Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/609ea226769b17608bd6f2ecd60e09e3b79e4afa.roa
File:                     609ea226769b17608bd6f2ecd60e09e3b79e4afa.roa (raw, json)
Hash identifier:          gfCIsxrlRHaHYQJDPvszqcQ6RtKDwEWBDvnHQLQ+cmU=
Subject key identifier:   A5:ED:FF:50:CE:7C:46:82:88:3C:FA:C2:1F:DD:1A:8A:8D:AD:D3:66
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D97F8
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/609ea226769b17608bd6f2ecd60e09e3b79e4afa.roa
Signing time:             Fri 07 Oct 2022 15:51:05 +0000
ROA not before:           Mon 26 Sep 2022 20:11:47 +0000
ROA not after:            Thu 26 Sep 2024 20:11:47 +0000
asID:                     3816
IP address blocks:        179.32.0.0/20 maxlen: 20
                          179.32.20.0/22 maxlen: 22
                          179.32.24.0/22 maxlen: 22
                          179.32.28.0/22 maxlen: 22
                          179.32.32.0/22 maxlen: 22
                          179.32.34.0/23 maxlen: 23
                          179.32.36.0/22 maxlen: 22
                          179.32.40.0/22 maxlen: 22
                          179.32.44.0/22 maxlen: 22
                          179.32.48.0/22 maxlen: 22
                          179.32.52.0/22 maxlen: 22
                          179.32.56.0/22 maxlen: 22
                          179.32.60.0/22 maxlen: 22
                          179.32.64.0/20 maxlen: 20
                          179.32.80.0/20 maxlen: 20
                          179.32.96.0/20 maxlen: 20
                          179.32.112.0/20 maxlen: 20
                          179.32.128.0/20 maxlen: 20
                          179.32.144.0/20 maxlen: 20
                          179.32.160.0/20 maxlen: 20
                          179.32.176.0/20 maxlen: 20
                          179.32.192.0/20 maxlen: 20
                          179.32.208.0/20 maxlen: 20
                          179.32.224.0/20 maxlen: 20
                          179.32.240.0/20 maxlen: 20
                          179.33.0.0/22 maxlen: 22
                          179.33.4.0/22 maxlen: 22
                          179.33.8.0/22 maxlen: 22
                          179.33.12.0/22 maxlen: 22
                          179.33.16.0/22 maxlen: 22
                          179.33.20.0/22 maxlen: 22
                          179.33.24.0/22 maxlen: 22
                          179.33.28.0/22 maxlen: 22
                          179.33.32.0/20 maxlen: 20
                          179.33.48.0/20 maxlen: 20
                          179.33.64.0/20 maxlen: 20
                          179.33.80.0/20 maxlen: 20
                          179.33.96.0/24 maxlen: 24
                          179.33.97.0/24 maxlen: 24
                          179.33.98.0/24 maxlen: 24
                          179.33.99.0/24 maxlen: 24
                          179.33.100.0/24 maxlen: 24
                          179.33.101.0/24 maxlen: 24
                          179.33.102.0/24 maxlen: 24
                          179.33.103.0/24 maxlen: 24
                          179.33.104.0/22 maxlen: 22
                          179.33.110.0/23 maxlen: 23
                          179.33.112.0/20 maxlen: 20
                          179.33.128.0/21 maxlen: 21
                          179.33.136.0/22 maxlen: 22
                          179.33.140.0/22 maxlen: 22
                          179.33.144.0/20 maxlen: 20
                          179.33.160.0/21 maxlen: 21
                          179.33.168.0/23 maxlen: 23
                          179.33.170.0/23 maxlen: 23
                          179.33.172.0/23 maxlen: 23
                          179.33.174.0/24 maxlen: 24
                          179.33.175.0/24 maxlen: 24
                          179.33.176.0/22 maxlen: 22
                          179.33.180.0/22 maxlen: 22
                          179.33.184.0/22 maxlen: 22
                          179.33.188.0/22 maxlen: 22
                          179.33.192.0/20 maxlen: 20
                          179.33.208.0/22 maxlen: 22
                          179.33.210.0/24 maxlen: 24
                          179.33.212.0/22 maxlen: 22
                          179.33.216.0/22 maxlen: 22
                          179.33.220.0/22 maxlen: 22
                          179.33.224.0/21 maxlen: 21
                          179.33.232.0/21 maxlen: 21
                          179.33.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939448 (0x1d97f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 20:11:47 2022 GMT
            Not After : Sep 26 20:11:47 2024 GMT
        Subject: CN=609ea226769b17608bd6f2ecd60e09e3b79e4afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:47:31:fc:21:36:e6:13:5e:20:55:0c:92:
                    fd:db:2d:4f:2f:17:05:d6:75:d7:05:ff:ae:77:0e:
                    36:ac:da:5a:0f:b3:9b:da:49:2a:68:7d:82:5d:71:
                    15:f3:c8:ba:a6:bd:f9:ec:87:0d:c3:9f:a0:b7:bb:
                    6b:3a:fe:76:b8:9a:17:ed:21:ca:7d:d3:37:2e:f2:
                    25:fe:a1:fe:45:1a:5e:e1:ab:3c:f4:96:f6:0f:64:
                    0c:2e:10:87:69:23:ab:6b:28:26:b9:f6:f1:93:57:
                    66:be:08:e2:71:d3:1d:9c:93:66:e6:67:58:93:ed:
                    6d:ef:30:98:b5:6c:ef:ce:9b:45:7f:92:61:5b:39:
                    d3:f3:7e:7e:c5:5b:22:43:40:01:56:dd:f9:76:46:
                    36:bf:6d:86:09:9d:c7:43:bd:a4:17:ee:8d:af:6b:
                    f4:6e:33:b9:ac:01:0b:a3:a7:5f:1f:ba:ee:28:03:
                    90:a9:ee:3a:28:af:3b:2e:ae:c4:eb:ae:89:33:15:
                    c9:10:d2:e0:16:a9:81:e9:df:0f:62:54:8e:f0:51:
                    64:6c:48:ad:e1:39:3b:71:ff:8f:9c:42:e5:c1:d0:
                    05:29:42:d2:65:f4:a2:16:0e:dd:f2:d7:7e:f4:80:
                    86:ae:5c:d9:f3:9a:9a:7a:17:d1:14:0f:a4:aa:e0:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:FF:50:CE:7C:46:82:88:3C:FA:C2:1F:DD:1A:8A:8D:AD:D3:66
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/609ea226769b17608bd6f2ecd60e09e3b79e4afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.32.0.0/20
                  179.32.20.0-179.33.107.255
                  179.33.110.0-179.33.255.255

    Signature Algorithm: sha256WithRSAEncryption
         01:75:7e:ea:68:83:62:b4:bf:ea:40:b3:74:d3:eb:d0:56:0e:
         da:b4:63:74:2c:ee:86:38:d4:85:fc:da:bc:2c:59:19:a0:85:
         3c:77:1e:dc:15:29:e9:00:f4:c4:b5:2f:b6:5b:e8:28:ec:74:
         f1:ba:01:2a:ac:4f:85:dc:96:02:03:f6:dd:35:10:46:d6:c2:
         27:88:86:6f:89:c9:b6:9e:79:bf:1e:2b:70:f7:58:d3:1d:6b:
         25:72:53:96:27:ea:1d:7f:bb:98:55:c0:f8:12:34:81:e9:ec:
         36:09:67:b1:f5:e6:ba:4c:26:21:83:c9:39:49:40:7d:75:58:
         91:f5:74:de:46:49:b0:7a:8d:d3:63:b6:cd:a5:a7:30:26:24:
         67:85:7d:30:14:60:4f:6e:19:5e:3b:d3:95:ba:c2:10:68:ce:
         26:8f:a4:73:7a:00:2e:34:06:b1:ba:72:ea:e5:2e:9c:eb:dd:
         32:b0:65:22:12:a7:64:95:04:0b:fc:ba:25:67:bb:87:a9:4d:
         95:d2:d9:6d:b2:39:c8:95:66:0a:da:e3:08:75:9f:d6:62:78:
         53:f0:36:93:b2:de:c3:a3:88:72:7b:a1:d5:e6:57:c0:ce:17:
         f4:84:65:6b:58:49:ef:80:38:64:27:75:d3:4f:43:c7:f9:fc:
         79:fc:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org