Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2e46b4dd9c116cfac7b854e505e5c17908e8494d.roa
File:                     2e46b4dd9c116cfac7b854e505e5c17908e8494d.roa (raw, json)
Hash identifier:          wz4HyN7TDw7Lg1wlGI/wumzKW60jEIx6NjBjBlEE63k=
Subject key identifier:   69:B2:12:9E:3A:5D:F2:47:06:81:21:D0:F2:D8:4A:FB:3E:D6:65:ED
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       1246CE
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2e46b4dd9c116cfac7b854e505e5c17908e8494d.roa
Signing time:             Fri 09 Feb 2024 07:32:05 +0000
ROA not before:           Fri 09 Feb 2024 07:32:05 +0000
ROA not after:            Sun 08 Feb 2026 07:32:05 +0000
asID:                     270047
IP address blocks:        179.0.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197774 (0x1246ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:32:05 2024 GMT
            Not After : Feb  8 07:32:05 2026 GMT
        Subject: CN=2e46b4dd9c116cfac7b854e505e5c17908e8494d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:48:a6:d5:48:7e:36:91:a3:1f:58:f7:db:
                    e3:c7:e0:cd:a2:6e:e8:4b:c5:c5:e2:53:ad:9c:3d:
                    02:96:21:79:51:e2:d9:5f:c7:72:04:0b:b3:d9:e5:
                    fb:33:8e:2b:d5:e8:9e:25:2c:2b:dd:be:08:37:9c:
                    f3:26:84:30:b0:8b:1d:73:d7:b4:be:84:fb:d7:3b:
                    86:7d:e6:e2:4c:89:d1:c4:a0:30:88:2a:0c:82:0d:
                    d1:2f:9f:d9:be:3b:3a:05:cb:83:89:8e:73:10:f1:
                    e8:b1:a0:a8:bf:a9:9d:4f:8b:67:6b:ad:20:b6:49:
                    19:6a:66:09:1f:dd:da:80:c8:f4:94:97:2c:34:4d:
                    0d:92:c4:09:74:17:5b:27:b9:be:67:2a:07:41:0b:
                    9b:d9:fe:6e:6a:57:84:4f:7a:23:f8:30:39:84:51:
                    ec:58:47:0f:dc:fc:be:ed:08:2a:77:79:1a:ea:c7:
                    20:38:96:4c:31:4a:80:5f:ce:2f:42:af:cd:13:dd:
                    41:88:22:d9:d5:66:9e:6c:3d:99:31:98:21:37:a9:
                    f1:eb:9b:6a:a4:c1:83:7f:cb:26:62:8b:a1:aa:6e:
                    4a:dd:00:70:ed:ca:bd:8a:1b:05:52:a4:4c:50:9e:
                    18:e9:da:24:e4:e4:34:bb:a2:4c:66:3e:c6:79:25:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B2:12:9E:3A:5D:F2:47:06:81:21:D0:F2:D8:4A:FB:3E:D6:65:ED
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/2e46b4dd9c116cfac7b854e505e5c17908e8494d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:77:58:79:e4:e6:a3:2a:68:2d:00:68:3f:2e:1f:fb:ae:
         9d:bf:72:ee:76:d6:b6:be:d5:04:f1:9b:00:7c:41:68:61:a1:
         03:80:3e:35:26:69:f0:73:72:32:20:44:f8:ae:18:41:c7:7d:
         62:3f:24:e3:28:b0:78:49:77:3b:a1:ef:b4:82:fa:f1:16:d4:
         61:22:38:ef:d6:7e:6b:30:c3:5b:67:c5:1e:1f:be:a0:73:da:
         80:6c:37:8c:1a:03:48:8a:db:3c:ff:e2:ce:ea:63:1e:47:7e:
         6c:90:7f:f2:27:f4:70:8b:e3:5a:02:57:5d:8f:eb:e3:f5:14:
         f5:ed:72:99:42:da:9a:8b:e5:9b:f9:c3:90:21:31:d8:71:b9:
         b9:74:3b:2c:3c:5b:62:7c:cd:ee:37:42:f0:2c:87:db:b4:e6:
         bf:5d:ad:73:a2:5b:a7:6d:59:45:1a:80:bd:48:42:27:6b:9e:
         3c:a0:e4:b3:5b:43:18:ec:e2:ca:a5:fb:2e:d9:d6:dc:ed:6a:
         bc:bd:ea:b5:d3:6c:d2:7b:5f:23:1b:3f:3c:d3:f1:ec:ea:e6:
         8f:60:93:21:0d:2c:10:7d:00:e4:e6:3f:14:6b:17:16:4c:ed:
         ee:f4:ca:28:f8:44:2d:73:c1:db:e5:0d:1d:f9:01:b0:fa:3a:
         44:ec:ad:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org