Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/d8c0ee44978b7e1a3556ab147342f4c5acb90b78.roa
File:                     d8c0ee44978b7e1a3556ab147342f4c5acb90b78.roa (raw, json)
Hash identifier:          pFYweryBgSzLjOZ6dxWYVakMu8vZY268Kb5yK1xgHw0=
Subject key identifier:   84:59:37:80:A6:11:63:0D:46:27:84:2D:A9:A3:93:58:99:28:7F:47
Certificate issuer:       /CN=03c97d9cfab8a5f23ecb7034405d3d11e5b5203a
Certificate serial:       099D0A
Authority key identifier: 77:6F:DB:A2:A8:11:8A:B7:1F:2E:B6:C2:E8:2A:16:D6:94:85:72:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/d8c0ee44978b7e1a3556ab147342f4c5acb90b78.roa
Signing time:             Mon 23 May 2022 15:20:49 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Sat 20 Apr 2024 03:00:00 +0000
asID:                     271904
IP address blocks:        179.63.108.0/24 maxlen: 24
                          179.63.109.0/24 maxlen: 24
                          179.63.110.0/24 maxlen: 24
                          179.63.111.0/24 maxlen: 24
                          2803:6210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630026 (0x99d0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c97d9cfab8a5f23ecb7034405d3d11e5b5203a
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2024 GMT
        Subject: CN=d8c0ee44978b7e1a3556ab147342f4c5acb90b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:f9:c8:c1:72:e2:a7:ab:0c:4d:6e:58:66:
                    e8:a9:5a:4d:c9:d8:9c:5e:0d:c0:7c:7b:9c:fa:4a:
                    9b:fb:ac:1f:11:aa:00:08:b7:47:c6:33:29:e1:dd:
                    1c:65:50:cb:12:bb:19:5f:ab:8e:ec:1f:8a:0a:54:
                    cb:3c:cf:b9:4c:bb:4a:b0:e3:9c:d1:dd:dc:d6:47:
                    3d:94:71:95:fb:9b:69:fb:1c:17:82:b3:bf:b7:8c:
                    f5:2f:42:3d:32:b5:dd:76:2c:bf:96:9e:f0:d6:b1:
                    fa:3f:4b:ba:93:9f:1d:1c:27:f3:15:f7:3d:41:1b:
                    1f:f7:cf:d5:f9:94:ae:61:03:8d:e3:1c:3d:78:aa:
                    7d:20:ca:4d:8a:2c:ac:4b:b2:68:8b:ba:7b:af:8f:
                    85:b1:30:52:33:73:92:e9:c7:f6:5d:18:bd:7e:a7:
                    14:7c:e7:39:88:9b:a4:62:56:e9:83:57:62:8e:2c:
                    b4:1f:98:39:0f:d1:26:ec:8a:48:2f:39:41:13:2c:
                    0b:07:89:f7:99:db:45:ac:d2:29:5d:a3:04:ec:44:
                    21:d9:b3:85:65:0c:23:31:fc:d0:1b:ed:4a:2a:ae:
                    e4:46:13:d0:84:43:4e:af:53:96:a0:36:63:a9:d9:
                    a6:6e:18:f1:c5:df:43:cb:61:58:92:cb:9b:0e:d0:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:59:37:80:A6:11:63:0D:46:27:84:2D:A9:A3:93:58:99:28:7F:47
            X509v3 Authority Key Identifier:
                keyid:77:6F:DB:A2:A8:11:8A:B7:1F:2E:B6:C2:E8:2A:16:D6:94:85:72:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/d8c0ee44978b7e1a3556ab147342f4c5acb90b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10c1a5e2-4a4f-4cef-9a8e-033b8662ecbf/03c97d9cfab8a5f23ecb7034405d3d11e5b5203a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.108.0/22
                IPv6:
                  2803:6210::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:aa:0d:eb:1d:65:99:38:74:5e:63:d4:ce:57:54:9c:71:
         f1:13:13:0d:5d:b7:f8:10:a8:ab:70:d1:f3:25:46:25:eb:09:
         ac:44:ec:45:7c:b8:b7:11:65:89:31:84:bc:17:68:f7:72:a1:
         de:a0:f7:f5:89:bd:90:c3:8e:7c:7e:3e:9d:f8:c0:17:3e:95:
         72:e5:56:10:cd:1a:d1:c0:6d:31:21:74:9b:32:b1:ed:21:50:
         01:7d:7e:1c:23:8f:98:de:08:c2:6e:43:dc:46:0b:2e:27:39:
         1b:50:b7:e4:ce:46:e0:08:a2:67:b5:58:25:9e:55:ad:7f:8f:
         2a:2c:07:5f:07:ed:e7:ed:e8:e7:c5:3d:aa:37:06:3d:05:c2:
         0a:bb:7e:eb:8d:25:97:14:9e:40:8a:42:30:7b:dc:46:5e:e6:
         f0:9c:4b:c7:a7:39:cc:6b:bd:d8:82:2e:9c:dc:33:53:b4:c1:
         66:dc:cf:3f:cb:f8:b5:62:a0:fa:75:ff:83:72:5c:fd:9a:11:
         08:88:38:7a:4d:cf:1f:92:ae:a2:2a:fb:36:7d:90:a3:ba:03:
         2d:6c:d7:8b:9f:eb:8f:6b:69:5c:3e:49:b1:1a:0f:6a:6c:68:
         97:33:b3:af:66:c3:e8:4a:6d:5d:15:3d:e0:d7:8d:ad:50:3e:
         49:f2:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org