Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/56279e6181f1515e3520ce7c09018833ccd01fa6.roa
File:                     56279e6181f1515e3520ce7c09018833ccd01fa6.roa (raw, json)
Hash identifier:          vNExJRzrAJyr2YSm6osJehD3NAos4MO6cbJMeDIhOcw=
Subject key identifier:   D9:71:6A:EC:1D:1C:11:64:96:61:78:25:16:F9:F8:FA:6A:0F:88:70
Certificate issuer:       /CN=9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c
Certificate serial:       277A1C
Authority key identifier: 10:20:8A:1B:7D:3F:A9:50:0B:C8:89:3E:E8:8D:7A:9C:C7:3F:62:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/56279e6181f1515e3520ce7c09018833ccd01fa6.roa
Signing time:             Tue 19 Mar 2024 17:41:13 +0000
ROA not before:           Tue 19 Mar 2024 17:41:13 +0000
ROA not after:            Thu 19 Mar 2026 17:41:13 +0000
asID:                     263224
IP address blocks:        177.91.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587164 (0x277a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c
        Validity
            Not Before: Mar 19 17:41:13 2024 GMT
            Not After : Mar 19 17:41:13 2026 GMT
        Subject: CN=56279e6181f1515e3520ce7c09018833ccd01fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:29:40:4a:f1:01:e3:b6:20:ea:46:30:ba:
                    da:9b:af:b8:c9:38:4a:6b:ba:c3:3c:dc:01:b2:eb:
                    83:04:67:1a:31:ac:11:de:1f:a7:8a:a9:9d:cf:89:
                    3e:5b:c5:ed:c7:a1:da:bb:b3:5d:dd:49:ab:e2:8b:
                    62:62:6d:bb:bd:31:be:54:2b:0e:1a:2b:68:db:36:
                    ec:b4:f8:07:43:23:d9:b5:e5:a0:ab:2c:4a:e1:66:
                    a7:6e:38:65:2f:5e:11:fc:4f:0e:99:ff:75:9e:76:
                    7f:77:ad:e8:02:0f:ec:11:f5:9d:a1:87:ef:80:d4:
                    0f:dd:83:e4:a0:50:7f:7e:95:c0:22:59:dc:c5:aa:
                    a3:0a:b9:06:bc:77:d0:d5:79:b2:3e:f6:f7:91:53:
                    42:70:06:bb:3a:72:60:77:74:0e:f7:78:d3:3a:eb:
                    f6:b8:d2:9a:05:16:46:75:4e:8d:d2:e9:b8:53:ff:
                    f5:6f:7e:bc:34:c9:f7:2e:43:37:ca:e3:a8:31:b1:
                    42:d3:4c:60:32:ab:7f:e5:20:60:36:5a:04:06:99:
                    50:29:a4:58:37:cc:b6:f3:af:9c:09:b6:8e:a9:ae:
                    52:a9:ba:1d:9f:62:0f:36:8b:d0:f2:93:fe:29:a3:
                    e8:c1:0e:e3:b1:39:be:81:81:f5:0b:99:c6:ac:df:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:6A:EC:1D:1C:11:64:96:61:78:25:16:F9:F8:FA:6A:0F:88:70
            X509v3 Authority Key Identifier:
                keyid:10:20:8A:1B:7D:3F:A9:50:0B:C8:89:3E:E8:8D:7A:9C:C7:3F:62:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/56279e6181f1515e3520ce7c09018833ccd01fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:42:36:b0:89:c6:e7:e1:b2:96:9c:95:c9:95:28:02:a8:
         45:a0:bb:81:b0:12:80:af:9e:7e:ba:49:fd:89:71:aa:db:52:
         d5:1d:58:70:04:23:46:ff:28:a7:af:d7:eb:95:54:58:8a:79:
         ae:cc:24:85:b1:7d:04:50:0c:43:fc:dc:01:d0:35:cd:07:7a:
         3f:7a:e1:6c:24:98:be:e0:d9:8f:f0:51:9a:52:10:63:c8:4a:
         47:af:1b:1e:6e:5f:eb:09:aa:e8:ee:14:10:3f:dc:a8:46:2e:
         2f:7a:ec:91:be:65:1b:e4:a8:f8:c1:59:bc:7b:7f:4a:ee:ac:
         78:58:2c:10:99:2d:25:c3:e1:69:d7:93:ef:3b:32:28:22:9b:
         91:0f:f4:24:43:08:50:6b:6c:b6:ac:4e:94:3b:fc:1f:ce:4f:
         8e:8e:2f:48:95:5a:dc:7b:32:e7:88:57:40:0c:6a:bf:e6:eb:
         11:02:a4:13:6c:29:b2:df:a2:95:0f:b8:7e:66:66:38:e8:46:
         d9:db:65:ab:12:bc:c6:d2:77:d5:d0:11:40:a6:a4:fd:98:8a:
         2f:04:26:b1:7c:c8:04:ab:22:b9:0f:80:cf:fa:77:c0:a4:a7:
         44:30:6e:a9:f6:e3:d0:15:08:39:93:20:fe:09:fa:86:bb:fe:
         2b:b4:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org