Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d950167d020e417be4072fa20bbf1c05fc2f7a0d.roa
File:                     d950167d020e417be4072fa20bbf1c05fc2f7a0d.roa (raw, json)
Hash identifier:          UtjGmiba7g8sH1xX3cF+4xaf48Y8TErDc+XE7XRm8DY=
Subject key identifier:   0C:92:BF:1D:63:06:06:E7:DC:BE:D3:DE:C5:9D:08:19:49:F2:29:5E
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       2069DD
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d950167d020e417be4072fa20bbf1c05fc2f7a0d.roa
Signing time:             Thu 08 Jun 2023 17:30:57 +0000
ROA not before:           Wed 07 Jun 2023 17:30:57 +0000
ROA not after:            Sun 08 Jun 2025 17:30:57 +0000
asID:                     52468
IP address blocks:        181.79.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124253 (0x2069dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Jun  7 17:30:57 2023 GMT
            Not After : Jun  8 17:30:57 2025 GMT
        Subject: CN=d950167d020e417be4072fa20bbf1c05fc2f7a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:bf:89:ee:4d:fc:4b:ae:6f:60:9d:cd:91:
                    c1:9c:87:29:60:3e:7a:12:75:44:af:68:b1:45:d9:
                    e7:a3:5e:50:92:2b:49:ae:93:e6:09:04:ee:c1:27:
                    05:f3:39:56:ed:7a:fb:e9:f8:64:c1:63:93:78:72:
                    7a:82:ec:c7:ab:40:f9:f1:71:12:d1:7c:89:4c:e8:
                    20:be:62:2e:cb:92:c2:9c:9d:92:9f:3c:e2:c5:fb:
                    5c:76:e1:ae:0e:70:a2:b0:fd:12:5b:7f:90:a7:48:
                    ff:85:ac:00:40:f2:0a:3f:b1:f5:68:eb:2d:b7:25:
                    b8:ce:46:3c:d1:67:d7:7a:9f:44:c3:03:69:d6:65:
                    11:fe:1f:69:7b:c1:ac:90:1e:69:97:47:9d:cb:bb:
                    a7:f0:70:09:66:94:79:9a:df:a4:ed:49:5c:e5:51:
                    71:1b:63:50:81:5d:8f:00:d0:f8:26:12:40:44:c9:
                    5d:5b:dc:d3:a5:aa:48:68:fd:bb:f5:16:b1:ff:5b:
                    55:55:98:14:a0:0b:89:d7:81:ac:b0:e2:46:f4:63:
                    ed:72:da:28:c4:9d:27:84:ae:1f:33:7f:6d:6a:60:
                    51:bb:3e:94:5c:99:22:d0:cd:78:03:70:82:42:fc:
                    b1:df:fb:9e:c3:98:c6:1a:39:bb:62:e9:eb:e1:40:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:92:BF:1D:63:06:06:E7:DC:BE:D3:DE:C5:9D:08:19:49:F2:29:5E
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d950167d020e417be4072fa20bbf1c05fc2f7a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:19:b2:1d:47:f0:31:af:34:58:44:ad:a7:c7:94:29:34:
         13:e8:e8:45:78:24:fa:47:b2:e1:2b:4d:2f:2a:c5:bc:49:eb:
         c2:8f:a6:f9:49:e9:7b:dc:f1:58:0b:b0:78:5e:61:cb:b4:11:
         5a:0a:5a:d2:53:db:56:68:b5:20:5b:4a:4b:68:09:97:c2:ac:
         34:6b:ed:a2:76:21:bb:ff:a7:4a:34:0c:a1:6e:e3:47:7e:f0:
         1f:2b:a4:a7:45:de:1a:70:cc:f8:63:a5:4a:e7:db:70:25:dd:
         61:6d:0c:ca:85:77:c9:3e:0a:4a:f2:13:fc:a0:71:a3:43:da:
         7f:fe:72:9d:3e:2b:be:79:1c:79:7b:44:c0:b1:ff:d0:8d:24:
         05:44:60:cc:2b:02:a2:af:b3:b3:ba:5a:59:37:ff:3a:04:4c:
         33:5d:64:c8:19:e2:c9:92:cd:67:62:c8:21:a4:8d:ee:37:9b:
         12:aa:fd:8e:40:0c:e0:9b:32:72:3d:40:3f:2a:5f:9c:5b:e5:
         8e:78:07:bd:d4:6e:9f:41:c7:5c:ee:ae:2c:8d:40:9f:43:9c:
         3b:3c:44:19:84:a2:78:f9:b8:25:0d:43:a6:47:af:02:94:7a:
         00:f1:7b:1a:9e:21:21:bd:65:21:53:2d:85:7a:05:87:a8:5b:
         1e:c1:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org