Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dec1e7a78e3ad00ff8ec2a3538e3ff44ba5a6e99.roa
File:                     dec1e7a78e3ad00ff8ec2a3538e3ff44ba5a6e99.roa (raw, json)
Hash identifier:          mV3PW7VxrCs6R+aLXqSlCRbyVj3j3gzusEbeA6mCp2M=
Subject key identifier:   6E:99:50:C7:57:74:B1:8C:1A:B0:E7:B4:74:10:82:C1:C3:CE:28:4B
Certificate issuer:       /CN=dbb33696dfeda6014d72e7e580e08c1dc7180b30
Certificate serial:       05AF09
Authority key identifier: CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dec1e7a78e3ad00ff8ec2a3538e3ff44ba5a6e99.roa
Signing time:             Wed 07 Feb 2024 01:39:43 +0000
ROA not before:           Wed 07 Feb 2024 01:39:43 +0000
ROA not after:            Sat 07 Feb 2026 01:39:43 +0000
asID:                     271825
IP address blocks:        179.42.94.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372489 (0x5af09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb33696dfeda6014d72e7e580e08c1dc7180b30
        Validity
            Not Before: Feb  7 01:39:43 2024 GMT
            Not After : Feb  7 01:39:43 2026 GMT
        Subject: CN=dec1e7a78e3ad00ff8ec2a3538e3ff44ba5a6e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:7a:2c:03:da:b7:6e:4c:81:e5:7b:da:2c:
                    fd:d6:3c:a5:cb:bc:05:21:d8:9c:4b:fa:b7:ae:23:
                    8a:5d:df:ef:c4:f6:c8:0c:fa:a9:7c:81:af:a0:16:
                    ce:26:5a:19:45:4b:c8:3a:23:ff:9f:6d:6e:3b:b0:
                    0a:94:e4:44:0a:a3:22:52:9f:1a:07:2d:93:f2:d9:
                    f0:f7:05:b4:24:23:ca:76:4f:52:60:ce:35:c3:6d:
                    30:f3:a7:93:c1:e0:39:95:6a:67:49:b7:4c:3f:c2:
                    33:f9:17:b2:ab:73:13:b3:e8:a3:d9:24:55:d2:1b:
                    28:c2:fb:4e:35:cc:0f:f7:d9:51:c5:96:94:f5:06:
                    e1:77:4d:b2:09:01:63:6f:13:e0:b5:ce:b6:45:f6:
                    76:50:3c:9d:10:b8:4e:bb:ce:eb:6f:db:6f:53:f5:
                    09:7e:b3:2f:51:bd:89:f3:5a:b7:c1:41:5b:22:8c:
                    25:c6:77:d8:b7:93:f6:6c:27:0c:66:87:ac:49:ca:
                    c4:88:fc:0f:b9:2b:c6:78:0f:61:f3:dd:73:3a:ae:
                    3f:de:15:c0:57:be:ce:7c:ab:cd:7f:26:e9:87:28:
                    29:f2:f6:bb:89:10:2c:33:6b:8d:ab:fb:e0:5d:a4:
                    50:48:a6:a3:33:23:95:3d:eb:32:65:46:f5:c3:97:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:50:C7:57:74:B1:8C:1A:B0:E7:B4:74:10:82:C1:C3:CE:28:4B
            X509v3 Authority Key Identifier:
                keyid:CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dec1e7a78e3ad00ff8ec2a3538e3ff44ba5a6e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dbb33696dfeda6014d72e7e580e08c1dc7180b30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:81:22:47:1a:6e:38:9b:51:62:84:29:21:7a:7f:95:bc:cd:
         70:84:d8:a6:9f:aa:98:13:e1:78:98:6e:52:c8:94:61:26:c9:
         bf:58:7e:82:23:7d:87:05:bf:5f:e7:84:b1:f2:e8:97:2e:dc:
         33:3f:fa:d9:7e:6a:c7:56:a9:d1:43:4b:5f:3d:06:53:45:0a:
         e0:9c:d8:3b:48:b6:8a:2f:79:6c:26:49:71:11:6a:01:89:6b:
         f5:ef:f4:42:52:94:fd:ad:ad:44:a8:63:a6:db:ef:52:ff:f5:
         cb:62:9d:14:56:2e:65:73:77:99:29:38:97:c9:95:3d:4d:f4:
         57:19:36:55:5b:bd:0b:3f:5d:44:d4:b3:37:c8:5e:ef:5d:43:
         5a:43:f8:79:a7:d5:61:27:01:31:77:25:8b:df:fc:2d:26:d6:
         99:1a:87:b5:ed:ed:cc:d8:03:90:86:14:a1:a0:65:55:af:52:
         e1:97:e1:da:9b:a7:75:1d:57:60:4e:be:f8:2f:16:15:4c:e2:
         01:b0:2e:18:90:1f:b9:32:e6:ef:22:a8:1b:42:39:74:31:f2:
         b2:8d:be:2b:87:06:67:41:b2:e9:ee:ac:1b:9c:86:2d:16:15:
         f2:80:57:3c:5a:da:ed:f9:c4:53:77:8f:05:b2:3a:8e:aa:f5:
         35:28:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org