Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/236a9c5a716c5e5bf929d6d6140003f85216bfac.roa
File:                     236a9c5a716c5e5bf929d6d6140003f85216bfac.roa (raw, json)
Hash identifier:          sPvP4Em4znFb79fTATRWvyk3bkkTPtqJ8l1aX6WYcFE=
Subject key identifier:   79:71:BB:D9:E6:C5:7D:BE:1A:A0:B1:77:46:7E:CA:54:A2:DA:09:3C
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       232410
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/236a9c5a716c5e5bf929d6d6140003f85216bfac.roa
Signing time:             Wed 02 Aug 2023 18:09:52 +0000
ROA not before:           Tue 01 Aug 2023 18:09:50 +0000
ROA not after:            Sat 02 Aug 2025 18:09:50 +0000
asID:                     263210
IP address blocks:        179.51.96.0/19 maxlen: 24
                          181.225.80.0/20 maxlen: 24
                          2803:6700::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302992 (0x232410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Aug  1 18:09:50 2023 GMT
            Not After : Aug  2 18:09:50 2025 GMT
        Subject: CN=236a9c5a716c5e5bf929d6d6140003f85216bfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:7d:b5:1f:d1:cd:07:e2:58:8b:63:74:0c:
                    69:e3:01:a2:a7:af:51:e6:ef:bc:be:e5:dc:73:fd:
                    14:ca:1b:3f:0d:ab:ad:05:62:6b:a1:a5:df:dc:61:
                    5b:b2:21:1d:fc:7f:2a:56:82:74:a3:23:46:b6:9e:
                    e1:07:08:4a:fe:a6:74:20:70:a1:95:80:ba:28:f4:
                    06:b1:06:c0:79:c7:02:dc:a1:62:60:ef:c0:6f:bf:
                    fb:d9:6f:d8:ed:c0:7d:d3:33:43:23:2b:54:13:88:
                    a7:4f:80:f0:c7:33:46:98:0e:bb:df:50:b6:ef:5c:
                    c1:c2:54:36:85:1c:8d:72:29:a2:89:f9:48:aa:2b:
                    b1:ea:13:9d:dc:00:4a:15:7d:25:a1:e3:10:d1:f6:
                    b6:5c:03:3c:44:d1:84:c8:a1:94:74:93:48:9a:e2:
                    84:6e:d5:13:94:14:9d:ae:7a:e3:c1:4a:4a:3c:d5:
                    94:a5:1b:c1:5d:a3:5b:3d:d1:db:81:a1:f7:a2:57:
                    55:79:c4:c4:0a:e2:8f:f4:f7:fb:7f:78:e6:74:85:
                    fa:66:f0:b8:4f:c9:9f:15:cf:45:80:ad:bb:e4:eb:
                    33:17:bd:69:79:e3:2e:a8:e5:20:3e:5d:16:03:e2:
                    7c:c4:5f:3a:5e:f1:84:25:b7:f0:a4:6d:69:a8:2b:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:BB:D9:E6:C5:7D:BE:1A:A0:B1:77:46:7E:CA:54:A2:DA:09:3C
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/236a9c5a716c5e5bf929d6d6140003f85216bfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.96.0/19
                  181.225.80.0/20
                IPv6:
                  2803:6700::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:53:2f:2d:f9:50:41:31:3e:62:66:9d:30:85:8a:a1:f3:
         40:95:9a:14:b5:35:61:0f:eb:1a:cd:65:cb:95:8c:7a:05:9b:
         fc:dd:d4:fa:b8:3d:d8:48:29:67:3d:34:93:5f:c0:12:dd:6f:
         ea:e2:f5:b7:97:e7:63:b9:80:4e:bd:d2:12:2d:1b:39:10:02:
         c0:b5:db:a9:3a:8a:e3:08:99:e9:14:cc:16:2e:27:ff:e9:f4:
         95:0f:ab:62:a7:e4:bb:98:6d:c2:91:47:c4:e7:53:04:e2:c3:
         a9:41:9f:5e:8a:a5:8b:c1:a6:56:d7:11:8e:6c:5a:65:8e:0d:
         9d:69:4e:68:89:2e:8c:a0:8a:97:7c:75:de:81:ed:a6:43:0b:
         dd:10:36:29:00:10:bb:ea:d2:c5:88:0d:ac:81:d4:ce:2b:aa:
         f9:30:21:94:07:1e:a3:e0:35:69:35:cb:53:ef:a0:75:07:56:
         9f:a5:1f:cd:0e:ef:21:d7:8b:f5:76:d7:df:3a:9e:62:99:7e:
         cb:c2:37:6a:0c:f9:49:a6:b1:d8:6e:ae:a2:82:30:d6:bc:53:
         69:b7:80:ed:93:5b:27:48:8f:a1:3e:f2:68:d7:51:d5:53:a7:
         2b:36:3d:69:50:f0:57:47:ca:40:66:5e:0a:a0:3e:26:0f:32:
         90:fb:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org