Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/dfb1d62043c8c966715ce38644ebd7d583e04817.roa
File:                     dfb1d62043c8c966715ce38644ebd7d583e04817.roa (raw, json)
Hash identifier:          w9YJXzfDNsiU8/+vnrVID4kH7YD5IG6uzzg+Tm/HBUI=
Subject key identifier:   CB:E5:0B:EF:95:6E:1C:DE:87:57:6C:A5:F3:FE:6B:EA:B6:54:C4:14
Certificate issuer:       /CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Certificate serial:       1AFB22
Authority key identifier: 49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/dfb1d62043c8c966715ce38644ebd7d583e04817.roa
Signing time:             Fri 05 Jan 2024 18:01:35 +0000
ROA not before:           Fri 05 Jan 2024 18:01:35 +0000
ROA not after:            Mon 05 Jan 2026 18:01:35 +0000
asID:                     270044
IP address blocks:        179.0.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768226 (0x1afb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
        Validity
            Not Before: Jan  5 18:01:35 2024 GMT
            Not After : Jan  5 18:01:35 2026 GMT
        Subject: CN=dfb1d62043c8c966715ce38644ebd7d583e04817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:8e:5f:2f:5e:18:fc:92:8a:92:5b:06:2e:
                    87:8d:be:5c:88:b1:a0:f4:ad:4f:9b:47:0c:e6:b9:
                    a4:6e:37:b6:4d:ce:91:9e:09:9b:a4:db:bd:27:54:
                    7a:3b:7c:13:ac:91:74:25:7d:9b:4d:a9:60:14:a6:
                    32:8e:31:4e:4d:55:d2:d7:24:00:97:29:fe:8b:bb:
                    bb:d8:ab:69:5e:81:92:34:e1:11:bc:9e:d4:31:ac:
                    b8:a2:58:9c:89:95:35:f8:f9:a9:72:06:f2:f3:5d:
                    25:08:6b:df:d4:2e:83:a9:e8:f7:77:99:66:4c:49:
                    ae:80:fa:99:5c:ca:ed:27:77:e1:fe:9e:0d:41:b5:
                    12:6b:e4:5e:0d:dd:3d:7f:d2:7e:be:aa:d6:d0:fa:
                    a0:5f:a9:58:6c:ce:3c:1b:23:c1:da:b6:77:e0:4f:
                    0d:ee:b8:68:1a:c3:5b:e2:a4:81:aa:85:2f:fc:a1:
                    dd:4e:b7:f9:f9:39:f2:13:7f:f2:b4:f3:b8:75:d1:
                    61:9b:9c:17:fc:98:30:42:44:e5:84:a2:fc:1f:4d:
                    02:fe:f8:37:1f:c9:c4:23:92:65:cd:49:d5:fc:cd:
                    87:d5:98:37:e2:b3:5d:02:01:5a:de:61:4b:53:cf:
                    8f:47:69:e2:37:7f:c0:c7:8e:7b:c9:c7:4b:39:f4:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:0B:EF:95:6E:1C:DE:87:57:6C:A5:F3:FE:6B:EA:B6:54:C4:14
            X509v3 Authority Key Identifier:
                keyid:49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/dfb1d62043c8c966715ce38644ebd7d583e04817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:6f:49:3a:3b:fe:dd:04:ab:1a:05:7c:60:5d:9a:2f:d3:
         3d:ec:d3:f8:5a:11:79:09:5f:e3:74:06:e0:6e:99:1a:1e:5f:
         74:53:7f:f9:03:c5:39:e4:25:1d:36:70:3e:77:dc:38:ad:2b:
         62:9f:ca:7c:5f:b6:af:0f:7d:88:4a:ff:41:29:ad:3f:e8:d2:
         2f:7d:51:48:e2:94:13:9c:0c:fa:16:56:df:79:3d:05:8d:7e:
         18:4b:ba:48:37:aa:1b:28:f9:82:1a:05:ce:a2:22:59:fd:5b:
         3a:31:75:e3:d8:24:9c:cb:35:27:cc:d8:33:c8:3a:be:17:6f:
         c7:d6:a4:60:80:4d:a3:28:5a:7a:91:53:fb:80:92:7a:0d:ae:
         9d:17:34:3f:5b:cf:7d:d7:1d:be:6b:36:48:e3:6d:fc:7e:57:
         80:b1:f5:20:a0:75:88:82:0c:be:e3:0e:16:70:83:e7:e4:df:
         60:53:81:d8:d2:ab:8a:52:c6:2e:c3:56:2d:6c:e1:61:9b:41:
         f5:60:77:f5:15:a3:50:4c:d2:c6:68:20:56:76:f1:6e:a8:68:
         76:52:41:3e:6a:b7:76:2d:30:a4:e2:2a:60:88:07:3c:28:36:
         76:c4:ad:2c:f6:e1:5d:70:d5:2e:27:2a:9e:42:a3:9e:9d:31:
         53:60:b2:78
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGvsiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
ZjFmMDRkNWI1MDgyODU0YjFlZGJmYjFlOWNmNGVjMTIwMDFlZjcwHhcNMjQwMTA1
MTgwMTM1WhcNMjYwMTA1MTgwMTM1WjAzMTEwLwYDVQQDEyhkZmIxZDYyMDQzYzhj
OTY2NzE1Y2UzODY0NGViZDdkNTgzZTA0ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhkaOXy9eGPySipJbBi6Hjb5ciLGg9K1Pm0cM5rmkbje2Tc6R
ngmbpNu9J1R6O3wTrJF0JX2bTalgFKYyjjFOTVXS1yQAlyn+i7u72KtpXoGSNOER
vJ7UMay4oliciZU1+Pmpcgby810lCGvf1C6Dqej3d5lmTEmugPqZXMrtJ3fh/p4N
QbUSa+ReDd09f9J+vqrW0PqgX6lYbM48GyPB2rZ34E8N7rhoGsNb4qSBqoUv/KHd
Trf5+TnyE3/ytPO4ddFhm5wX/JgwQkTlhKL8H00C/vg3H8nEI5JlzUnV/M2H1Zg3
4rNdAgFa3mFLU8+PR2niN3/Ax457ycdLOfRfSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMvlC++Vbhzeh1dspfP+a+q2VMQUMB8GA1UdIwQYMBaAFEkLW9Q7NFK9X9eB
FTSksZsx2xiAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGZmMWYw
NGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE1ZjkzNzQtYjcxOS00OTBhLTg3Y2QtMGZiMGE0
N2RmMWU5L2RmYjFkNjIwNDNjOGM5NjY3MTVjZTM4NjQ0ZWJkN2Q1ODNlMDQ4MTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTVmOTM3NC1iNzE5LTQ5MGEtODdjZC0wZmIw
YTQ3ZGYxZTkvNGZmMWYwNGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMAtDANBgkqhkiG9w0BAQsFAAOCAQEAuFBvSTo7/t0EqxoF
fGBdmi/TPezT+FoReQlf43QG4G6ZGh5fdFN/+QPFOeQlHTZwPnfcOK0rYp/KfF+2
rw99iEr/QSmtP+jSL31RSOKUE5wM+hZW33k9BY1+GEu6SDeqGyj5ghoFzqIiWf1b
OjF149gknMs1J8zYM8g6vhdvx9akYIBNoyhaepFT+4CSeg2unRc0P1vPfdcdvms2
SONt/H5XgLH1IKB1iIIMvuMOFnCD5+TfYFOB2NKrilLGLsNWLWzhYZtB9WB39RWj
UEzSxmggVnbxbqhodlJBPmq3di0wpOIqYIgHPCg2dsStLPbhXXDVLicqnkKjnp0x
U2CyeA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org