Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/df6071370c2d6986f822622357a851f6393c872d.roa
File:                     df6071370c2d6986f822622357a851f6393c872d.roa (raw, json)
Hash identifier:          PD2zcvheLiFndjzNCPHZnxAVXp//+eGJQq2L/yqr1mI=
Subject key identifier:   E1:E2:93:AE:22:70:2A:D5:AD:E3:68:AC:31:8B:9B:F7:FB:5C:A4:F6
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0DA806
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/df6071370c2d6986f822622357a851f6393c872d.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        179.48.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894982 (0xda806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=df6071370c2d6986f822622357a851f6393c872d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:35:86:b3:b2:63:59:98:59:5a:2a:89:06:
                    ad:6a:4e:85:0a:eb:19:59:2b:e4:fc:90:f2:60:33:
                    de:13:cd:df:2d:79:2a:ea:ba:18:33:71:7e:31:ac:
                    84:e8:30:6c:8e:1f:f7:9b:0c:35:17:ff:b5:97:e0:
                    bf:dd:35:ab:a8:5b:e0:84:c5:eb:3b:4a:fc:30:aa:
                    71:cb:21:c9:2c:a2:8a:c1:66:5a:fd:66:34:bc:99:
                    8d:ac:92:81:37:07:5a:d9:d4:79:ff:8b:dc:8d:1b:
                    40:5c:5a:9f:05:aa:6a:b7:e0:11:e3:69:2a:30:33:
                    54:6f:ca:f7:85:cd:33:98:ae:6f:50:f4:6e:5c:a4:
                    bb:21:ce:9f:cc:d1:c8:48:da:15:8e:48:e4:9b:c1:
                    ae:30:dc:15:87:b7:8f:3f:43:9a:cc:90:8d:88:b2:
                    a7:cb:81:6e:d4:06:8c:37:b9:84:53:f2:1b:ec:63:
                    6d:50:9d:96:1e:6b:93:73:6c:40:38:b1:af:3c:13:
                    d8:0d:e3:4f:45:88:2c:54:48:f8:a7:dd:07:e0:4f:
                    66:91:1f:00:e1:58:b5:4d:88:4b:0e:74:42:95:b2:
                    df:25:33:dc:d1:a0:b7:35:19:3a:6c:00:dc:72:f4:
                    c6:ea:10:d6:64:0a:36:24:75:3f:22:0c:73:e6:f5:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:93:AE:22:70:2A:D5:AD:E3:68:AC:31:8B:9B:F7:FB:5C:A4:F6
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/df6071370c2d6986f822622357a851f6393c872d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:f7:6b:55:30:f8:6e:f3:05:bd:c5:2f:67:35:93:47:ce:
         c2:f3:b7:2f:e7:60:ad:34:aa:50:f5:f5:fa:68:c7:e1:a9:57:
         58:4b:9b:93:1d:45:5a:d9:7f:f5:89:38:16:e4:a6:81:53:4b:
         7d:f7:ce:d4:e8:bb:ac:9a:94:c4:bc:b8:1f:9f:c3:f2:57:62:
         35:62:dd:37:79:7e:8f:c4:45:40:7c:90:46:c6:3b:7f:cf:62:
         ce:fd:6e:7a:9e:94:96:1d:e3:f5:74:29:85:93:2e:c4:32:7e:
         db:d1:65:c8:1a:47:99:1f:06:04:d7:7d:d9:e3:93:83:bc:c7:
         27:48:64:73:59:72:93:1d:90:f3:77:ca:7f:47:99:3c:d2:c3:
         3e:9c:4a:e0:3b:d7:24:c8:91:59:73:62:51:46:20:1c:76:59:
         ba:bf:5e:2a:64:33:39:13:8f:49:8d:b5:5d:be:66:85:49:e2:
         c3:e2:55:c6:5d:f8:e2:3a:44:b9:78:62:2f:b2:4a:de:91:ab:
         d9:0c:eb:e0:d7:07:0c:00:e9:17:37:9e:a8:ad:e3:61:e7:e1:
         e2:2a:d9:6d:71:12:27:3e:bc:d8:eb:0a:5b:67:88:65:a2:21:
         d8:41:54:42:b2:d7:ff:79:83:43:ab:36:1f:d9:0d:70:48:32:
         51:57:84:1b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDagGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEyhkZjYwNzEzNzBjMmQ2
OTg2ZjgyMjYyMjM1N2E4NTFmNjM5M2M4NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2Oo1hrOyY1mYWVoqiQatak6FCusZWSvk/JDyYDPeE83fLXkq
6roYM3F+MayE6DBsjh/3mww1F/+1l+C/3TWrqFvghMXrO0r8MKpxyyHJLKKKwWZa
/WY0vJmNrJKBNwda2dR5/4vcjRtAXFqfBapqt+AR42kqMDNUb8r3hc0zmK5vUPRu
XKS7Ic6fzNHISNoVjkjkm8GuMNwVh7ePP0OazJCNiLKny4Fu1AaMN7mEU/Ib7GNt
UJ2WHmuTc2xAOLGvPBPYDeNPRYgsVEj4p90H4E9mkR8A4Vi1TYhLDnRClbLfJTPc
0aC3NRk6bADccvTG6hDWZAo2JHU/Igxz5vU4sQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOHik64icCrVreNorDGLm/f7XKT2MB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlL2RmNjA3MTM3MGMyZDY5ODZmODIyNjIyMzU3YTg1MWY2MzkzYzg3MmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMw+jANBgkqhkiG9w0BAQsFAAOCAQEATx73a1Uw+G7zBb3F
L2c1k0fOwvO3L+dgrTSqUPX1+mjH4alXWEubkx1FWtl/9Yk4FuSmgVNLfffO1Oi7
rJqUxLy4H5/D8ldiNWLdN3l+j8RFQHyQRsY7f89izv1uep6Ulh3j9XQphZMuxDJ+
29FlyBpHmR8GBNd92eOTg7zHJ0hkc1lykx2Q83fKf0eZPNLDPpxK4DvXJMiRWXNi
UUYgHHZZur9eKmQzOROPSY21Xb5mhUniw+JVxl344jpEuXhiL7JK3pGr2Qzr4NcH
DADpFzeeqK3jYefh4irZbXESJz682OsKW2eIZaIh2EFUQrLX/3mDQ6s2H9kNcEgy
UVeEGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org