Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/01dfec34a74c93a541ea5e2cbcfe08e6b27e821e.roa
File:                     01dfec34a74c93a541ea5e2cbcfe08e6b27e821e.roa (raw, json)
Hash identifier:          9wYKwXXNjvwdD2ho/wfyvpJ91uhnutd9M2UwnpxFrFc=
Subject key identifier:   82:3F:90:C8:E6:1A:EE:A6:44:8A:BA:CA:E7:E7:ED:44:1E:EB:7E:72
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       123FC8
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/01dfec34a74c93a541ea5e2cbcfe08e6b27e821e.roa
Signing time:             Fri 09 Feb 2024 07:31:57 +0000
ROA not before:           Fri 09 Feb 2024 07:31:57 +0000
ROA not after:            Sun 08 Feb 2026 07:31:57 +0000
asID:                     270047
IP address blocks:        179.0.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195976 (0x123fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:31:57 2024 GMT
            Not After : Feb  8 07:31:57 2026 GMT
        Subject: CN=01dfec34a74c93a541ea5e2cbcfe08e6b27e821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:e1:2d:ba:a0:c0:f5:e3:92:b6:12:8a:82:
                    1c:0c:a6:c3:d5:e0:39:6c:3d:65:30:c6:fe:fa:33:
                    c1:8a:eb:bc:53:7f:d2:a2:39:45:bd:75:e8:36:53:
                    15:6b:45:28:77:64:53:9d:55:4e:e2:13:28:01:e3:
                    0e:83:0b:b7:37:6d:a4:c1:cd:91:d1:b7:1b:fe:cb:
                    4c:3c:ff:14:f2:15:82:1b:d1:ca:db:db:97:71:63:
                    2f:df:14:9c:d8:02:e5:c2:6f:e8:8f:e8:d1:ee:bb:
                    ac:05:d9:c6:e5:b2:16:5b:f6:94:24:85:de:b0:46:
                    d2:51:6f:ee:e4:3e:db:8f:e5:cf:56:08:47:15:bd:
                    7a:f6:f2:ce:03:0a:4f:f0:b7:56:b0:1f:db:13:aa:
                    d0:37:1c:b6:d1:d6:6e:6a:b6:26:07:0e:44:21:44:
                    2a:0f:4a:19:d9:65:61:99:cb:63:b7:4f:70:bc:17:
                    1f:69:4f:2e:bf:45:b2:f8:ca:9e:dd:8d:e2:be:6f:
                    78:c4:05:44:3b:20:36:f0:d0:97:b2:5b:54:18:f2:
                    81:e5:37:ad:20:ed:e2:19:3b:57:3e:cb:be:4e:19:
                    91:8d:4b:8b:39:29:ad:d7:11:56:bd:e9:40:81:0f:
                    c5:39:ae:a2:24:4e:57:1b:a6:8e:5f:78:88:ad:9d:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:90:C8:E6:1A:EE:A6:44:8A:BA:CA:E7:E7:ED:44:1E:EB:7E:72
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/01dfec34a74c93a541ea5e2cbcfe08e6b27e821e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:e6:86:b6:0a:d8:31:9f:39:73:36:60:2b:7d:f7:90:d0:
         70:f9:3d:38:a1:3e:ad:d6:8a:63:74:5d:f8:db:30:1c:a7:c7:
         f7:0b:5a:05:90:5a:96:54:ec:20:dd:6c:ce:23:a8:14:92:c1:
         c4:d7:b6:5b:44:66:14:0e:5b:17:4d:9e:a4:4b:8c:19:9d:36:
         46:c8:72:f0:3c:79:89:10:22:46:3c:0b:fc:b5:d7:bf:3c:43:
         5a:08:84:8b:69:14:50:65:2b:51:21:95:59:71:1f:6c:e5:ca:
         07:11:c3:24:c1:f2:a2:27:8d:4b:6f:f6:57:71:c1:95:62:72:
         a9:9e:26:24:cd:60:15:eb:46:e6:6b:ad:0b:7d:17:6c:82:57:
         93:2f:65:f0:c3:87:3e:88:9e:be:4a:d3:79:a1:16:90:b3:82:
         22:20:86:5f:14:0b:50:fc:9a:11:d7:8c:86:12:e9:f2:1b:76:
         a6:d4:8e:f6:7c:3c:e0:da:32:70:35:66:eb:94:70:85:39:3e:
         1e:7c:1a:c9:77:3c:01:53:ed:06:3b:0b:50:6a:c2:cf:e5:5b:
         57:da:eb:2d:0b:cc:30:05:1f:3e:fa:55:c0:71:55:f2:97:2a:
         59:1b:13:b5:a3:08:ac:bd:73:5a:d3:b5:e6:a9:ab:91:6b:fc:
         5c:95:5a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org