Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/2923711bc170650b12f9f2724a7bec51a56d3dbc.roa
File:                     2923711bc170650b12f9f2724a7bec51a56d3dbc.roa (raw, json)
Hash identifier:          C3C2k5xlO3WMN9HaGhqy4JNZWT/mWjRifiTFcTyQEik=
Subject key identifier:   B3:4C:14:26:DA:7C:0C:67:25:88:04:A3:C0:DD:D9:65:9A:E3:60:BA
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       16395F
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/2923711bc170650b12f9f2724a7bec51a56d3dbc.roa
Signing time:             Sat 04 Jun 2022 05:53:21 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456479 (0x16395f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=2923711bc170650b12f9f2724a7bec51a56d3dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:76:63:a6:69:c5:9c:01:9e:ee:06:f4:d3:
                    49:fb:f5:48:93:cc:de:15:97:f2:ed:3c:8c:9f:25:
                    d5:b3:c1:63:fb:37:68:90:f0:1d:b1:a3:69:04:8a:
                    8c:44:66:e4:6a:94:14:ec:bf:e4:50:05:29:24:10:
                    92:f9:88:c2:5a:1b:b1:21:4e:ce:a6:44:6d:67:f5:
                    3e:2d:6f:e1:25:b3:d7:1f:db:18:74:1a:2a:de:f3:
                    15:12:a6:39:b2:c4:40:ca:d9:9e:a9:54:ac:65:33:
                    69:c4:e4:2d:f9:15:5d:ae:e7:2e:ba:ef:e9:c6:79:
                    cb:7a:02:b6:94:ee:72:cf:ab:19:f9:a4:81:a3:79:
                    14:8e:30:b6:cb:af:59:e3:01:a4:70:e8:3f:c0:95:
                    e3:ab:92:f6:25:e1:a3:f7:3f:fb:6d:e1:e6:0f:9d:
                    7f:4c:48:85:40:68:6c:61:c7:47:5e:d7:51:09:ed:
                    ae:22:dc:40:6f:24:16:af:70:04:f4:57:a6:83:14:
                    2c:71:9a:a3:7a:a0:25:8a:2e:9f:8f:db:9f:1c:80:
                    b1:5a:13:35:39:71:d1:31:23:4c:ea:fe:e4:18:3f:
                    b6:82:c4:33:c5:0a:d7:be:e0:96:eb:d3:80:e7:82:
                    1b:65:08:70:57:39:1d:5e:53:ed:69:f4:9d:06:1b:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:14:26:DA:7C:0C:67:25:88:04:A3:C0:DD:D9:65:9A:E3:60:BA
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/2923711bc170650b12f9f2724a7bec51a56d3dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:92:e2:86:5d:32:d6:ac:82:fb:51:27:10:8e:9a:a0:16:
         cc:8a:d5:54:00:f3:9d:f9:1d:ec:85:5c:03:8c:a6:49:78:fd:
         be:30:f4:81:c3:b2:0b:5a:f5:33:d6:2b:da:02:97:c6:a0:45:
         21:70:9f:76:a0:64:52:b1:13:8f:b5:9c:8b:fd:75:c6:43:96:
         86:f4:8c:23:e7:24:77:93:23:da:cb:62:58:5f:b9:6a:58:db:
         78:a5:22:29:34:10:e1:67:fc:3e:00:78:e9:98:fa:fc:98:d4:
         e0:65:f2:59:aa:b0:e5:fc:a0:25:69:6f:50:0e:07:75:ca:00:
         8d:c8:24:b5:a7:e1:e1:8a:6c:52:dd:1f:10:b7:e3:a6:bc:f9:
         f1:23:79:ee:b4:f2:09:4d:27:56:9b:9b:2e:d2:8f:fa:95:18:
         2d:07:3b:e6:3b:f5:1d:4a:32:fe:23:80:ad:b8:0d:37:cc:b6:
         d8:c5:88:51:f3:4e:a3:71:69:44:bd:b9:5b:b3:76:93:56:5f:
         67:07:2a:dc:99:b5:16:26:eb:4b:30:cd:63:56:7f:4d:00:55:
         f2:b1:cd:a3:21:9a:18:21:0d:95:29:66:15:03:53:8c:e1:1f:
         75:7a:f8:19:47:af:c8:7f:d3:0a:ea:36:cd:50:48:c7:7a:77:
         f5:cf:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org