Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ddb3b0-0b82-4ed4-88f5-07bb3f2a3944/510e7cbd88bed8cf7af0565cf9cd4c5c1dd551c8.roa
File:                     510e7cbd88bed8cf7af0565cf9cd4c5c1dd551c8.roa (raw, json)
Hash identifier:          6Dh599y2JYM40eaVikeSiO97aOcbDPsi0WsYnRotE98=
Subject key identifier:   7F:E7:AE:E9:21:95:C0:04:57:E8:4F:06:50:03:AF:D6:78:DA:08:8A
Certificate issuer:       /CN=fd7bd77ee19828cd9c595859fa4fe00dab7bda5c
Certificate serial:       10DF0E
Authority key identifier: 93:DF:28:A8:67:B6:88:C8:57:5D:C9:B6:AF:17:93:F0:DA:E6:DD:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd7bd77ee19828cd9c595859fa4fe00dab7bda5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ddb3b0-0b82-4ed4-88f5-07bb3f2a3944/510e7cbd88bed8cf7af0565cf9cd4c5c1dd551c8.roa
Signing time:             Mon 02 Aug 2021 19:46:11 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52411
IP address blocks:        179.189.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105678 (0x10df0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd77ee19828cd9c595859fa4fe00dab7bda5c
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=510e7cbd88bed8cf7af0565cf9cd4c5c1dd551c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:b5:c6:b4:a6:09:34:b7:84:6d:29:27:15:
                    e8:53:0b:c1:52:f1:9a:23:85:f8:d2:0e:77:b3:d7:
                    30:8f:a9:82:ca:8a:be:4f:ba:b5:c3:45:42:08:e6:
                    c5:fd:9e:a9:d1:b4:98:ac:1e:c1:d1:23:cf:a0:4f:
                    19:99:ec:1e:fe:c9:3a:a2:42:f3:01:95:3b:dd:4e:
                    a7:d3:75:2f:e3:53:20:f0:ea:b6:40:5d:85:0b:1c:
                    b6:1f:65:39:13:f2:48:8c:08:b4:ba:57:70:b5:8a:
                    18:ed:cc:9d:64:32:5b:eb:7c:96:46:f2:41:15:d5:
                    03:10:26:df:96:7b:55:b8:1e:68:be:fb:c7:de:31:
                    21:02:cf:c6:48:31:89:2a:e6:b2:f9:23:4d:22:21:
                    ce:a3:0a:77:a9:66:0f:51:79:ca:eb:ac:70:9e:d0:
                    52:66:e0:2c:61:6d:9b:fb:97:27:60:eb:29:3f:22:
                    52:81:30:3a:f4:9d:74:21:74:65:4c:b7:a0:54:36:
                    d1:a1:09:27:6f:26:3f:7a:ea:e4:89:13:d4:e9:92:
                    9d:30:f1:80:08:72:d2:ff:28:23:98:2b:0d:f4:02:
                    8b:78:fb:27:77:5b:b5:84:ab:4a:28:f0:1d:ea:69:
                    82:fc:86:68:98:db:32:e2:51:0e:11:52:13:29:8a:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:AE:E9:21:95:C0:04:57:E8:4F:06:50:03:AF:D6:78:DA:08:8A
            X509v3 Authority Key Identifier:
                keyid:93:DF:28:A8:67:B6:88:C8:57:5D:C9:B6:AF:17:93:F0:DA:E6:DD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd7bd77ee19828cd9c595859fa4fe00dab7bda5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ddb3b0-0b82-4ed4-88f5-07bb3f2a3944/510e7cbd88bed8cf7af0565cf9cd4c5c1dd551c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ddb3b0-0b82-4ed4-88f5-07bb3f2a3944/fd7bd77ee19828cd9c595859fa4fe00dab7bda5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:15:b6:6a:50:1d:57:4a:f0:b8:d1:ba:49:21:1d:fa:1e:56:
         fd:0a:c2:6a:2c:c2:7d:39:84:7c:93:86:d6:ed:83:c2:b6:9c:
         30:35:a7:a4:16:93:5c:29:3d:4c:fd:f3:25:5a:42:77:ec:dd:
         4f:09:bf:07:aa:ee:d8:ba:fa:7a:85:0d:7a:50:3b:b0:76:86:
         87:c9:4e:5d:72:26:cc:d7:4d:34:d8:21:b7:e5:f4:14:df:f6:
         3e:c1:fd:8e:89:a5:bd:e4:1b:83:26:51:3a:cc:fc:8b:06:8a:
         9e:a9:31:8d:ec:01:de:30:a2:b8:88:ee:6c:d6:66:81:0f:cd:
         40:d0:03:3e:e0:4d:ba:5e:8f:e2:29:77:c6:49:c1:9e:87:10:
         5d:38:61:90:5f:cd:00:44:68:21:f5:7e:81:ae:53:24:ec:89:
         e9:9e:5c:7e:0e:27:ee:e6:4e:f6:12:10:ba:2a:7a:c9:8d:b7:
         2b:e3:3d:57:82:06:a5:28:44:db:27:88:de:13:1e:5c:a2:4f:
         fd:17:4d:71:0c:c4:b6:d2:37:9e:ac:67:b1:ee:da:bd:a9:27:
         71:8e:01:73:bd:1d:36:e3:6b:78:24:90:14:dc:a4:8f:4e:f5:
         b2:d4:6c:59:f7:86:a9:d3:28:75:6c:ed:3f:24:2a:85:5a:9f:
         2a:45:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org