Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa
File:                     4c3408f23847fd651bf1b1de609de433a86ca989.roa (raw, json)
Hash identifier:          cPH7mpAUtfWTYsR0Rj+VYpkfNRh+c8WOCEMrzd5VECY=
Subject key identifier:   28:F9:85:58:89:17:01:80:2B:99:BE:27:C6:80:57:D8:FC:01:40:56
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       202C93
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa
Signing time:             Fri 20 Jan 2023 15:19:50 +0000
ROA not before:           Wed 28 Apr 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.0.0/21 maxlen: 24
                          179.1.8.0/21 maxlen: 24
                          179.1.16.0/20 maxlen: 24
                          179.1.32.0/20 maxlen: 24
                          179.1.48.0/20 maxlen: 24
                          179.1.64.0/20 maxlen: 24
                          179.1.80.0/20 maxlen: 24
                          179.1.92.0/22 maxlen: 24
                          179.1.96.0/20 maxlen: 24
                          179.1.112.0/20 maxlen: 24
                          179.1.128.0/20 maxlen: 24
                          179.1.176.0/20 maxlen: 24
                          179.1.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108563 (0x202c93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Apr 28 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=4c3408f23847fd651bf1b1de609de433a86ca989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:68:7e:3f:88:6a:33:f4:1b:3b:d0:d0:38:
                    25:31:9b:ef:0e:71:df:ce:d7:58:30:ba:09:fd:84:
                    74:eb:96:62:5b:65:6d:62:0f:b4:48:c1:43:d1:4b:
                    59:0b:14:bc:41:96:73:ee:0b:26:98:a0:38:2b:45:
                    79:40:d2:64:ff:cb:90:c4:5f:27:a9:5a:a5:2f:01:
                    2e:1f:75:e3:3f:33:60:fb:84:b5:db:e1:d9:8d:4a:
                    56:f1:66:61:c6:18:03:29:51:64:25:a2:e3:22:a4:
                    2e:d0:61:b8:1a:52:c4:3c:69:bd:17:e3:bd:fe:f2:
                    4c:5a:9b:d2:8c:7d:d1:a3:b4:22:ee:16:1b:b3:33:
                    17:e8:3d:a1:cf:2f:c4:7d:6c:eb:60:bf:22:38:e3:
                    94:dc:32:63:c9:77:d0:b8:2b:ce:2e:18:3d:17:28:
                    28:1a:0b:13:38:c2:1e:7a:7e:98:24:9a:b0:23:d2:
                    6e:fa:85:54:37:3b:a9:80:38:58:8f:88:4a:82:ee:
                    95:91:b9:c6:e1:e5:49:ca:70:33:64:d2:26:a6:78:
                    0a:b9:49:8f:95:ac:f1:94:9c:fd:f1:2b:48:e7:30:
                    83:08:fc:e7:3b:53:c4:15:67:d2:f7:cf:35:69:d3:
                    29:ee:1d:d7:a2:66:8c:02:9e:57:75:49:ad:49:ee:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F9:85:58:89:17:01:80:2B:99:BE:27:C6:80:57:D8:FC:01:40:56
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.143.255
                  179.1.176.0-179.1.207.255

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:c8:61:e8:7a:82:42:79:bc:cc:f3:ec:8e:b0:a5:08:41:
         cc:91:1e:88:25:47:aa:cc:ad:55:be:ca:a5:ef:d1:9a:45:80:
         79:d9:c8:bf:8d:f5:5f:f1:80:ec:6e:d6:d7:84:35:fc:1f:56:
         c2:db:fe:96:25:e6:00:0c:e3:1e:d2:4d:20:d9:e2:c4:1c:20:
         cf:eb:79:51:de:74:12:27:82:75:ef:81:b9:3b:a3:c7:09:28:
         26:e8:78:75:a5:1a:73:d5:0d:f0:a0:2f:6a:0e:41:0e:02:40:
         ca:e8:ed:c6:7a:8a:f7:c4:a8:e6:8a:31:e0:04:81:73:ba:7b:
         70:d4:5b:f1:42:60:05:67:7b:2c:ac:bc:53:b5:a7:64:63:60:
         15:7f:28:f8:88:9f:6e:57:4c:27:42:55:ff:9d:47:84:76:9d:
         24:35:8b:82:05:0c:35:14:dd:c9:0a:04:2f:6d:4c:0c:e5:08:
         25:dd:50:0a:46:04:01:d7:ef:a6:53:94:3d:01:05:07:94:9f:
         83:e5:47:db:8f:44:af:3c:49:3e:df:10:85:66:6b:38:f3:eb:
         aa:c4:8a:e4:db:2b:f3:f4:8a:47:ed:d9:81:22:cd:16:c5:d2:
         c1:04:59:fe:96:4a:f0:b0:02:78:95:19:5f:c5:ed:e2:a1:85:
         6c:12:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org