Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa
File:                     ca602101a800bc7b68608de44ce4a391b58d24f2.roa (raw, json)
Hash identifier:          F9PTK7R7uaE6ncQAuLvZvIGuv3rjewWpmbXvZYxLhC4=
Subject key identifier:   13:82:A9:5B:30:E2:CB:53:58:61:BE:4C:ED:DC:70:3C:CB:16:3D:5D
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       1687E8
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa
Signing time:             Wed 08 Nov 2023 03:00:28 +0000
ROA not before:           Wed 08 Nov 2023 03:00:28 +0000
ROA not after:            Sat 08 Nov 2025 03:00:28 +0000
asID:                     271773
IP address blocks:        179.18.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476584 (0x1687e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Nov  8 03:00:28 2023 GMT
            Not After : Nov  8 03:00:28 2025 GMT
        Subject: CN=ca602101a800bc7b68608de44ce4a391b58d24f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:1e:74:10:83:0f:52:9a:88:ef:90:e5:a4:
                    3f:36:17:c8:7e:e6:f7:a2:a2:40:2d:5a:b4:45:fc:
                    42:e8:46:dc:54:3b:23:b6:5d:0b:62:9b:63:e7:74:
                    fb:75:44:3b:7f:90:ea:c3:2c:82:26:ce:fe:58:eb:
                    62:6c:c9:86:53:82:07:02:72:78:76:5f:74:71:ac:
                    62:a9:a5:b1:fa:2d:e2:8f:3b:c4:c7:08:48:a0:fc:
                    30:eb:b9:0b:41:2c:d8:49:bc:3a:4c:1e:13:3a:19:
                    ea:e4:e8:99:16:8b:e1:ce:82:c3:36:f9:64:74:d4:
                    9d:ad:05:78:5d:03:44:b6:43:2f:d0:2e:30:ae:3b:
                    6e:7e:47:ab:6e:32:2b:a6:5b:e6:5e:99:16:27:a0:
                    a4:97:09:74:a3:13:04:1f:fa:31:3a:f9:a9:4a:7e:
                    70:9c:e7:d5:c5:b0:79:30:1c:85:08:93:5d:10:70:
                    26:66:8c:9c:fa:47:d6:e4:b4:15:f1:ea:a2:68:2a:
                    cd:35:14:f9:37:7d:04:e4:16:bd:6e:fa:f5:f2:de:
                    f7:f4:8d:07:ed:38:f0:6d:e9:c5:b0:91:54:68:b5:
                    26:fc:7a:b1:9d:5c:ad:e0:85:f1:37:0b:e4:6b:8d:
                    65:88:68:33:93:38:b9:c0:e2:2b:20:fd:a0:fb:3f:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:82:A9:5B:30:E2:CB:53:58:61:BE:4C:ED:DC:70:3C:CB:16:3D:5D
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:cc:d4:53:b5:98:a7:01:03:96:45:22:09:2d:f0:64:34:c0:
         94:65:94:ab:d1:67:36:13:3f:fd:f1:ae:72:6e:14:60:08:34:
         bf:c6:da:04:38:c1:bc:5b:43:14:ea:92:a9:32:63:3f:bc:d3:
         35:e1:d3:11:c7:6a:bc:69:3a:33:90:2b:cc:5a:c0:da:cb:26:
         42:04:60:82:1d:f5:36:b3:ba:e5:22:fa:34:fc:98:df:88:dc:
         62:a3:30:78:06:d6:af:d9:66:41:ba:be:3e:05:45:9e:27:84:
         22:7d:eb:8b:b2:ce:49:ca:0a:56:a4:1e:2a:43:46:31:52:6d:
         46:40:3e:32:1c:56:f9:76:3f:98:d1:95:07:d2:07:9b:b9:42:
         74:c0:76:2e:d2:fe:61:99:08:b2:71:9b:94:2a:5a:62:e4:e4:
         89:c0:a8:ab:a6:a5:71:a8:c5:e8:9f:eb:f9:f2:c5:30:72:4c:
         19:7f:21:d6:df:a4:4a:61:10:bc:17:5f:76:00:b6:2f:c2:35:
         a7:09:32:0e:c1:80:cd:c9:87:6f:30:ff:55:6b:74:53:15:ba:
         70:b6:1e:c3:9b:9e:5f:5d:bc:29:ac:d1:dc:94:ce:50:76:32:
         6e:a0:65:90:7d:cb:62:b8:0f:57:27:45:e4:c8:85:be:33:b5:
         d2:36:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org