Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/d85ff39183cb25dee360c2e615335764fe752d39.roa
File:                     d85ff39183cb25dee360c2e615335764fe752d39.roa (raw, json)
Hash identifier:          XvH1yVqiFvhd5ff7GGGdBEiYgZTug3DnX7jIClXxXTQ=
Subject key identifier:   9D:02:0C:97:18:1A:5D:61:B2:59:C2:35:FD:C2:79:7B:D8:58:CD:11
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1464D0
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/d85ff39183cb25dee360c2e615335764fe752d39.roa
Signing time:             Tue 11 Jan 2022 00:27:21 +0000
ROA not before:           Mon 10 Jan 2022 03:00:00 +0000
ROA not after:            Wed 10 Jan 2024 03:00:00 +0000
asID:                     263195
IP address blocks:        179.42.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336528 (0x1464d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Jan 10 03:00:00 2022 GMT
            Not After : Jan 10 03:00:00 2024 GMT
        Subject: CN=d85ff39183cb25dee360c2e615335764fe752d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:42:1e:55:b7:bf:90:72:93:a8:5c:4b:3e:
                    f2:cc:f1:3f:1d:e0:55:2a:db:59:10:bc:b0:d1:b1:
                    be:be:fa:f8:8a:5d:40:75:25:b8:1c:3d:47:a8:0b:
                    c1:98:56:dc:9d:bc:4f:be:8a:06:75:e5:3d:8c:2a:
                    15:a5:4d:b8:15:3e:7d:ec:a4:bb:f2:c0:dc:53:f7:
                    68:4e:80:43:52:a3:59:e5:19:e0:23:eb:b4:f6:45:
                    f4:a3:2a:28:d5:41:f6:6d:ce:27:3d:f2:9e:eb:53:
                    ae:a6:d8:ea:32:69:af:71:02:e6:8c:b2:d6:e8:5e:
                    40:82:ae:ce:46:7d:59:16:1f:ef:48:bc:4c:d2:33:
                    6e:e8:49:d7:a6:f3:fe:a5:e9:ac:59:dc:c0:bf:cc:
                    21:b8:6f:31:00:af:95:a4:cf:f4:30:5c:05:e7:36:
                    bd:d3:f5:24:04:a5:60:05:5c:0d:f4:06:ff:8a:c4:
                    1c:0e:ed:ef:fe:00:9a:cb:56:e0:ac:d1:0d:5f:2a:
                    1f:2d:85:0e:66:6b:2e:dd:92:69:c5:19:82:bf:63:
                    a6:81:fe:f2:1a:cb:9e:1d:a6:23:2b:d2:86:3a:73:
                    e9:8f:9c:bc:cc:e4:e2:8e:f1:b8:56:29:ab:67:93:
                    36:4a:8e:1b:9b:16:8e:88:6f:6c:5b:46:3a:52:61:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:02:0C:97:18:1A:5D:61:B2:59:C2:35:FD:C2:79:7B:D8:58:CD:11
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/d85ff39183cb25dee360c2e615335764fe752d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:38:58:f5:3f:86:62:17:24:1e:45:8d:e3:e1:2c:bc:22:a3:
         4c:d8:0e:60:2e:4f:93:76:99:53:90:46:3d:2d:ca:a2:92:0c:
         81:14:33:ad:cb:d3:da:98:03:1a:4f:59:fc:07:10:aa:27:89:
         a8:55:5f:8f:f4:6f:af:63:d6:ab:eb:85:ea:c8:14:b0:7e:6a:
         ce:91:f1:19:3f:8a:5a:88:c2:90:fc:9c:f4:65:31:10:7e:69:
         2a:82:f9:2e:ca:c0:ac:d0:ca:b4:7e:84:47:3c:ce:04:34:43:
         36:20:a5:70:8f:ec:25:43:f6:69:9d:6a:39:f1:19:79:6a:6a:
         4a:08:36:23:e2:00:46:fa:0a:0c:13:dd:d1:d3:9f:f6:83:22:
         a8:2e:c1:a6:2e:19:96:7e:a4:d2:46:2c:35:73:e6:1f:d8:2c:
         e2:d5:94:12:13:85:fd:2d:92:2f:c9:69:7d:dd:fb:23:d0:6a:
         5b:46:48:a3:0d:b8:ea:4b:bf:67:9b:e1:6a:c5:7b:c7:37:16:
         5b:25:72:10:ea:de:1c:8b:5c:d6:8a:b0:83:75:78:66:b8:10:
         1f:26:12:86:09:d6:e7:87:f1:7a:d7:29:06:86:88:4e:1e:8f:
         62:0a:19:99:4f:11:fd:9d:11:eb:45:15:91:25:20:ad:a7:65:
         0a:c5:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org