Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/ee06cfd7e8f70a9083fc9ced6fbd4885007117c6.roa
File:                     ee06cfd7e8f70a9083fc9ced6fbd4885007117c6.roa (raw, json)
Hash identifier:          2LVZpAIL4wDrR1kidf56aKgjsntD5ZYxXgiEJJ7eOl0=
Subject key identifier:   00:AA:4E:47:62:98:60:FD:B8:36:CD:C7:BC:FE:C4:15:70:F5:29:43
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       15AFD7
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/ee06cfd7e8f70a9083fc9ced6fbd4885007117c6.roa
Signing time:             Tue 24 May 2022 15:49:44 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421271 (0x15afd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=ee06cfd7e8f70a9083fc9ced6fbd4885007117c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:dc:1d:df:9d:33:28:d8:04:e9:f1:07:e0:
                    bf:98:6b:b5:3b:cf:31:51:16:04:c5:90:5e:1a:16:
                    67:1d:f8:c8:57:84:73:31:a4:82:f7:b5:c6:bb:69:
                    96:05:18:44:4b:32:35:29:af:0f:d9:28:a3:16:8f:
                    0e:d8:35:53:c2:c2:35:a7:70:c4:37:77:50:18:a8:
                    4e:96:f1:fa:83:b4:c9:b4:40:98:a2:a3:a0:fa:af:
                    57:32:8d:4c:2f:e5:df:41:12:22:06:19:62:2f:02:
                    8d:8f:06:f3:54:b8:46:99:db:80:88:a9:ed:88:cf:
                    78:9d:b2:fc:bd:ff:ba:d6:1b:fc:36:d8:37:a3:60:
                    86:fc:cb:30:86:e0:68:9b:b5:23:76:de:e5:fe:df:
                    c3:51:83:52:ca:74:d1:f2:53:b0:dc:f4:3c:40:31:
                    e3:a9:ce:ee:4b:0e:1a:c4:4b:76:48:b1:8c:a4:ef:
                    aa:e1:43:9d:ce:f1:ba:9a:f3:f7:1e:5d:29:27:dc:
                    59:bd:34:2f:9e:b2:91:91:f7:05:2b:40:8f:d0:a9:
                    13:75:d4:fd:f9:cc:88:19:d2:06:4e:a9:f6:79:a5:
                    3d:5a:db:9f:31:e9:2a:17:d6:31:70:42:40:1b:09:
                    f8:19:47:f5:ba:8f:84:dc:d9:12:e8:02:ab:f9:c0:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:4E:47:62:98:60:FD:B8:36:CD:C7:BC:FE:C4:15:70:F5:29:43
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/ee06cfd7e8f70a9083fc9ced6fbd4885007117c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:b0:5c:80:8a:2d:a8:e0:15:cb:97:75:79:26:65:55:0e:
         e9:c2:ee:fd:76:2d:71:c0:cd:13:4d:49:1b:11:44:b9:5b:39:
         fc:62:27:e2:d6:c3:03:33:dd:63:b6:75:d4:c1:3b:72:19:16:
         0e:6f:4a:9e:6a:68:d8:e3:7a:4c:3b:c1:18:93:ef:f3:2c:0b:
         9d:e1:d2:2f:cd:ef:d8:57:59:2f:ec:76:0a:ac:87:c0:57:f0:
         02:c1:12:70:f5:f5:72:ad:ad:2a:7c:0d:98:ed:b8:e7:4c:f9:
         1f:21:b0:b4:54:d3:82:c5:61:9a:1a:8d:1a:f3:d0:4a:0f:c4:
         e7:55:bc:09:da:b5:57:b5:88:36:a2:0d:d1:62:d2:77:25:14:
         5c:60:36:ec:9a:f5:11:c7:2f:2f:b9:ac:8c:4a:88:62:62:cb:
         8a:d7:49:ce:72:da:9c:37:88:06:b2:08:3c:d5:1a:17:49:ac:
         f4:61:8e:c9:18:8e:cf:02:df:7e:1b:f8:35:0e:b1:b7:a2:d5:
         fb:dd:fa:6b:47:01:d1:1d:ed:bd:54:81:c5:ad:a9:e2:30:ee:
         9f:37:ec:f7:3f:aa:9f:3c:6e:c6:bc:56:5a:c1:6b:19:58:0f:
         e4:ba:b7:cd:8b:b4:56:9d:3a:27:85:15:2c:b5:fc:df:a9:4f:
         96:78:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org