Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b6786ce-29ba-48eb-a568-577d1f9d0fff/8e80c2941f2bb909c268a4c31ae22be6a13533dd.roa
File:                     8e80c2941f2bb909c268a4c31ae22be6a13533dd.roa (raw, json)
Hash identifier:          oLLBbtCn0SkKIoKBh98d29CrOnn9t5Ww1X2WT+8jeHc=
Subject key identifier:   31:40:B1:FC:D1:46:2F:DC:B0:6A:4F:DE:3D:AE:82:5D:CD:F4:B9:46
Certificate issuer:       /CN=5a15cfaa2a71b13151bbfba5bef978889a221108
Certificate serial:       11E044
Authority key identifier: C4:39:EE:F5:A8:EB:50:D5:C7:70:4A:0A:77:34:8F:CC:FF:56:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a15cfaa2a71b13151bbfba5bef978889a221108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b6786ce-29ba-48eb-a568-577d1f9d0fff/8e80c2941f2bb909c268a4c31ae22be6a13533dd.roa
Signing time:             Wed 29 Mar 2023 08:30:02 +0000
ROA not before:           Tue 28 Mar 2023 08:30:02 +0000
ROA not after:            Thu 27 Mar 2025 08:30:02 +0000
asID:                     262265
IP address blocks:        179.0.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171524 (0x11e044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a15cfaa2a71b13151bbfba5bef978889a221108
        Validity
            Not Before: Mar 28 08:30:02 2023 GMT
            Not After : Mar 27 08:30:02 2025 GMT
        Subject: CN=8e80c2941f2bb909c268a4c31ae22be6a13533dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:59:24:39:5f:fe:20:43:45:52:78:be:b0:
                    3f:08:e9:23:bb:32:14:f9:92:ba:c2:8d:05:24:05:
                    8b:6f:af:5d:5c:dc:5e:e7:e1:a2:16:89:32:b6:bc:
                    ba:ce:1f:f7:67:70:3e:69:49:b5:03:83:9c:ab:57:
                    fd:eb:0d:1e:a4:6b:ca:db:8d:9c:6b:3b:df:9e:20:
                    10:9a:44:0d:32:db:e2:a9:3b:56:c4:14:cb:55:84:
                    6c:b5:66:9d:a5:3e:94:a6:f1:9d:6d:38:61:26:5e:
                    97:51:e6:24:db:77:ad:04:0b:1b:ae:b0:97:a5:ae:
                    61:3c:f1:4c:c8:4a:49:08:90:d3:ae:b0:a9:6a:8c:
                    2d:73:4e:6c:44:fe:1e:5b:10:e4:2d:4c:3f:32:bf:
                    3b:29:45:0e:52:d7:1b:94:0e:96:6a:8d:1f:14:ab:
                    8a:9d:a9:c4:18:00:af:b8:b1:5e:58:be:6b:d6:08:
                    39:f8:92:4d:34:8b:e1:f2:ac:00:dc:64:37:cc:f8:
                    b2:35:8a:22:47:6b:22:a2:63:37:de:9b:40:f8:0d:
                    7f:58:7c:c0:d4:60:41:15:0f:cf:5a:a4:07:01:da:
                    58:8b:72:ab:a7:ba:f7:23:ab:bc:a7:34:62:49:c1:
                    85:fd:7c:47:12:50:d9:e0:77:de:34:53:6a:0d:06:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:40:B1:FC:D1:46:2F:DC:B0:6A:4F:DE:3D:AE:82:5D:CD:F4:B9:46
            X509v3 Authority Key Identifier:
                keyid:C4:39:EE:F5:A8:EB:50:D5:C7:70:4A:0A:77:34:8F:CC:FF:56:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a15cfaa2a71b13151bbfba5bef978889a221108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b6786ce-29ba-48eb-a568-577d1f9d0fff/8e80c2941f2bb909c268a4c31ae22be6a13533dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b6786ce-29ba-48eb-a568-577d1f9d0fff/5a15cfaa2a71b13151bbfba5bef978889a221108.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:12:d1:80:62:d8:ea:7b:38:91:bb:76:c1:1c:ea:14:ab:0e:
         cb:7f:dd:db:b1:3f:22:44:9b:aa:8c:f7:29:63:82:85:87:6a:
         a5:7d:33:28:23:a1:b7:4a:d3:47:e5:1c:80:f8:65:b9:73:b7:
         25:96:8a:dd:59:29:46:da:bc:02:bf:e3:f3:58:3f:77:37:ea:
         3b:ae:c6:70:5f:dd:04:e1:6f:d2:ef:ff:82:0a:cc:d9:4b:4b:
         64:e3:d5:00:03:33:a7:fc:ef:cd:a8:3a:b7:5f:18:e3:e3:83:
         d5:f8:58:21:f1:d0:45:0c:89:11:ec:7d:fa:86:14:6e:c4:07:
         58:3e:42:c1:45:be:60:6d:fb:70:43:44:16:e1:06:a2:8d:8b:
         df:4c:fd:a0:c1:85:03:26:bd:c8:0a:5d:42:ac:3d:3b:9b:7a:
         ef:9a:c0:ab:42:09:af:1b:35:dd:0b:2b:c8:3d:e9:66:c4:b7:
         df:c2:ad:77:0f:ba:2b:0b:1a:f7:5b:b6:c3:37:ef:6e:de:4a:
         33:71:5d:b8:5e:17:53:41:df:a4:db:84:61:04:a3:b3:76:9e:
         c9:68:a0:82:0a:c6:59:67:7b:d1:54:25:86:17:f2:36:49:f9:
         28:e1:7f:60:6d:b0:71:6a:01:d4:20:be:a1:a7:0a:1a:a5:f1:
         71:33:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org