Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/51e6eaf3867c3759287e32efdca4823372cd1753.roa
File:                     51e6eaf3867c3759287e32efdca4823372cd1753.roa (raw, json)
Hash identifier:          u3SOkSv2TwAXsj1geowWgYt39Ry4nkApqX4q8uvRCxQ=
Subject key identifier:   40:3D:07:5A:A9:32:BB:F7:0E:6F:AD:A4:69:F3:79:82:68:93:37:28
Certificate issuer:       /CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
Certificate serial:       194FC3
Authority key identifier: 04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/51e6eaf3867c3759287e32efdca4823372cd1753.roa
Signing time:             Fri 24 Mar 2023 08:31:41 +0000
ROA not before:           Thu 23 Mar 2023 08:31:41 +0000
ROA not after:            Sat 22 Mar 2025 08:31:41 +0000
asID:                     270014
IP address blocks:        177.221.140.0/24 maxlen: 24
                          177.221.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658819 (0x194fc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
        Validity
            Not Before: Mar 23 08:31:41 2023 GMT
            Not After : Mar 22 08:31:41 2025 GMT
        Subject: CN=51e6eaf3867c3759287e32efdca4823372cd1753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:da:38:4a:e2:da:90:2d:8f:05:0f:dc:72:
                    67:a0:ba:ef:4a:39:26:32:ae:da:d0:3d:5b:44:9c:
                    4a:48:4c:68:20:b7:53:34:b5:1b:03:de:63:3d:b3:
                    36:bd:9b:78:52:ac:fc:2c:d1:8a:84:f4:52:39:05:
                    49:4c:cf:51:08:4c:aa:50:6c:5d:a5:c8:9c:a6:cb:
                    17:f6:e8:98:84:f3:80:5d:e4:74:38:df:aa:4f:20:
                    fe:11:7b:d6:ff:c4:1c:19:fa:15:8d:5a:d0:ae:23:
                    88:f5:ff:86:4d:c7:78:33:1c:da:65:27:0e:7b:ea:
                    f2:c5:28:dd:cf:68:e3:5d:d8:b9:b5:77:9a:04:5a:
                    35:21:a8:7f:37:99:6c:82:4f:65:37:a2:d5:97:49:
                    3b:6b:65:11:f8:24:11:0a:0b:b1:9c:31:53:cf:85:
                    83:5e:90:3d:27:49:b2:27:7c:5c:9b:8d:83:d8:02:
                    37:fd:b2:32:c7:22:50:40:d3:98:77:f8:1b:98:3b:
                    4e:a9:6c:a6:e0:23:05:8f:2e:3a:40:09:43:bf:d0:
                    d2:19:25:21:b4:17:fa:aa:09:f1:36:1c:9f:79:66:
                    95:21:41:96:0f:b6:b1:38:57:6c:6a:dc:8a:1b:83:
                    7e:bc:a7:8d:5d:59:9e:43:af:44:cb:d2:f5:74:f9:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3D:07:5A:A9:32:BB:F7:0E:6F:AD:A4:69:F3:79:82:68:93:37:28
            X509v3 Authority Key Identifier:
                keyid:04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/51e6eaf3867c3759287e32efdca4823372cd1753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/13e46a83c82c11a5000af8536ac8d01b701f35e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:3a:b5:0b:31:1a:e3:01:f7:0b:41:d1:e4:ef:3f:34:23:bd:
         b1:fe:1b:40:ec:5e:13:d8:6d:9b:4d:05:6d:28:9d:b9:a2:1d:
         1b:93:14:f2:04:08:69:64:9c:d1:d1:9d:55:41:23:a6:94:31:
         db:aa:ff:a2:db:81:f1:59:1f:4a:76:26:88:5d:22:91:7c:3f:
         de:4b:cf:4a:f7:01:4f:25:6b:28:0f:98:aa:ab:61:64:fa:a1:
         62:bf:43:e0:b1:63:67:d3:2d:d9:c6:f3:f3:9f:24:39:23:4f:
         cb:81:2f:d7:5d:2a:f3:84:1d:61:76:ea:22:f2:49:ee:1c:f2:
         17:61:7e:bb:02:f9:dd:20:ad:c9:40:48:0a:ae:8f:41:7c:8f:
         a5:27:25:7b:d9:55:09:6f:27:9e:99:86:f4:ca:a2:37:5f:c8:
         f9:e3:e4:e6:6d:2e:25:04:46:57:4e:f7:71:74:12:c6:e0:54:
         e7:5a:5b:0a:82:02:88:68:1a:52:5f:d8:6a:9e:a2:51:c9:94:
         f2:7e:7e:d9:aa:93:3b:99:2b:b5:24:01:93:c7:35:20:f2:61:
         0b:3f:e2:26:31:e0:87:c5:54:c4:72:21:03:9d:4c:02:01:05:
         68:4f:42:8c:1c:f5:d8:ed:e9:cd:7d:64:47:5a:f8:be:82:fd:
         bd:ab:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org