Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/3d8d45290ef260f470421832723428120274adcd.roa
File:                     3d8d45290ef260f470421832723428120274adcd.roa (raw, json)
Hash identifier:          hAraWxMtEJbcHn0N3QwWpYzxtBHcSTZ0tIekJe/OY7E=
Subject key identifier:   8E:8E:83:A9:13:63:B8:EA:80:80:8E:B9:CE:4F:7E:3A:99:C0:CB:C5
Certificate issuer:       /CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
Certificate serial:       0CEBAF
Authority key identifier: 02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/3d8d45290ef260f470421832723428120274adcd.roa
Signing time:             Tue 26 Sep 2023 22:52:17 +0000
ROA not before:           Mon 25 Sep 2023 22:52:17 +0000
ROA not after:            Fri 26 Sep 2025 22:52:17 +0000
asID:                     52468
IP address blocks:        179.49.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846767 (0xcebaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b63dc77edcd15d60f85c19a2d4c558d2ecf4791
        Validity
            Not Before: Sep 25 22:52:17 2023 GMT
            Not After : Sep 26 22:52:17 2025 GMT
        Subject: CN=3d8d45290ef260f470421832723428120274adcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:20:5f:6c:93:52:15:97:1b:73:b1:7e:93:
                    8a:03:5e:ad:36:74:b0:d4:fd:2c:f0:a2:41:1c:da:
                    46:96:6b:23:9a:46:a9:6a:b6:4f:69:b4:d4:de:e4:
                    3e:9a:9e:1c:a9:03:e9:f2:8d:e3:4d:70:9f:de:e7:
                    03:2f:76:b7:9e:cd:cc:98:96:fd:b3:ad:d3:c7:6a:
                    70:97:9d:79:6d:63:e0:da:62:76:ba:a8:26:25:e7:
                    d0:75:21:ba:b6:c6:f8:54:45:b5:2f:72:c0:40:c5:
                    1c:cd:7b:4d:6a:02:cc:e3:25:68:02:4b:dc:f1:13:
                    86:96:6a:26:40:1e:6d:dd:a6:93:3d:ec:e9:bd:c2:
                    89:7e:23:0a:4a:75:10:3f:93:96:e1:08:7c:1f:ea:
                    67:60:86:44:21:b2:3a:b2:6d:40:1a:36:36:1c:fe:
                    2f:4a:94:c4:20:b0:37:0a:d4:d4:f9:77:21:72:ad:
                    81:2f:66:92:b7:e5:70:98:e1:2d:cc:23:d4:fa:45:
                    3e:c8:ff:4c:ed:c7:de:71:38:8b:76:ea:eb:48:5b:
                    dc:15:0d:99:72:a0:a1:f6:cf:39:c2:30:d9:11:c1:
                    12:9c:93:b8:fc:36:32:13:66:14:59:53:33:97:51:
                    82:c0:28:99:36:65:5f:c9:af:02:47:1e:97:3c:bb:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:83:A9:13:63:B8:EA:80:80:8E:B9:CE:4F:7E:3A:99:C0:CB:C5
            X509v3 Authority Key Identifier:
                keyid:02:05:5F:F5:2B:76:FF:06:D0:40:8B:1C:BC:C3:30:00:78:DA:5A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/3d8d45290ef260f470421832723428120274adcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/109e0bda-90a6-47bf-aff9-fce3fa714347/5b63dc77edcd15d60f85c19a2d4c558d2ecf4791.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:e3:2a:c0:fd:af:fa:90:c3:92:26:41:b1:b9:2c:49:21:
         82:38:40:ee:3c:d9:e3:3a:d3:86:25:f8:c4:ce:2e:d7:bb:e7:
         9d:c6:99:86:e8:44:3b:e8:b3:93:92:a5:91:a2:df:13:ac:70:
         b6:8b:7a:0a:b5:f7:a2:eb:3b:5f:99:78:43:ea:f3:37:a3:f9:
         c6:b0:a6:ac:93:2a:1e:bf:67:46:36:39:20:c8:ac:f1:e6:21:
         e4:82:96:f1:7f:43:3d:90:66:94:e8:6a:f1:71:de:96:16:c1:
         d7:ff:4a:cb:e4:54:71:59:e1:97:86:35:34:5b:b4:9a:a9:4c:
         2f:9a:f9:7c:2c:90:b7:21:35:b7:ea:92:e8:a4:f9:2e:d2:c6:
         38:5f:34:04:cf:4f:c2:f7:d5:0c:36:19:19:93:c6:03:11:4e:
         8e:e0:ce:e5:e5:b8:fe:19:37:97:a6:86:77:66:12:d2:7d:de:
         57:16:39:a3:35:f4:05:87:0c:3b:f4:4f:84:2c:d2:d2:36:52:
         72:58:f8:25:16:8c:47:21:da:65:70:6b:b0:24:06:fc:b5:93:
         00:a9:0b:6a:26:f6:5f:8a:e2:b9:f9:18:a1:a5:50:f6:8f:68:
         2f:fb:51:37:2c:46:bd:dc:aa:3d:96:5f:23:9f:ec:43:0b:46:
         00:04:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org