Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/b9415e563a2f90d46adcfd0420b83b4b9e717016.roa
File:                     b9415e563a2f90d46adcfd0420b83b4b9e717016.roa (raw, json)
Hash identifier:          02tJJB3OWOPAlijzZbAxiYhzyPNYO6hQqTjpVProNis=
Subject key identifier:   57:1A:91:41:07:A5:CC:F5:4E:F6:C3:A5:B2:18:4B:53:A5:A4:36:E0
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       149BFC
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/b9415e563a2f90d46adcfd0420b83b4b9e717016.roa
Signing time:             Tue 08 Feb 2022 22:05:50 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/22 maxlen: 22
                          179.0.40.0/24 maxlen: 24
                          179.0.42.0/23 maxlen: 24
                          2803:fc10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350652 (0x149bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=b9415e563a2f90d46adcfd0420b83b4b9e717016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:20:80:e2:6e:4d:41:a5:74:46:89:4b:d0:
                    f6:40:df:1b:ea:aa:16:31:d4:ad:5c:81:6d:37:16:
                    c1:56:02:a6:a6:a6:e7:fa:e3:8d:93:10:bd:ab:55:
                    31:a2:52:6f:be:e7:4f:f3:cd:2f:99:29:fb:14:f9:
                    3c:48:38:2c:21:3d:fe:d0:f9:e7:00:e0:6f:82:ce:
                    57:f4:4e:54:d8:28:05:0b:a7:98:ab:da:43:ae:c9:
                    1b:65:2c:f9:09:a2:c9:30:83:47:16:e8:54:82:1b:
                    f2:d2:87:a1:c5:9d:3e:4f:ec:20:41:44:e6:dc:e5:
                    f6:5e:ab:cc:20:34:f3:fe:e3:90:e3:e5:cb:fc:7b:
                    32:5b:3b:98:10:2d:36:7c:4d:ae:3e:a3:e0:ce:dc:
                    bc:c3:35:c3:73:65:b4:70:0a:a5:fd:2a:32:d2:02:
                    fe:34:08:a8:80:10:cd:f4:e5:e5:42:df:45:29:0d:
                    1e:9c:19:45:2c:6d:49:72:b4:20:2f:30:05:7f:2b:
                    92:b9:e2:fb:04:20:fb:5c:2d:58:8a:09:4c:d0:98:
                    12:2e:9c:de:ca:8e:37:e8:0f:05:b4:78:92:1c:ba:
                    8e:d4:eb:e8:d0:a9:8d:e4:ca:4d:fa:1b:77:0c:ab:
                    ec:a0:05:8a:46:41:2a:98:7d:ea:1d:08:00:e8:e4:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:91:41:07:A5:CC:F5:4E:F6:C3:A5:B2:18:4B:53:A5:A4:36:E0
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/b9415e563a2f90d46adcfd0420b83b4b9e717016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                IPv6:
                  2803:fc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:07:b8:62:48:7e:79:34:83:dc:69:e5:1e:ed:77:31:89:0c:
         c4:2d:cd:e7:e2:55:1e:65:9e:17:71:b3:88:90:80:9f:b7:cc:
         74:bf:d6:71:8c:c1:44:9a:d4:38:d2:21:1b:0a:79:16:c9:cd:
         74:e5:11:d6:50:d8:e3:93:1b:65:46:d2:34:0a:ff:18:2f:90:
         36:91:8e:26:4d:74:a7:7b:35:e1:c9:5d:ee:d9:88:08:49:f5:
         e0:ed:66:a4:bb:0e:54:dc:fc:80:1b:ee:f5:d6:02:01:12:84:
         1b:b2:6b:37:7b:e5:cd:5d:99:4c:18:8e:cf:40:d6:f8:98:d6:
         ce:f9:fc:aa:70:e3:53:43:42:70:91:d8:ad:5b:6f:66:05:d2:
         27:b8:77:a2:4e:d0:77:32:8c:a5:71:0d:cf:0b:3c:1a:82:43:
         10:e9:f8:ba:e9:fd:c9:15:95:46:85:00:da:0e:86:7e:3a:67:
         c9:09:95:bf:5f:53:8b:0b:1e:d4:a6:36:bf:fd:3d:80:ea:b7:
         35:d3:83:6c:4d:94:71:96:3b:92:8e:ae:43:48:5e:f8:6f:ad:
         8c:ff:87:96:8b:78:27:b1:dd:c6:42:c3:a5:c7:c5:8a:c0:29:
         76:62:e9:ad:2e:71:6f:33:f7:00:c9:d3:e6:da:dc:02:be:05:
         5c:1f:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org