Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa
File:                     5e36633843bde3e9feb2f74c2899b9177c31172c.roa (raw, json)
Hash identifier:          cZejwlxg7SLfV2WXkJ7eqkelNphDwebxGyQVLuB/FNU=
Subject key identifier:   96:BC:2F:1F:33:90:EF:77:DE:6C:19:E2:BF:13:FB:8E:1E:3E:F9:B4
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1BAAF7
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa
Signing time:             Thu 27 Oct 2022 20:58:24 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     64120
IP address blocks:        179.60.204.0/22 maxlen: 24
                          179.60.204.0/24 maxlen: 24
                          179.60.205.0/24 maxlen: 24
                          179.60.206.0/24 maxlen: 24
                          179.60.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813239 (0x1baaf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5e36633843bde3e9feb2f74c2899b9177c31172c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:c1:50:9e:cb:a9:c0:19:92:f5:1f:69:33:
                    4d:fe:dd:75:f0:a7:0d:6e:15:99:25:3b:73:5b:6c:
                    71:7a:f0:ca:0b:32:e0:05:69:5d:82:a8:7a:24:d7:
                    c6:5e:6b:2f:48:70:65:40:a4:8d:df:86:b8:74:6e:
                    8f:95:3e:a1:12:c6:e7:05:cd:cc:de:65:ea:1a:2f:
                    25:62:0c:4f:af:f0:1f:20:c9:61:c9:8f:83:07:3d:
                    85:5d:51:e6:75:f0:52:3f:61:40:67:0b:a9:f0:49:
                    cd:e0:1e:90:c7:64:d3:0f:24:1c:85:f4:38:e3:15:
                    38:7b:5e:b8:ee:c1:8a:c4:b4:6c:fe:0c:04:dd:48:
                    aa:ce:0a:b6:54:37:3b:d3:4d:86:df:5a:37:3b:5d:
                    f5:b5:20:84:2a:23:0d:56:c9:fb:75:2d:71:82:9a:
                    52:77:05:37:a4:13:ea:9b:17:50:e1:ee:cd:20:56:
                    2f:19:fc:31:30:37:9b:d0:df:71:0a:2c:e9:33:db:
                    72:6f:b8:38:40:06:6c:00:cc:1d:1f:b1:79:11:2f:
                    8a:f2:ea:f1:78:52:0c:7f:25:1b:5d:a1:8c:d9:f1:
                    72:89:cc:b6:ed:20:b4:7e:04:70:47:4d:3f:78:f8:
                    fa:fe:12:fd:f3:7f:a7:6b:4a:6c:77:4d:86:05:84:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BC:2F:1F:33:90:EF:77:DE:6C:19:E2:BF:13:FB:8E:1E:3E:F9:B4
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:91:b0:59:a3:0e:ae:6c:c6:78:d6:80:d9:3f:e8:fc:f3:de:
         17:4a:42:21:4d:58:85:db:4e:9e:ef:cd:43:61:3c:de:d5:77:
         be:8f:0f:1c:18:b1:34:31:bd:f8:77:3d:64:a5:7f:00:de:62:
         2c:6a:0c:9a:82:f5:35:d6:9c:d7:cb:70:cb:75:cc:32:41:c3:
         1d:71:41:d2:7c:74:3e:da:ec:e4:4c:c4:ce:67:cf:69:52:4c:
         a1:f4:d9:3a:38:92:de:eb:0f:1f:3f:de:ad:34:a9:3e:6d:44:
         15:fe:11:7e:1d:a9:d2:e2:38:fa:3d:5e:33:c8:2d:51:b7:3c:
         2b:35:c9:f1:07:da:5b:e4:df:48:e5:67:ba:7f:38:9a:70:22:
         64:4d:7e:aa:c2:5f:45:d2:6b:47:79:b2:6b:81:9f:4b:8c:d2:
         10:cb:37:be:3e:9b:a0:36:ad:3e:af:e9:fc:e8:cc:6d:ca:b4:
         a1:25:94:b7:02:6c:2d:a9:50:30:46:2c:c3:ac:52:1e:f6:92:
         63:cf:c1:c3:16:91:28:a3:54:49:5d:b5:b2:6c:07:3a:9b:84:
         ec:31:24:e2:a3:c1:02:d0:0b:be:a5:b8:50:f0:f4:fe:b9:fb:
         53:54:d9:94:ae:48:06:5a:c5:fe:94:ed:46:d5:08:13:8b:75:
         d8:8d:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org