Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/95c8e4f4e9a7ea832355f917e343f399ef88a699.roa
File:                     95c8e4f4e9a7ea832355f917e343f399ef88a699.roa (raw, json)
Hash identifier:          6btcj0oFmb626cKqQkpmoN6zGrgUbIUQ0oxc403ukz8=
Subject key identifier:   32:29:73:19:50:21:03:22:7C:68:F1:42:E0:46:43:EC:C1:B9:5E:16
Certificate issuer:       /CN=c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c
Certificate serial:       0CE79E
Authority key identifier: EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/95c8e4f4e9a7ea832355f917e343f399ef88a699.roa
Signing time:             Wed 24 Mar 2021 14:47:09 +0000
ROA not before:           Wed 24 Mar 2021 14:47:09 +0000
ROA not after:            Tue 24 Mar 2026 14:47:09 +0000
asID:                     32934
IP address blocks:        179.60.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845726 (0xce79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c
        Validity
            Not Before: Mar 24 14:47:09 2021 GMT
            Not After : Mar 24 14:47:09 2026 GMT
        Subject: CN=95c8e4f4e9a7ea832355f917e343f399ef88a699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:90:f8:12:98:26:f7:98:08:0f:8c:e6:85:
                    27:9e:31:99:b3:4c:b1:29:b0:5f:03:87:9f:d1:cc:
                    fd:59:e2:60:4c:77:9d:64:7a:9d:c7:aa:86:be:5c:
                    c5:ee:de:fe:25:6e:cd:54:03:05:5c:5b:fd:84:93:
                    27:49:5c:d8:82:00:ee:89:ca:20:b6:10:1c:7e:6e:
                    9d:f3:82:b3:3b:8c:1c:8a:16:3a:c9:d2:63:aa:3b:
                    b8:e2:73:79:14:e7:ca:a1:c1:2a:d1:29:21:09:c1:
                    bb:f7:ee:b9:7c:57:76:b2:67:bb:b2:a5:6c:4c:99:
                    f1:21:9c:e1:29:4b:5c:d9:ce:05:44:bf:59:0d:86:
                    88:f6:e7:a0:e3:00:0b:35:b4:88:ac:96:d3:cc:45:
                    c5:1a:15:59:4c:3d:1f:5b:8f:25:09:36:d3:53:1a:
                    81:89:39:5a:dd:89:fa:9f:d6:30:7b:c7:fa:78:6e:
                    52:1f:1d:e4:af:57:2e:47:42:8a:37:ef:90:2d:86:
                    68:ff:68:0f:42:b3:37:00:89:dc:03:6e:af:a7:03:
                    87:41:fc:24:e1:fc:cf:11:65:05:7c:0a:58:ab:6e:
                    ff:75:b1:dd:0c:f0:ca:3c:43:a2:88:50:35:ff:fd:
                    20:b6:ec:21:67:4b:7a:d6:73:16:b5:12:e0:54:07:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:73:19:50:21:03:22:7C:68:F1:42:E0:46:43:EC:C1:B9:5E:16
            X509v3 Authority Key Identifier:
                keyid:EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/95c8e4f4e9a7ea832355f917e343f399ef88a699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:09:ff:a4:e5:bc:22:ab:1e:d6:98:48:ad:1e:70:05:f3:
         66:65:e1:f9:2b:3b:99:3f:f4:fb:ba:12:c6:3b:0a:58:48:ab:
         c6:53:01:bc:44:3e:3b:79:3e:1e:88:a5:24:81:59:d6:ee:43:
         b6:ae:55:f9:8e:28:ed:c5:40:60:9a:03:62:3c:ab:53:d5:82:
         48:2c:b7:4c:e2:f9:85:1b:b2:27:8c:cc:e4:18:d2:5e:8d:6c:
         fa:db:73:80:d5:05:d5:93:4d:d1:ef:af:ea:47:9a:e2:ca:b7:
         08:4e:58:b3:12:01:b8:13:a6:08:b7:41:f8:0d:15:80:31:e2:
         26:bf:1f:0c:ab:0a:89:fc:67:24:2d:1c:8b:44:58:ec:50:c0:
         b4:fd:fb:f8:67:2b:81:56:86:96:85:6d:29:66:6a:9e:34:29:
         12:d8:cf:59:93:4f:d2:83:89:cd:55:e5:ec:7e:ca:6f:4c:e8:
         ee:a9:96:9e:4c:83:43:f3:57:24:d6:49:9c:d4:d1:66:61:b1:
         9d:fa:d6:e9:df:f7:4a:df:62:17:3c:db:ec:c1:7a:a7:f6:0c:
         c2:dc:df:fa:0f:b9:65:10:ff:df:22:54:b4:aa:0c:35:b6:a0:
         5c:ba:4e:4d:c6:d6:23:8d:27:44:a6:36:02:20:bf:6c:03:fe:
         04:8f:66:41
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDOeeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
MmMxZjdkOGVmMmEzZjQ5YjM4OWFiNWI4OWE4MjI4ZTM4ZTc0MmMwHhcNMjEwMzI0
MTQ0NzA5WhcNMjYwMzI0MTQ0NzA5WjAzMTEwLwYDVQQDEyg5NWM4ZTRmNGU5YTdl
YTgzMjM1NWY5MTdlMzQzZjM5OWVmODhhNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAizGQ+BKYJveYCA+M5oUnnjGZs0yxKbBfA4ef0cz9WeJgTHed
ZHqdx6qGvlzF7t7+JW7NVAMFXFv9hJMnSVzYggDuicogthAcfm6d84KzO4wcihY6
ydJjqju44nN5FOfKocEq0SkhCcG79+65fFd2sme7sqVsTJnxIZzhKUtc2c4FRL9Z
DYaI9ueg4wALNbSIrJbTzEXFGhVZTD0fW48lCTbTUxqBiTla3Yn6n9Ywe8f6eG5S
Hx3kr1cuR0KKN++QLYZo/2gPQrM3AIncA26vpwOHQfwk4fzPEWUFfApYq27/dbHd
DPDKPEOiiFA1//0gtuwhZ0t61nMWtRLgVAdp/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDIpcxlQIQMifGjxQuBGQ+zBuV4WMB8GA1UdIwQYMBaAFO/AJLa614Yuvcny
Xmc7RhrUstYGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzUyYzFm
N2Q4ZWYyYTNmNDliMzg5YWI1Yjg5YTgyMjhlMzhlNzQyYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmI5YzVkMGMtYmFiOC00YTQ2LTg5YzMtNDJlYTNm
ZWFjNTY3Lzk1YzhlNGY0ZTlhN2VhODMyMzU1ZjkxN2UzNDNmMzk5ZWY4OGE2OTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YjljNWQwYy1iYWI4LTRhNDYtODljMy00MmVh
M2ZlYWM1NjcvYzUyYzFmN2Q4ZWYyYTNmNDliMzg5YWI1Yjg5YTgyMjhlMzhlNzQy
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALM8wDANBgkqhkiG9w0BAQsFAAOCAQEAP6cJ/6TlvCKrHtaY
SK0ecAXzZmXh+Ss7mT/0+7oSxjsKWEirxlMBvEQ+O3k+HoilJIFZ1u5Dtq5V+Y4o
7cVAYJoDYjyrU9WCSCy3TOL5hRuyJ4zM5BjSXo1s+ttzgNUF1ZNN0e+v6kea4sq3
CE5YsxIBuBOmCLdB+A0VgDHiJr8fDKsKifxnJC0ci0RY7FDAtP37+GcrgVaGloVt
KWZqnjQpEtjPWZNP0oOJzVXl7H7Kb0zo7qmWnkyDQ/NXJNZJnNTRZmGxnfrW6d/3
St9iFzzb7MF6p/YMwtzf+g+5ZRD/3yJUtKoMNbagXLpOTcbWI40nRKY2AiC/bAP+
BI9mQQ==
-----END CERTIFICATE-----
Generated at Thu Jan 18 16:02:54 2024 by rpki-client on console-fra.rpki-client.org