Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d25beee0be279fad52f08d251e4717862dbf4f17.roa
File:                     d25beee0be279fad52f08d251e4717862dbf4f17.roa (raw, json)
Hash identifier:          Z3YncNf0zjLUASa34My+wKEte/WAErEnkJ7MUq2CRfU=
Subject key identifier:   D9:1B:EF:6E:B3:91:FC:33:4B:35:13:69:C5:DF:9A:25:7D:8F:B0:57
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0A3FD5
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d25beee0be279fad52f08d251e4717862dbf4f17.roa
Signing time:             Wed 08 Mar 2023 15:19:20 +0000
ROA not before:           Tue 07 Mar 2023 15:18:55 +0000
ROA not after:            Sat 08 Mar 2025 15:18:55 +0000
asID:                     266728
IP address blocks:        179.0.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671701 (0xa3fd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: Mar  7 15:18:55 2023 GMT
            Not After : Mar  8 15:18:55 2025 GMT
        Subject: CN=d25beee0be279fad52f08d251e4717862dbf4f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:03:b8:82:e7:82:41:c8:58:9d:96:d8:6a:
                    c7:5c:17:4f:96:1a:2a:9b:d4:36:2d:05:8e:58:04:
                    2d:6c:86:d6:53:e2:44:7a:39:14:f0:b6:77:34:62:
                    8b:58:fc:fa:9d:95:a1:a7:a1:b0:30:52:3e:18:39:
                    e7:62:59:8d:a9:45:a0:dd:88:d8:3d:23:27:6d:d3:
                    9f:bf:d0:b5:be:2d:a1:eb:80:52:a3:d3:09:21:06:
                    e8:05:ee:de:fa:e8:2c:8a:fb:b2:2a:9b:c6:09:d6:
                    06:c7:23:9f:6e:aa:9d:8e:14:aa:c5:41:b5:7d:71:
                    07:66:66:ea:d9:29:d7:03:6e:f5:ce:7d:3b:03:99:
                    15:ba:79:d5:7e:fc:e7:7c:f3:ae:f2:e9:20:09:61:
                    99:d5:78:1a:ae:5d:3f:bf:9a:2d:37:5a:88:5d:16:
                    ae:9c:62:b0:1c:63:01:a7:80:34:5d:00:65:81:dc:
                    4c:c6:89:69:7e:16:7f:ee:59:00:7e:e1:bb:96:ed:
                    83:84:05:21:8a:dc:36:ef:8d:2b:1e:a9:c7:07:e3:
                    22:94:60:39:e7:99:d1:54:bd:85:3a:1a:77:43:c3:
                    3b:a9:67:36:26:86:65:f9:02:94:40:70:b3:ad:c7:
                    3c:8b:ac:c2:47:dc:75:9d:cb:43:33:27:ef:31:e5:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:EF:6E:B3:91:FC:33:4B:35:13:69:C5:DF:9A:25:7D:8F:B0:57
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/d25beee0be279fad52f08d251e4717862dbf4f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:1f:78:bc:2d:d1:e0:36:c6:89:49:3f:87:59:cd:06:77:
         0f:e3:8c:ee:31:6f:bd:e5:6d:16:56:62:16:5a:7e:ad:03:40:
         a0:4d:de:a4:12:9c:45:2b:94:a3:5e:fb:32:17:b0:96:79:58:
         b2:ee:cb:b4:80:c5:64:a6:de:9a:22:ac:1a:14:59:17:a4:b1:
         39:26:41:e8:5d:34:6f:d5:d3:54:17:e4:5d:53:44:fb:a5:22:
         80:6b:9a:67:c4:6b:5b:3f:e7:b0:a3:04:21:9e:0b:b2:96:53:
         7e:9b:ac:19:d8:48:37:b8:f0:ec:b7:f1:0c:12:1f:eb:21:20:
         eb:16:4d:c7:8a:fa:bf:c3:63:f1:cf:8a:ec:7b:02:8e:f5:a0:
         a4:2d:37:59:c3:18:a5:27:06:98:5b:78:8f:b5:8a:d9:88:1a:
         3e:52:da:e1:f5:c2:44:1e:68:5e:17:40:2f:8e:0d:fd:d7:75:
         56:49:86:ab:5e:0e:73:5f:0f:d9:a4:37:13:26:14:60:1b:86:
         97:d7:a3:71:73:c9:73:48:d8:2a:02:e1:ba:22:24:ae:31:39:
         02:fe:93:1c:32:ee:50:10:cf:fb:56:9a:1f:7b:9b:60:29:5d:
         d1:5c:b9:8e:51:d1:19:e9:50:9d:3a:da:8f:66:e7:dd:d1:ff:
         6d:a3:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org