Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/17204b1f444b8c1f2ab2d9e62b118033fda2fdf0.roa
File:                     17204b1f444b8c1f2ab2d9e62b118033fda2fdf0.roa (raw, json)
Hash identifier:          tgQuUzYxGXWabjMXziMU4V5/kLxt06VkYkhFuGs4Is8=
Subject key identifier:   A3:B0:9A:EE:BD:50:30:7C:87:66:EF:F0:27:B5:45:E6:62:2B:56:20
Certificate issuer:       /CN=7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee
Certificate serial:       166C48
Authority key identifier: FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/17204b1f444b8c1f2ab2d9e62b118033fda2fdf0.roa
Signing time:             Wed 05 Jul 2023 18:06:22 +0000
ROA not before:           Tue 04 Jul 2023 18:06:22 +0000
ROA not after:            Sat 05 Jul 2025 18:06:22 +0000
asID:                     270007
IP address blocks:        177.53.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469512 (0x166c48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee
        Validity
            Not Before: Jul  4 18:06:22 2023 GMT
            Not After : Jul  5 18:06:22 2025 GMT
        Subject: CN=17204b1f444b8c1f2ab2d9e62b118033fda2fdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:1d:b6:e5:47:a1:ae:04:06:3e:5b:99:fb:
                    56:f0:ca:22:68:7d:79:f5:8d:88:de:1b:9a:a1:47:
                    71:b7:1e:6d:f4:ba:fc:52:9a:83:43:f6:5b:03:d9:
                    d8:da:3e:37:00:1b:1c:30:7c:2a:0d:d1:3d:1f:ed:
                    79:38:5c:a8:68:70:e1:e2:6b:ca:9d:9e:ba:0f:93:
                    3f:82:6c:c2:d5:a2:0c:01:f2:7f:ed:36:c6:d7:2d:
                    40:f2:8e:74:66:f4:48:7e:58:be:52:77:91:6f:74:
                    fc:1f:e5:20:f6:19:0d:09:94:f8:68:70:1a:61:d9:
                    35:95:c3:49:15:79:ea:ad:75:58:c1:e7:db:28:53:
                    8a:83:13:df:97:ee:e2:eb:e8:6a:62:32:a1:84:c5:
                    a1:53:2c:43:dd:74:5e:12:16:f7:3f:a0:71:f2:97:
                    27:e9:e6:a5:69:1f:86:78:86:e4:3e:51:95:7a:e8:
                    b8:fb:0f:a1:eb:bb:55:18:c6:b2:b9:83:66:97:e4:
                    2c:2b:79:91:c9:d0:3d:19:83:2a:31:2e:2c:0e:41:
                    6c:19:5d:bc:8c:e4:49:0c:98:65:ed:bb:36:72:2d:
                    97:45:b1:54:f7:95:42:37:16:d1:14:e4:76:75:bf:
                    7a:d1:70:5e:ad:1e:de:ff:56:3c:7a:6d:0e:82:07:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B0:9A:EE:BD:50:30:7C:87:66:EF:F0:27:B5:45:E6:62:2B:56:20
            X509v3 Authority Key Identifier:
                keyid:FA:C4:DA:CB:D0:88:43:CB:DC:1F:78:38:A4:7D:61:FC:B2:07:A6:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/17204b1f444b8c1f2ab2d9e62b118033fda2fdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1be178d6-679e-4b07-9744-5478e03aee51/7847933acc3f9cf7ea1ce3ca5f20a1395d7b6cee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:b9:05:f6:7e:77:3c:3a:34:2e:f4:6c:ca:9f:4d:f9:52:8b:
         9b:b7:3c:c6:e2:7f:dc:21:f4:bb:9f:fa:36:4b:0e:cc:62:74:
         bb:27:7e:01:40:2f:f8:9c:80:52:af:4e:ab:ad:f8:d2:1e:5a:
         b2:db:cf:3d:c9:99:12:35:0d:9e:38:3c:2d:12:34:34:c0:46:
         95:7d:67:13:14:2b:d4:c6:90:51:51:db:96:df:92:f8:72:79:
         de:04:c3:57:ed:38:aa:dd:4e:b8:73:aa:07:35:b1:65:78:db:
         32:cd:9d:c0:a5:e6:08:c2:1b:b1:93:89:58:d0:58:55:4a:b5:
         6b:b0:18:98:e1:d7:ee:ec:c7:cc:5d:99:96:87:85:80:41:8a:
         83:6a:7c:38:cb:63:b5:c3:2f:ae:8c:f5:f2:43:79:79:22:59:
         19:1c:35:5e:e2:0d:ad:e7:f1:5d:bc:c1:5f:21:fb:bc:ef:73:
         c8:3a:f0:42:09:4e:64:5e:4c:dc:54:06:64:b9:69:a8:c7:9d:
         05:9f:9f:9f:dd:8f:45:c7:aa:30:cb:7b:f4:5f:ee:42:ea:44:
         40:0f:bb:d1:36:c5:56:6f:14:74:44:c7:87:77:dc:af:c2:93:
         a6:6a:c4:6a:9f:a9:20:a7:90:28:e1:86:19:12:ff:1f:48:ee:
         b6:83:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org