Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/358b5adef24542df9ad47d30dc0a75e5640611bf.roa
File:                     358b5adef24542df9ad47d30dc0a75e5640611bf.roa (raw, json)
Hash identifier:          de05mpa2VJ7V58ZMVY6YuQem8uBl3UGtOqFPvkf394I=
Subject key identifier:   32:06:B6:ED:1E:85:89:BE:2A:FE:11:EA:1A:76:14:4D:E0:5D:E9:DB
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0DA458
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/358b5adef24542df9ad47d30dc0a75e5640611bf.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        179.48.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894040 (0xda458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=358b5adef24542df9ad47d30dc0a75e5640611bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:e0:90:bf:a5:78:8e:2a:23:3a:ef:66:ed:
                    4c:ac:20:0e:ee:06:65:a1:05:91:7e:23:05:6d:b2:
                    62:86:b8:b9:93:08:bd:66:0a:b4:4c:6f:d4:45:f6:
                    5f:c5:e3:48:9b:50:17:47:cc:7b:4a:32:50:bb:41:
                    d6:52:d2:a8:97:8a:c8:6d:f3:5b:bb:60:06:4a:ae:
                    8f:ae:45:1f:93:5b:1b:73:04:85:45:f8:b5:a8:f4:
                    87:1a:0c:cd:0b:66:75:8c:28:a6:b3:d1:15:84:c7:
                    41:75:3d:d2:87:c3:ec:8a:3b:c1:31:7c:21:a0:f7:
                    8a:47:77:bd:e3:48:3e:64:05:b8:ff:68:c4:ab:78:
                    6e:06:3a:61:fb:32:25:c0:28:25:42:0f:bd:e8:2b:
                    f4:6b:8e:22:30:94:7c:ff:b1:9e:8a:d0:e4:71:65:
                    12:55:d4:e9:3d:2d:a2:1d:4d:c1:ff:cd:4d:c6:6b:
                    ec:09:b3:01:b8:61:38:0e:9c:de:3f:5c:81:d8:0b:
                    e1:51:4e:50:df:1e:ff:11:5b:4d:9f:23:71:c0:7e:
                    40:48:30:e9:d7:e6:fd:f5:7c:d6:ca:2a:4a:0d:39:
                    18:20:de:c0:24:6f:58:75:37:64:b1:50:a9:77:c1:
                    06:d3:96:e3:6c:2e:55:51:81:63:55:f2:e5:64:98:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:06:B6:ED:1E:85:89:BE:2A:FE:11:EA:1A:76:14:4D:E0:5D:E9:DB
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/358b5adef24542df9ad47d30dc0a75e5640611bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:b2:52:07:1b:5a:7e:fe:de:1d:0b:bd:42:2e:0f:8a:09:
         0f:a1:36:52:a0:ef:96:71:83:2e:ed:e1:c7:ca:a3:84:6a:65:
         6a:48:7c:46:7e:53:04:3d:e7:70:56:9d:ec:fd:45:c0:46:e1:
         b9:87:d8:02:17:c0:76:1f:6a:b7:72:f2:bd:d8:62:02:cb:cd:
         46:86:dd:c7:94:c6:39:6e:3f:b0:cc:f7:ee:87:2a:04:1c:41:
         9c:93:d0:67:20:8a:6d:4a:db:1a:95:48:54:e2:52:2c:8e:ca:
         37:f9:05:2f:20:17:88:29:30:ad:22:c2:e3:a6:93:22:f1:40:
         3e:df:d2:68:06:a5:0c:eb:82:c8:b2:0a:cf:7d:33:2b:ab:c0:
         41:18:6d:87:50:a9:f3:42:79:eb:63:fe:85:b5:b1:fd:03:4a:
         d1:c8:a2:e3:b4:d1:31:a8:99:bc:29:79:d8:89:63:ec:d9:70:
         a4:09:72:43:fe:08:50:54:4f:0c:c5:ea:fe:07:fc:ca:d0:ee:
         80:58:f1:88:cd:74:4c:39:c6:af:cc:c0:a9:9c:de:29:0f:57:
         e3:07:99:85:41:f9:c9:47:3a:f9:dd:9a:4c:cc:6c:1e:ea:67:
         6f:e1:45:5d:44:58:04:a6:58:9e:bc:ba:ee:4e:9b:00:6c:d2:
         c9:9b:f3:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDaRYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEygzNThiNWFkZWYyNDU0
MmRmOWFkNDdkMzBkYzBhNzVlNTY0MDYxMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuefgkL+leI4qIzrvZu1MrCAO7gZloQWRfiMFbbJihri5kwi9
Zgq0TG/URfZfxeNIm1AXR8x7SjJQu0HWUtKol4rIbfNbu2AGSq6PrkUfk1sbcwSF
Rfi1qPSHGgzNC2Z1jCims9EVhMdBdT3Sh8PsijvBMXwhoPeKR3e940g+ZAW4/2jE
q3huBjph+zIlwCglQg+96Cv0a44iMJR8/7GeitDkcWUSVdTpPS2iHU3B/81Nxmvs
CbMBuGE4DpzeP1yB2AvhUU5Q3x7/EVtNnyNxwH5ASDDp1+b99XzWyipKDTkYIN7A
JG9YdTdksVCpd8EG05bjbC5VUYFjVfLlZJjx3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDIGtu0ehYm+Kv4R6hp2FE3gXenbMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlLzM1OGI1YWRlZjI0NTQyZGY5YWQ0N2QzMGRjMGE3NWU1NjQwNjExYmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMw+zANBgkqhkiG9w0BAQsFAAOCAQEAfXeyUgcbWn7+3h0L
vUIuD4oJD6E2UqDvlnGDLu3hx8qjhGplakh8Rn5TBD3ncFad7P1FwEbhuYfYAhfA
dh9qt3LyvdhiAsvNRobdx5TGOW4/sMz37ocqBBxBnJPQZyCKbUrbGpVIVOJSLI7K
N/kFLyAXiCkwrSLC46aTIvFAPt/SaAalDOuCyLIKz30zK6vAQRhth1Cp80J562P+
hbWx/QNK0cii47TRMaiZvCl52Ilj7NlwpAlyQ/4IUFRPDMXq/gf8ytDugFjxiM10
TDnGr8zAqZzeKQ9X4weZhUH5yUc6+d2aTMxsHupnb+FFXURYBKZYnry67k6bAGzS
yZvzig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org