b5:35:23:4f:34:f7:ed:32:93:62:df:6a:be:62:
                    a3:61:2d:b1:72:02:c6:86:38:5b:de:43:39:11:df:
                    ed:7f:a6:ca:41:0d:7a:15:37:fc:77:b5:9c:bd:96:
                    69:44:1a:99:30:06:92:19:61:f7:b0:19:bc:c2:36:
                    96:9e:48:ed:bb:5c:0a:17:b3:b3:22:51:7e:e8:3a:
                    cc:c2:89:68:c9:21:6d:f3:b3:24:4b:2a:32:8e:ff:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6C:8C:22:D8:2C:C3:97:3A:B5:D9:31:D2:D9:3E:18:3E:FB:28:6F
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/7f38de4c78aad05fb3ede166cdb3bd2695d9ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.69.0-179.40.70.255
                  186.38.8.0/23
                  186.38.42.0/24
                  201.251.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:30:34:b5:94:12:c6:7e:ed:11:9e:1d:cf:67:e4:1f:55:
         fc:75:35:e8:57:0a:e8:5c:bd:6a:0d:d6:24:33:15:12:a5:7c:
         f4:d4:d6:78:bc:15:34:b5:00:b2:7f:a3:ed:4b:13:7b:31:e2:
         cf:70:2e:92:e2:1b:5a:03:94:4e:aa:58:91:84:cf:b2:17:cb:
         1d:ce:14:74:8f:ed:07:fb:39:e7:ad:e2:10:e4:cf:27:86:07:
         f1:b7:a2:91:c7:dd:5e:6f:02:a3:29:72:96:89:3a:9d:69:08:
         9a:70:c5:dd:78:81:45:18:65:cb:a4:64:ba:a2:52:7b:29:db:
         4c:d5:73:40:a3:69:fa:7a:03:e1:11:e7:39:c5:42:7b:14:6a:
         d6:a5:5a:1c:f1:de:83:06:f1:83:c8:0b:98:42:2e:01:b1:c1:
         4b:5c:50:c0:0d:9f:36:01:99:ee:04:a9:3a:7f:b0:fe:99:43:
         e8:d1:82:8a:96:ec:41:5b:1e:2c:a6:5c:5a:d9:e4:87:64:23:
         5e:55:6b:22:09:58:04:4d:6a:5d:de:22:32:ec:f5:6b:fc:93:
         8b:0f:94:a0:43:b8:b3:f3:89:21:46:b5:9c:92:d0:06:f8:66:
         ef:b7:83:55:00:0a:2f:11:03:ba:e9:1f:04:0f:09:80:dd:b8:
         63:f1:0c:25
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDBMYqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
N2Q5ZGQ5NWVjZmQ2NzExM2RkY2Q0Y2ZmNGNlZDVkODE3N2NmNjUwHhcNMjIwNzA0
MDMwMDAwWhcNMjQwNzA0MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZjM4ZGU0Yzc4YWFk
MDVmYjNlZGUxNjZjZGIzYmQyNjk1ZDlhZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh07z2Xt0SxiGJ6zvDpVTbmLVcKeL3RjtZFQ8eUWiC4b2tz41
SaKB18V+P6sQy37m/MTIkmXi+oBzYeQaRKnaqHkdArQpd79RogIdncHiGDjYUUPW
kmFWp64aCdX4RsAZFEHjQ3IgbWC3VQ0Zvdk7HB1ftgbQ2AtqGPQtxCG6dlMkKkM9
SpmsQ4D7imXLE4ID3bkevvNtMXrEtbPDZzoF44V8tmuQtTUjTzT37TKTYt9qvmKj
YS2xcgLGhjhb3kM5Ed/tf6bKQQ16FTf8d7WcvZZpRBqZMAaSGWH3sBm8wjaWnkjt
u1wKF7OzIlF+6DrMwoloySFt87MkSyoyjv+J9wIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFLJsjCLYLMOXOrXZMdLZPhg++yhvMB8GA1UdIwQYMBaAFFiL0np42Y1jk4OV
6eGAfXXGE9EdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjU3ZDlk
ZDk1ZWNmZDY3MTEzZGRjZDRjZmY0Y2VkNWQ4MTc3Y2Y2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzdmMzhkZTRjNzhhYWQwNWZiM2VkZTE2NmNkYjNiZDI2OTVkOWFlMGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvNjU3ZDlkZDk1ZWNmZDY3MTEzZGRjZDRjZmY0Y2VkNWQ4MTc3Y2Y2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIDAMAwQAsyhFAwQAsyhGAwQBuiYIAwQAuiYqAwQAyfuoMA0GCSqG
SIb3DQEBCwUAA4IBAQAmLDA0tZQSxn7tEZ4dz2fkH1X8dTXoVwroXL1qDdYkMxUS
pXz01NZ4vBU0tQCyf6PtSxN7MeLPcC6S4htaA5ROqliRhM+yF8sdzhR0j+0H+znn
reIQ5M8nhgfxt6KRx91ebwKjKXKWiTqdaQiacMXdeIFFGGXLpGS6olJ7KdtM1XNA
o2n6egPhEec5xUJ7FGrWpVoc8d6DBvGDyAuYQi4BscFLXFDADZ82AZnuBKk6f7D+
mUPo0YKKluxBWx4splxa2eSHZCNeVWsiCVgETWpd3iIy7PVr/JOLD5SgQ7iz84kh
RrWcktAG+Gbvt4NVAAovEQO66R8EDwmA3bhj8Qwl
-----END CERTIFICATE-----
Generated at Tue Oct 24 16:27:38 2023 by rpki-client on console-ams.rpki-client.org