Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/ca82ddea7fe2d3e9be9d5daa33746ad2300a4119.roa
File:                     ca82ddea7fe2d3e9be9d5daa33746ad2300a4119.roa (raw, json)
Hash identifier:          jZdo+YbYpTQPQDHHW+XeXCahh3B3oyTb+7BQAk+4BZs=
Subject key identifier:   DC:17:30:CF:EA:CB:79:54:D7:08:8B:A2:9C:2B:5B:D6:75:98:D0:73
Certificate issuer:       /CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
Certificate serial:       0758B3
Authority key identifier: 04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/ca82ddea7fe2d3e9be9d5daa33746ad2300a4119.roa
Signing time:             Wed 24 Mar 2021 22:51:36 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     270014
IP address blocks:        177.221.140.0/24 maxlen: 24
                          177.221.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481459 (0x758b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=ca82ddea7fe2d3e9be9d5daa33746ad2300a4119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:81:9d:ca:16:74:d6:81:5f:be:85:5d:c0:
                    cc:04:b9:fc:08:a3:5d:57:04:39:34:15:04:ab:08:
                    65:c7:48:63:0d:11:05:16:aa:4a:40:13:c5:8e:bc:
                    c7:9d:ee:b8:90:53:71:7f:57:48:dd:ba:2e:e1:b4:
                    b4:e5:2d:e4:79:cc:5f:37:62:ba:e5:09:cd:2b:0d:
                    98:50:c3:49:2c:ea:57:ef:c0:36:48:ca:95:61:55:
                    fe:9f:08:fa:cf:bd:79:26:51:ab:07:7c:f8:37:cd:
                    39:20:13:c0:6e:8a:ad:71:0d:c7:73:f4:52:55:a0:
                    98:60:d5:72:10:73:db:56:5d:1c:59:59:44:03:8a:
                    27:3e:09:66:2c:db:33:50:48:eb:0e:d1:6d:f7:a9:
                    04:ea:de:34:f9:cf:cc:4b:00:aa:54:3d:71:b4:6b:
                    50:b6:bb:87:15:23:da:e2:d7:ad:ed:42:fe:7f:a9:
                    d0:ce:f0:fb:3e:2e:7e:5e:55:13:3f:5a:c3:f6:d2:
                    23:c3:e9:e8:1f:2c:70:25:02:ba:25:a4:8e:a6:b2:
                    c8:a8:e7:c2:10:c4:98:0f:89:66:f9:f8:90:99:37:
                    99:02:4c:04:16:94:56:9f:95:8f:32:31:d6:05:13:
                    af:e1:6a:4d:1a:0d:a0:af:24:2f:cd:5e:ed:dc:b8:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:30:CF:EA:CB:79:54:D7:08:8B:A2:9C:2B:5B:D6:75:98:D0:73
            X509v3 Authority Key Identifier:
                keyid:04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/ca82ddea7fe2d3e9be9d5daa33746ad2300a4119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/13e46a83c82c11a5000af8536ac8d01b701f35e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:76:ad:c7:f4:90:e0:fd:98:38:64:35:f6:b6:93:3d:2b:35:
         98:23:99:68:ff:de:b0:d4:90:45:73:fb:0b:b2:6c:44:38:ce:
         a5:5c:cf:05:b8:4f:3a:54:eb:92:b6:cf:2a:75:a6:6b:54:36:
         98:d8:c3:1d:80:8e:1b:dd:ef:bf:2e:cc:dd:70:ec:7d:75:74:
         c2:dd:2f:ab:6d:00:9c:23:ae:ad:61:63:be:9b:6c:a8:3d:5d:
         05:f4:94:9a:9e:bc:81:00:1c:9d:cb:5a:58:48:34:f9:df:df:
         f9:c1:53:8f:41:56:74:3c:47:f7:68:bc:c8:9f:65:16:fd:40:
         be:b2:31:1d:ec:5f:c3:4c:1d:8c:f6:ce:c6:93:01:99:2a:b6:
         da:17:2c:83:00:ac:75:54:ef:89:2f:9d:80:42:cc:5b:a9:30:
         64:55:f2:25:7e:22:c7:4f:57:64:9b:45:56:86:3e:c8:28:b8:
         92:4a:36:25:bd:c0:ad:9c:f3:7c:ba:eb:f0:74:3a:f7:f2:de:
         c4:be:ea:9f:d7:90:93:79:8b:31:0f:c4:47:32:41:86:32:31:
         a5:d9:a5:ff:eb:d1:cd:c0:fa:51:6e:3f:4b:a6:14:1f:25:5c:
         e6:f1:2f:5d:48:de:08:25:6b:a2:1d:87:6f:e0:a4:56:37:b1:
         7d:50:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org