Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/ee85c17860346d7d4ecd3b2ba04efd7a14cd513e.roa
File:                     ee85c17860346d7d4ecd3b2ba04efd7a14cd513e.roa (raw, json)
Hash identifier:          IXGfYDtygXefysMEHgHDKVBP7G0QoL/gcvJ2VFDjAQw=
Subject key identifier:   67:E6:6E:FE:45:80:6B:99:27:EF:C0:3C:07:3B:55:CA:35:66:8A:BC
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       27EF5B
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/ee85c17860346d7d4ecd3b2ba04efd7a14cd513e.roa
Signing time:             Thu 01 Feb 2024 22:11:08 +0000
ROA not before:           Thu 01 Feb 2024 22:11:08 +0000
ROA not after:            Sun 01 Feb 2026 22:11:08 +0000
asID:                     52228
IP address blocks:        179.50.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617179 (0x27ef5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Feb  1 22:11:08 2024 GMT
            Not After : Feb  1 22:11:08 2026 GMT
        Subject: CN=ee85c17860346d7d4ecd3b2ba04efd7a14cd513e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:87:fb:f9:95:fe:1b:f8:4d:80:f0:a5:ea:
                    9c:34:df:f5:d5:14:c1:a3:30:1f:ac:10:50:43:be:
                    73:5f:88:4d:a5:0c:f4:c8:8f:97:99:23:38:9b:f1:
                    06:fe:79:32:bb:7e:6d:cf:13:d4:2f:a4:0b:4a:8e:
                    0c:66:cd:21:b6:4d:81:ac:87:00:0a:c9:e9:d4:13:
                    3b:b0:a7:98:bc:91:e7:f8:98:a4:50:51:e5:dd:4d:
                    26:32:66:31:c6:db:4a:94:36:c6:c5:bf:dc:28:17:
                    cb:64:ef:cc:6b:ad:d4:3e:16:bb:b7:7f:c6:50:0a:
                    36:72:d1:8a:41:23:bf:cf:6d:13:19:73:bc:36:c2:
                    20:ee:d6:c0:ba:21:9b:37:c3:09:66:a8:6b:2c:df:
                    e7:3b:e5:21:46:68:f7:34:83:47:9d:c5:e3:b5:fe:
                    ba:57:f2:83:3c:f0:31:96:2f:6f:b5:e1:8f:cb:f2:
                    db:a4:fe:a2:ac:79:cf:90:07:08:90:5d:e1:1c:f3:
                    01:72:f0:56:27:07:c3:ae:f9:6c:58:8a:e5:cc:ce:
                    cf:e2:80:fa:e1:1b:cc:31:cb:b0:b2:6e:38:8e:48:
                    18:9c:ba:05:e7:47:cc:90:4d:d4:58:d0:cd:fe:0d:
                    c3:89:b0:30:47:a9:c9:da:18:a6:82:ed:52:12:0a:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:6E:FE:45:80:6B:99:27:EF:C0:3C:07:3B:55:CA:35:66:8A:BC
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/ee85c17860346d7d4ecd3b2ba04efd7a14cd513e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:f4:a5:1d:0c:d9:73:0e:4d:72:1b:68:e5:bc:f4:14:06:
         27:3d:47:fc:55:ce:11:71:66:26:c1:ef:2a:35:83:8d:a4:d1:
         da:62:15:8a:fb:55:aa:38:10:81:3b:f5:2c:6e:53:45:73:a7:
         00:a9:55:d5:9f:ab:13:5f:c7:b1:74:55:64:75:b7:39:18:b1:
         f2:41:5c:4e:bf:a4:05:6a:6f:8f:ee:38:bc:79:23:05:c4:b1:
         fd:57:b3:ce:e0:f1:9e:91:85:31:dc:72:75:4f:a3:7f:fc:67:
         e8:b0:4c:d2:be:8c:41:5a:04:6e:20:19:42:a3:c0:4e:42:e3:
         17:74:19:42:82:32:fd:92:a1:d5:d5:30:fc:11:b3:75:00:47:
         bc:aa:98:0e:a4:c5:13:09:e5:25:bd:bd:b1:b0:1b:d8:a0:6c:
         18:02:e9:ea:35:c5:1b:a9:75:ac:7c:93:15:2b:e3:bc:1e:b8:
         9e:74:dd:30:ea:8b:4a:f8:29:f9:27:7c:6b:0c:42:2d:39:53:
         6f:60:10:0b:63:f8:dd:15:e2:3f:64:b6:2d:cf:aa:a0:b0:cd:
         9c:3a:f4:47:95:0c:6b:97:f9:b6:54:82:f7:b4:62:26:d2:03:
         05:4e:6d:57:f5:ae:50:67:1b:15:e5:26:eb:c8:d3:d9:2b:f2:
         81:73:c6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org