Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/2f79dd0c52d1b8e17d22c81fbe9cbeb2dc889e3f.roa
File:                     2f79dd0c52d1b8e17d22c81fbe9cbeb2dc889e3f.roa (raw, json)
Hash identifier:          1j5So8Qbz9YVi6NS/1OV0s+L6p5k9vlrshMo7ZlANuE=
Subject key identifier:   B5:91:6B:D8:AB:27:09:EB:27:64:6B:64:50:49:1A:67:D7:84:68:E9
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       119A58
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/2f79dd0c52d1b8e17d22c81fbe9cbeb2dc889e3f.roa
Signing time:             Mon 30 Aug 2021 22:01:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28058
IP address blocks:        179.60.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153624 (0x119a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=2f79dd0c52d1b8e17d22c81fbe9cbeb2dc889e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:a5:39:5d:83:18:8e:fb:33:be:d8:08:a7:
                    c9:8e:95:21:cb:8a:8a:61:25:d6:84:b0:89:94:b5:
                    3a:9e:dc:b9:bc:4d:20:c5:df:b4:28:df:ff:a2:19:
                    8b:78:56:bd:fa:5d:28:ee:9d:87:f5:77:d4:89:05:
                    95:02:e6:ee:80:83:ea:25:05:6b:bf:55:0b:37:06:
                    9e:79:25:9a:c8:15:7e:be:44:80:6a:f9:f2:b6:cd:
                    f8:8f:47:1c:d2:57:51:61:14:64:a0:47:98:52:7b:
                    ff:22:fd:c8:1f:97:1c:4e:fc:8d:bf:80:7e:6f:35:
                    e5:7e:27:5b:4c:e5:a2:e6:99:92:cd:16:6e:7a:da:
                    8b:f2:89:f6:bb:4b:f3:16:f0:16:ed:6b:22:23:35:
                    dc:f7:cd:b6:19:63:ae:db:6e:40:ca:b9:0a:bd:35:
                    22:fb:a4:70:d6:ca:fd:ee:01:e1:35:87:69:91:b7:
                    dc:b7:12:be:e0:21:c9:70:19:79:5e:ca:7c:13:58:
                    d1:32:d6:ac:94:85:6c:5f:7a:fe:53:b8:12:08:14:
                    2a:fb:e4:73:59:6e:b1:ec:66:f2:4a:64:fd:63:80:
                    86:ef:fa:f6:37:f2:a9:3f:ab:27:28:6b:4f:d4:aa:
                    fe:c8:5a:4f:11:fb:3e:c5:25:97:eb:9f:39:68:fc:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:6B:D8:AB:27:09:EB:27:64:6B:64:50:49:1A:67:D7:84:68:E9
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/2f79dd0c52d1b8e17d22c81fbe9cbeb2dc889e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:de:82:0c:69:9b:48:1a:9b:25:6b:37:dd:91:eb:bf:84:d3:
         d3:a5:ae:98:56:b7:48:b9:23:b9:b8:c6:01:e9:f2:77:61:c2:
         2b:c8:55:17:af:10:db:e9:b0:6f:e2:23:6d:db:e9:85:de:47:
         e2:31:45:9d:05:2a:a7:77:42:bb:03:45:f0:6a:db:1c:f7:41:
         88:15:a5:94:a2:82:46:ad:fa:d2:50:5a:cc:10:88:25:7d:e0:
         e5:b7:1e:6b:f2:cb:a6:57:6b:ca:a6:41:f4:fd:31:67:0f:bf:
         04:f8:65:07:cf:3f:5c:8f:67:82:13:fa:88:48:ec:82:5f:15:
         0d:2a:40:5d:f4:e2:a6:71:a0:79:a2:c7:78:92:71:ba:ff:44:
         e0:6e:ac:7c:df:07:16:2a:af:64:f4:c1:0a:ca:b3:b3:87:5e:
         31:ac:06:6a:41:04:cd:68:4e:c9:f8:4d:b0:92:27:9d:b7:dc:
         03:db:7f:8d:63:28:75:87:44:ee:f8:16:9b:26:6f:12:49:6c:
         cd:66:4f:05:f7:5f:4f:2a:7e:f9:e2:dc:e4:50:f9:6d:75:cd:
         a3:a2:23:d7:63:ab:56:c2:68:89:b6:b6:07:18:16:40:aa:b6:
         dd:66:14:41:12:67:d1:29:43:72:65:ad:3a:e2:b7:9d:ed:aa:
         f7:eb:45:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEZpYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg2
MzQ4NzNhMjFhMGFmNDBhMDEzNTQ2NDdhZDQ5NzhkMzg0N2QzNjUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygyZjc5ZGQwYzUyZDFi
OGUxN2QyMmM4MWZiZTljYmViMmRjODg5ZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkpClOV2DGI77M77YCKfJjpUhy4qKYSXWhLCJlLU6nty5vE0g
xd+0KN//ohmLeFa9+l0o7p2H9XfUiQWVAubugIPqJQVrv1ULNwaeeSWayBV+vkSA
avnyts34j0cc0ldRYRRkoEeYUnv/Iv3IH5ccTvyNv4B+bzXlfidbTOWi5pmSzRZu
etqL8on2u0vzFvAW7WsiIzXc9822GWOu225AyrkKvTUi+6Rw1sr97gHhNYdpkbfc
txK+4CHJcBl5Xsp8E1jRMtaslIVsX3r+U7gSCBQq++RzWW6x7GbySmT9Y4CG7/r2
N/KpP6snKGtP1Kr+yFpPEfs+xSWX6585aPwxLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLWRa9irJwnrJ2RrZFBJGmfXhGjpMB8GA1UdIwQYMBaAFA71kgJl0auTUq5P
vH+jJzRsaL9AMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODYzNDg3
M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDI0NTg1YTQtYzc2Ni00NTA5LWEzNWEtMDI2ZjM4
MzY0YWVkLzJmNzlkZDBjNTJkMWI4ZTE3ZDIyYzgxZmJlOWNiZWIyZGM4ODllM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMjQ1ODVhNC1jNzY2LTQ1MDktYTM1YS0wMjZm
MzgzNjRhZWQvODYzNDg3M2EyMWEwYWY0MGEwMTM1NDY0N2FkNDk3OGQzODQ3ZDM2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALM8MjANBgkqhkiG9w0BAQsFAAOCAQEAEN6CDGmbSBqbJWs3
3ZHrv4TT06WumFa3SLkjubjGAenyd2HCK8hVF68Q2+mwb+Ijbdvphd5H4jFFnQUq
p3dCuwNF8GrbHPdBiBWllKKCRq360lBazBCIJX3g5bcea/LLpldryqZB9P0xZw+/
BPhlB88/XI9nghP6iEjsgl8VDSpAXfTipnGgeaLHeJJxuv9E4G6sfN8HFiqvZPTB
Csqzs4deMawGakEEzWhOyfhNsJInnbfcA9t/jWModYdE7vgWmyZvEklszWZPBfdf
Typ++eLc5FD5bXXNo6Ij12OrVsJoiba2BxgWQKq23WYUQRJn0SlDcmWtOuK3ne2q
9+tFfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org