Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/9463b95cdb5f8252a13457de3a0c893ee2f913ad.roa
File:                     9463b95cdb5f8252a13457de3a0c893ee2f913ad.roa (raw, json)
Hash identifier:          EVNab35SdAwNU8UXKVpV6AOc6SNI0TvYaCpHJfR4adc=
Subject key identifier:   A3:D2:A7:F7:72:35:B1:B2:1F:8E:BE:9B:6C:3C:7D:85:37:2C:5E:5E
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       10D392
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/9463b95cdb5f8252a13457de3a0c893ee2f913ad.roa
Signing time:             Wed 21 Jul 2021 18:38:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263822
IP address blocks:        179.62.224.0/20 maxlen: 24
                          179.62.172.0/22 maxlen: 24
                          179.62.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102738 (0x10d392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9463b95cdb5f8252a13457de3a0c893ee2f913ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:1b:63:25:a5:c3:fb:c6:eb:e6:6f:a1:99:
                    e3:d1:fe:49:e1:5d:ab:7a:b3:df:a1:f4:1a:21:fb:
                    da:09:02:cc:c3:06:31:9a:2d:90:0d:b4:90:5c:a5:
                    bb:29:04:ac:15:fc:47:27:cf:63:30:91:f9:f5:2e:
                    4f:4f:22:08:48:fc:29:a5:76:01:49:55:8d:b0:f4:
                    d2:71:12:af:46:36:2c:b4:f4:f1:f9:8c:b9:68:b4:
                    a2:15:5d:28:0f:0d:e9:38:ae:69:b5:5b:3f:04:b4:
                    64:8a:fe:8e:c2:fe:cd:a5:f5:45:99:d2:db:b5:5f:
                    02:a8:d5:20:51:38:b3:2c:e9:9c:94:0b:d4:ce:3d:
                    52:87:3e:d0:07:bc:20:4f:70:ff:e4:89:7a:64:76:
                    e6:69:10:2a:ec:8a:ec:d9:59:ec:12:3c:69:d0:52:
                    72:dc:95:1d:ef:e2:dc:89:d4:48:9c:7b:f1:7b:a5:
                    7b:f0:3d:c5:4a:95:24:68:74:d2:a4:c2:7a:3c:a9:
                    a1:98:ac:96:e8:7d:d4:43:c4:ce:ae:b6:3a:42:16:
                    f5:83:0d:16:22:51:2a:0b:a4:22:5a:d1:19:31:d9:
                    74:1b:cb:53:08:c1:80:6f:b2:47:b7:9a:d6:df:4c:
                    b2:e2:ca:62:37:71:8d:1c:fa:2e:10:6f:ac:05:95:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:A7:F7:72:35:B1:B2:1F:8E:BE:9B:6C:3C:7D:85:37:2C:5E:5E
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/9463b95cdb5f8252a13457de3a0c893ee2f913ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.172.0/22
                  179.62.216.0/22
                  179.62.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:3e:50:bd:2b:d3:f0:57:88:2b:65:36:28:e6:76:65:f1:
         fd:a2:01:fd:2c:4c:7a:af:52:4e:57:38:87:27:48:3e:c0:4f:
         24:8a:a2:bf:77:81:f1:3d:bf:03:92:de:c3:8e:ec:cc:47:e9:
         5c:e6:77:a6:91:5b:af:40:9b:80:5c:a6:a9:77:a4:ab:5e:5c:
         f1:55:2a:08:93:72:67:de:cd:0a:9b:ec:8e:17:17:5e:d9:0f:
         eb:c9:d3:44:bd:7c:4b:ac:fc:94:f6:9b:08:33:a1:f9:d8:86:
         b7:3d:57:23:77:2d:46:fa:f1:e6:d1:b6:ce:49:c3:4a:6e:58:
         92:b9:b0:e7:5e:89:79:a9:b9:fb:e2:47:d2:03:6f:dd:8a:42:
         6e:7c:28:59:3d:30:ef:4a:a0:f6:3f:cd:83:77:c8:f0:03:21:
         8e:b4:1e:00:96:5e:1e:a4:25:1f:35:4e:9a:a8:14:f4:df:b3:
         d5:11:ea:46:e8:c3:57:8d:3b:30:49:93:2e:ab:c3:b7:60:92:
         e0:79:fd:b2:ad:a3:6d:9e:b6:a9:fc:46:7a:7d:70:bc:91:ef:
         79:0e:5c:73:19:8d:6f:24:78:82:c8:fa:80:29:b3:ea:c5:b5:
         81:80:db:35:c7:32:62:dc:da:82:7b:0a:63:20:5e:c5:1e:33:
         a0:f5:82:73
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDENOSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
M2EzZWExMmI3ZjJhYzUwM2YzYjJhMjA4OTMwMzY3YzQyMzBlMzQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg5NDYzYjk1Y2RiNWY4
MjUyYTEzNDU3ZGUzYTBjODkzZWUyZjkxM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAli4bYyWlw/vG6+ZvoZnj0f5J4V2rerPfofQaIfvaCQLMwwYx
mi2QDbSQXKW7KQSsFfxHJ89jMJH59S5PTyIISPwppXYBSVWNsPTScRKvRjYstPTx
+Yy5aLSiFV0oDw3pOK5ptVs/BLRkiv6Owv7NpfVFmdLbtV8CqNUgUTizLOmclAvU
zj1Shz7QB7wgT3D/5Il6ZHbmaRAq7Irs2VnsEjxp0FJy3JUd7+LcidRInHvxe6V7
8D3FSpUkaHTSpMJ6PKmhmKyW6H3UQ8TOrrY6Qhb1gw0WIlEqC6QiWtEZMdl0G8tT
CMGAb7JHt5rW30yy4spiN3GNHPouEG+sBZXmRQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFKPSp/dyNbGyH46+m2w8fYU3LF5eMB8GA1UdIwQYMBaAFNU0yLFFNHXVEn72
c689VA8nvwH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTAzYTNl
YTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3OWFjMGEtZTMyNy00Mzg4LWI5YzgtNDRkZmUy
MzA3YWIyLzk0NjNiOTVjZGI1ZjgyNTJhMTM0NTdkZTNhMGM4OTNlZTJmOTEzYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc5YWMwYS1lMzI3LTQzODgtYjljOC00NGRm
ZTIzMDdhYjIvMTAzYTNlYTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEArM+rAMEArM+2AMEBLM+4DANBgkqhkiG9w0BAQsFAAOCAQEA
Ak8+UL0r0/BXiCtlNijmdmXx/aIB/SxMeq9STlc4hydIPsBPJIqiv3eB8T2/A5Le
w47szEfpXOZ3ppFbr0CbgFymqXekq15c8VUqCJNyZ97NCpvsjhcXXtkP68nTRL18
S6z8lPabCDOh+diGtz1XI3ctRvrx5tG2zknDSm5Ykrmw516Jeam5++JH0gNv3YpC
bnwoWT0w70qg9j/Ng3fI8AMhjrQeAJZeHqQlHzVOmqgU9N+z1RHqRujDV407MEmT
LqvDt2CS4Hn9sq2jbZ62qfxGen1wvJHveQ5ccxmNbyR4gsj6gCmz6sW1gYDbNccy
YtzagnsKYyBexR4zoPWCcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org