Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/d788656ff0db075eddc7c3e2186903600ca2ada6.roa
File:                     d788656ff0db075eddc7c3e2186903600ca2ada6.roa (raw, json)
Hash identifier:          0uEKkOKdIFefDOh6sYGYxPi/YPCyPi58kyz/h63t45Y=
Subject key identifier:   7F:AA:D3:C1:07:B7:FB:18:84:52:F0:5C:E7:C0:53:69:77:D6:12:10
Certificate issuer:       /CN=9fec437d32aba48264306d179703acc9a82f83bf
Certificate serial:       200A86
Authority key identifier: F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/d788656ff0db075eddc7c3e2186903600ca2ada6.roa
Signing time:             Wed 26 Apr 2023 22:26:58 +0000
ROA not before:           Tue 25 Apr 2023 22:26:58 +0000
ROA not after:            Sat 26 Apr 2025 22:26:58 +0000
asID:                     52491
IP address blocks:        179.60.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099846 (0x200a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fec437d32aba48264306d179703acc9a82f83bf
        Validity
            Not Before: Apr 25 22:26:58 2023 GMT
            Not After : Apr 26 22:26:58 2025 GMT
        Subject: CN=d788656ff0db075eddc7c3e2186903600ca2ada6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:36:c3:5e:eb:58:35:c2:cb:11:fe:6d:fc:
                    f4:a1:3b:b2:d9:7d:66:24:15:44:d5:91:30:72:b1:
                    9d:68:73:9f:11:12:02:21:f0:14:8f:e0:1f:80:89:
                    0c:69:0e:e6:d7:a5:62:08:ee:f3:ad:bc:90:31:33:
                    13:1b:c8:c4:02:9e:db:55:10:ff:67:db:9f:34:1d:
                    df:75:65:25:ba:bb:43:2b:03:50:b1:8a:8e:97:56:
                    9c:6d:ac:7e:a0:da:98:8b:65:a0:dd:fd:31:3d:02:
                    4d:61:68:0a:39:5b:f6:f0:60:4d:7d:42:b5:3a:5f:
                    a7:e1:b0:2d:ea:6b:9f:da:4a:1b:43:d6:0c:26:72:
                    48:e3:a3:c9:7b:18:b5:86:27:fd:03:56:5f:43:10:
                    ab:80:a5:5d:43:dc:fa:da:52:07:35:c8:24:03:08:
                    d0:ec:99:64:22:29:22:be:b7:ee:26:0b:ef:85:6d:
                    d9:53:84:47:ab:7d:01:21:cc:a8:99:0c:3c:9a:d3:
                    5c:c7:f4:fd:42:dc:a2:6a:85:a7:11:28:38:56:f0:
                    64:06:3b:7d:89:6e:fe:35:ba:af:22:e7:93:e1:7c:
                    7a:97:bf:a6:f1:b1:e1:64:70:bd:0f:3e:02:53:d2:
                    24:a6:8b:9c:59:98:00:39:fa:3e:05:72:d5:0c:90:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:D3:C1:07:B7:FB:18:84:52:F0:5C:E7:C0:53:69:77:D6:12:10
            X509v3 Authority Key Identifier:
                keyid:F5:9C:4E:7B:E4:22:40:A1:FC:48:47:88:B5:A5:DE:FC:97:12:D4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fec437d32aba48264306d179703acc9a82f83bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/d788656ff0db075eddc7c3e2186903600ca2ada6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96347ee9-813e-49b3-9936-d5858a555f0a/9fec437d32aba48264306d179703acc9a82f83bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:7a:99:c2:4d:d1:97:ba:47:cc:5e:f8:88:26:a2:3c:87:
         20:9e:1e:f3:bb:64:4b:ff:fa:12:6e:00:6c:f8:f9:41:cf:d0:
         cc:3d:77:cd:19:b1:a9:a9:0e:dc:67:48:73:36:d1:02:fe:05:
         df:49:85:37:7f:b3:8c:d6:1c:43:ea:09:3e:ad:28:b8:77:de:
         da:59:3e:6b:9a:8a:b5:65:6a:ae:2a:85:75:c1:e1:94:98:20:
         3f:fa:cc:4a:c0:9e:57:06:68:bb:0b:21:be:55:13:0a:29:eb:
         18:bd:ee:82:1e:03:db:ae:54:df:c1:0f:f2:bd:c6:dc:d5:72:
         54:d6:c5:7b:f8:32:dd:0a:4a:09:2a:d8:d9:7e:1e:f8:e5:e3:
         2b:e7:2e:33:84:7b:f6:46:e8:3d:a1:dc:ef:17:d3:3c:a2:e3:
         83:f7:9a:17:92:c6:e4:a6:af:ca:0b:f2:b7:85:ef:69:95:77:
         1a:d4:9b:f8:5f:c0:ae:53:6f:d9:20:89:b0:63:88:5f:ed:fd:
         5c:9d:c5:e0:0d:03:42:9d:2a:92:e0:da:7f:74:bb:4d:a0:a3:
         b5:d1:5c:25:81:a3:b9:5c:03:ad:71:43:74:60:6a:c8:6d:51:
         74:b2:00:7d:3f:36:5b:64:d1:10:59:1d:b1:4f:58:b1:b1:a9:
         7e:bd:01:8c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIAqGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
ZWM0MzdkMzJhYmE0ODI2NDMwNmQxNzk3MDNhY2M5YTgyZjgzYmYwHhcNMjMwNDI1
MjIyNjU4WhcNMjUwNDI2MjIyNjU4WjAzMTEwLwYDVQQDEyhkNzg4NjU2ZmYwZGIw
NzVlZGRjN2MzZTIxODY5MDM2MDBjYTJhZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyRM2w17rWDXCyxH+bfz0oTuy2X1mJBVE1ZEwcrGdaHOfERIC
IfAUj+AfgIkMaQ7m16ViCO7zrbyQMTMTG8jEAp7bVRD/Z9ufNB3fdWUlurtDKwNQ
sYqOl1acbax+oNqYi2Wg3f0xPQJNYWgKOVv28GBNfUK1Ol+n4bAt6muf2kobQ9YM
JnJI46PJexi1hif9A1ZfQxCrgKVdQ9z62lIHNcgkAwjQ7JlkIikivrfuJgvvhW3Z
U4RHq30BIcyomQw8mtNcx/T9QtyiaoWnESg4VvBkBjt9iW7+NbqvIueT4Xx6l7+m
8bHhZHC9Dz4CU9IkpoucWZgAOfo+BXLVDJDcnQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH+q08EHt/sYhFLwXOfAU2l31hIQMB8GA1UdIwQYMBaAFPWcTnvkIkCh/EhH
iLWl3vyXEtRxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZlYzQz
N2QzMmFiYTQ4MjY0MzA2ZDE3OTcwM2FjYzlhODJmODNiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTYzNDdlZTktODEzZS00OWIzLTk5MzYtZDU4NThh
NTU1ZjBhL2Q3ODg2NTZmZjBkYjA3NWVkZGM3YzNlMjE4NjkwMzYwMGNhMmFkYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjM0N2VlOS04MTNlLTQ5YjMtOTkzNi1kNTg1
OGE1NTVmMGEvOWZlYzQzN2QzMmFiYTQ4MjY0MzA2ZDE3OTcwM2FjYzlhODJmODNi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArM80DANBgkqhkiG9w0BAQsFAAOCAQEAJuh6mcJN0Ze6R8xe
+IgmojyHIJ4e87tkS//6Em4AbPj5Qc/QzD13zRmxqakO3GdIczbRAv4F30mFN3+z
jNYcQ+oJPq0ouHfe2lk+a5qKtWVqriqFdcHhlJggP/rMSsCeVwZouwshvlUTCinr
GL3ugh4D265U38EP8r3G3NVyVNbFe/gy3QpKCSrY2X4e+OXjK+cuM4R79kboPaHc
7xfTPKLjg/eaF5LG5Kavygvyt4XvaZV3GtSb+F/ArlNv2SCJsGOIX+39XJ3F4A0D
Qp0qkuDaf3S7TaCjtdFcJYGjuVwDrXFDdGBqyG1RdLIAfT82W2TREFkdsU9YsbGp
fr0BjA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org