Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/8fa7f70b2c3ae8a442457a0a9d7fd56be097d8c5.roa
File:                     8fa7f70b2c3ae8a442457a0a9d7fd56be097d8c5.roa (raw, json)
Hash identifier:          fl8U43N7Zv0JW9QqYGc+8iBlLCLksxDf9ScY6iysDtE=
Subject key identifier:   F4:32:6D:8F:2A:4F:03:84:86:2A:15:54:2D:B6:5D:AD:E4:03:9E:69
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F3AC7
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/8fa7f70b2c3ae8a442457a0a9d7fd56be097d8c5.roa
Signing time:             Mon 16 Jan 2023 22:55:42 +0000
ROA not before:           Tue 04 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.0.0/21 maxlen: 24
                          179.1.8.0/21 maxlen: 24
                          179.1.16.0/20 maxlen: 24
                          179.1.32.0/20 maxlen: 24
                          179.1.48.0/20 maxlen: 24
                          179.1.64.0/20 maxlen: 24
                          179.1.80.0/20 maxlen: 24
                          179.1.80.0/24 maxlen: 24
                          179.1.81.0/24 maxlen: 24
                          179.1.82.0/24 maxlen: 24
                          179.1.89.0/24 maxlen: 24
                          179.1.91.0/24 maxlen: 24
                          179.1.92.0/22 maxlen: 24
                          179.1.96.0/20 maxlen: 24
                          179.1.112.0/20 maxlen: 24
                          179.1.115.0/24 maxlen: 24
                          179.1.127.0/24 maxlen: 24
                          179.1.128.0/24 maxlen: 24
                          179.1.129.0/24 maxlen: 24
                          179.1.130.0/24 maxlen: 24
                          179.1.131.0/24 maxlen: 24
                          179.1.132.0/24 maxlen: 24
                          179.1.133.0/24 maxlen: 24
                          179.1.134.0/24 maxlen: 24
                          179.1.135.0/24 maxlen: 24
                          179.1.192.0/18 maxlen: 24
                          179.1.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046663 (0x1f3ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May  4 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=8fa7f70b2c3ae8a442457a0a9d7fd56be097d8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:d7:22:3a:2e:bb:d0:57:6f:b4:8b:f2:9b:
                    fa:e3:4a:2a:df:50:df:93:9d:30:7e:d2:1f:26:87:
                    ed:1a:d0:8f:d1:98:7c:2d:dd:83:43:8e:55:65:a8:
                    d7:17:b2:c2:12:66:f1:59:3e:81:62:26:c6:42:9e:
                    10:77:5b:4e:d4:1d:27:52:14:dc:58:f3:19:62:94:
                    36:35:9f:30:83:51:b1:13:28:aa:32:ba:6e:d9:43:
                    b0:27:75:e1:49:4a:e4:78:18:56:6d:bf:70:cc:fa:
                    98:8c:3e:da:6b:88:f6:07:3a:38:b3:fd:be:65:5b:
                    d2:4e:ef:20:e2:80:ab:54:cf:4f:73:d3:a8:16:ec:
                    9c:4c:83:14:d9:82:33:29:3f:df:78:36:b2:ce:60:
                    f0:a1:67:2f:4d:9a:66:de:35:e2:c4:47:d8:11:ce:
                    2f:42:43:a0:62:83:ed:19:42:4c:7e:d3:54:8d:9d:
                    7c:c7:7d:49:34:25:ba:35:aa:2b:cb:e3:8c:9a:c0:
                    b8:00:35:c3:8f:d2:2b:47:9f:ea:8f:89:ec:57:a8:
                    4c:7e:b4:58:4a:08:15:71:33:5b:9a:cb:d6:1d:c4:
                    23:92:26:6a:dc:f1:44:bf:8f:f4:af:9c:e9:92:da:
                    f6:99:b6:38:1b:2d:d4:8c:66:6a:6d:4b:9a:6e:c5:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:6D:8F:2A:4F:03:84:86:2A:15:54:2D:B6:5D:AD:E4:03:9E:69
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/8fa7f70b2c3ae8a442457a0a9d7fd56be097d8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.135.255
                  179.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:5a:63:06:cd:df:a1:15:19:45:70:12:45:f4:e2:2c:cf:
         7b:fa:6e:fc:d8:1a:cb:33:ee:28:f1:7c:5e:20:c5:f5:0e:9c:
         e1:7c:11:ab:1e:6f:46:11:3f:f4:64:4b:0b:88:e0:1e:c6:0c:
         b9:f7:25:e5:29:fd:00:33:a3:d0:eb:31:9c:b7:93:62:2c:9f:
         e6:ea:2c:93:ef:5c:e7:74:cd:30:50:1e:78:32:30:8c:a4:3c:
         ba:21:19:d9:ee:79:34:24:86:43:a8:af:56:6a:45:ce:34:01:
         36:ea:5d:40:91:21:9e:0c:0d:c5:de:54:dd:df:e8:cc:57:76:
         e1:47:d1:52:56:9a:a6:8a:0a:2d:b1:77:f5:ae:7f:21:29:a3:
         7e:6f:b5:7c:4c:57:b6:10:64:13:77:09:0c:28:e2:dc:b7:da:
         79:19:00:b6:51:cf:55:e1:6f:66:0f:8c:0e:ee:25:3e:af:f1:
         7d:89:91:2e:3a:d4:71:61:41:6c:c0:ac:2e:76:d4:ab:d7:e8:
         2e:81:5d:b6:bd:3f:1e:f6:95:88:41:5d:69:a3:53:91:69:b4:
         1c:19:66:8b:2e:a0:d0:d6:c3:0f:08:da:b3:70:75:0e:85:5e:
         6f:fe:e3:17:f7:e6:8b:f3:9f:c8:9d:bc:8f:22:86:f8:8d:25:
         eb:a7:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org