Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/48ca8c169842bbd6bc052e3a8d1057e449b960f4.roa
File:                     48ca8c169842bbd6bc052e3a8d1057e449b960f4.roa (raw, json)
Hash identifier:          1IX86u3UJZS8hTV1tokFirllktmNaAgQhEMHTJfjYUI=
Subject key identifier:   48:FB:48:08:0A:B7:99:94:8C:86:99:6A:B6:DD:CE:9A:72:0C:1A:17
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       1934D6
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/48ca8c169842bbd6bc052e3a8d1057e449b960f4.roa
Signing time:             Mon 11 Jul 2022 20:00:39 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     3132
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651926 (0x1934d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=48ca8c169842bbd6bc052e3a8d1057e449b960f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:8c:68:ff:c9:ba:a7:3f:5e:f4:fe:43:7f:
                    53:02:67:81:ee:8a:79:b5:12:f2:2f:ac:92:87:44:
                    3a:72:05:82:b0:eb:1f:d2:71:0b:54:28:91:72:dd:
                    3a:74:e7:8f:42:79:e0:f9:97:31:e0:b5:16:49:9e:
                    d1:51:4c:22:fa:70:aa:12:64:02:09:46:e3:f4:76:
                    d5:36:b4:75:cf:4a:8b:96:6b:1d:a6:3a:d8:a2:fc:
                    28:87:c2:8b:6d:db:ef:f0:81:24:8f:28:ec:bf:27:
                    e2:7e:3f:92:dd:3d:52:42:2f:ae:26:12:fc:5d:20:
                    f7:f7:10:b0:72:43:72:b7:43:95:29:63:76:50:26:
                    05:49:24:46:33:cc:34:f0:27:36:c2:7c:13:7b:17:
                    d6:5c:91:6a:b0:dd:f5:ad:60:f4:11:ee:bd:f0:bf:
                    d7:34:59:f0:ee:a4:40:f7:72:26:e8:25:dc:a1:34:
                    b3:a2:a0:42:94:80:2e:45:0d:d3:72:47:83:09:6b:
                    f2:93:71:d9:ec:fb:91:2d:b5:5a:4d:23:2d:8b:42:
                    66:3c:71:8b:c5:1e:7f:31:a5:6e:e1:b5:88:7b:df:
                    c9:cd:25:4d:39:4a:90:ad:ac:ef:17:3d:dd:a9:44:
                    fd:6f:7d:4e:97:d3:75:fc:a3:8d:01:f2:a1:36:9a:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:48:08:0A:B7:99:94:8C:86:99:6A:B6:DD:CE:9A:72:0C:1A:17
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/48ca8c169842bbd6bc052e3a8d1057e449b960f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:da:f0:ee:cf:db:ca:c5:2f:33:3d:9b:7f:c6:85:00:f1:49:
         a2:78:08:a6:0f:91:6d:0c:95:d1:90:09:a3:26:79:31:88:78:
         8e:2d:7d:f5:00:a4:23:90:21:73:3d:dc:ba:c8:1e:e1:67:c2:
         fc:ef:b6:9b:c5:c6:9e:d9:d2:76:94:dc:d4:25:1c:88:fa:87:
         d7:3e:da:16:fb:06:4f:35:2c:72:ed:cb:77:47:20:45:18:8e:
         5d:27:20:0a:cd:f2:46:1e:a6:49:85:49:71:bf:42:d8:7b:cf:
         e1:d4:12:b0:18:c6:42:43:d2:94:34:c8:40:25:31:7c:9d:56:
         67:82:8c:22:cb:bb:91:c8:a0:71:07:4d:68:28:ed:c7:55:df:
         9b:2a:b3:54:95:b2:17:09:bf:42:b9:fc:0a:a7:b6:65:d7:d5:
         c4:90:68:e8:32:d6:a3:4a:b5:97:97:94:eb:4f:77:db:a5:1e:
         6d:11:f7:1d:e8:a2:ef:5c:59:f6:ee:6c:3e:1d:8b:c4:6f:4b:
         2a:45:8d:20:6d:5e:ed:84:bd:57:05:cf:4b:d0:6a:5d:15:61:
         b6:cc:f5:80:b9:55:26:82:d6:59:8d:3b:0d:ad:17:5f:14:9b:
         7b:95:ee:93:f7:55:c1:21:20:79:f4:d1:aa:8d:83:f3:2a:1f:
         7e:42:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org