Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5443d9b8604a763ec224040465dec2f31b9c4ef3.roa
File:                     5443d9b8604a763ec224040465dec2f31b9c4ef3.roa (raw, json)
Hash identifier:          B809F4glWB1fE9LEAB2bTMh1khgOviGzR5wSC/v8j+s=
Subject key identifier:   EF:A8:A0:D1:7B:7B:C8:00:D9:53:90:DE:45:34:D3:DC:27:7E:B8:CD
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       1243D5
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5443d9b8604a763ec224040465dec2f31b9c4ef3.roa
Signing time:             Fri 09 Feb 2024 07:32:01 +0000
ROA not before:           Fri 09 Feb 2024 07:32:01 +0000
ROA not after:            Sun 08 Feb 2026 07:32:01 +0000
asID:                     270047
IP address blocks:        179.0.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197013 (0x1243d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:32:01 2024 GMT
            Not After : Feb  8 07:32:01 2026 GMT
        Subject: CN=5443d9b8604a763ec224040465dec2f31b9c4ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:be:40:ed:2b:bc:4a:f7:80:3e:35:a9:9c:
                    40:72:b2:be:b9:60:f9:de:7a:bc:ee:90:a8:ca:81:
                    dd:61:86:b3:7a:0d:9d:fd:8a:2b:33:ec:37:6f:db:
                    80:df:64:67:91:7a:d5:76:3d:e7:70:22:04:7b:b1:
                    b9:86:74:85:f7:92:54:0a:34:a4:6f:ff:fd:af:77:
                    5b:d8:be:90:ab:3c:a8:99:6b:5b:13:d1:98:5d:19:
                    f4:a1:b4:08:14:90:b8:bb:3f:2b:d6:58:46:1f:15:
                    5b:2d:ba:a3:4a:57:ec:2e:2c:70:fb:0f:7f:2d:84:
                    19:33:14:78:04:14:0e:a4:9a:7f:1f:65:ac:76:9f:
                    1c:eb:0e:1e:ea:2a:83:db:f4:b5:0e:ed:4c:72:a8:
                    02:48:9e:0a:ef:3d:50:3b:73:90:1c:85:33:23:92:
                    94:86:63:19:a7:52:a9:8c:c6:20:1f:47:eb:1d:24:
                    91:31:75:7c:16:8d:d1:78:9b:30:a7:6d:6f:bc:a5:
                    ce:00:92:45:c3:79:09:ce:af:92:4c:d2:fc:15:36:
                    df:5a:3e:cc:d6:da:3a:11:12:37:91:26:67:11:c6:
                    ab:4e:96:4f:92:fc:3d:1c:14:e8:33:f5:b9:46:64:
                    db:44:62:00:af:fe:b9:d0:5c:b9:bb:62:17:28:6b:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A8:A0:D1:7B:7B:C8:00:D9:53:90:DE:45:34:D3:DC:27:7E:B8:CD
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5443d9b8604a763ec224040465dec2f31b9c4ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:5c:5a:47:89:66:5a:79:9a:67:30:c3:13:53:87:34:bb:
         e8:de:b3:e7:78:9b:3a:b7:43:38:7a:d7:4e:f3:f6:47:1d:50:
         28:ef:73:82:ba:8e:dc:b6:36:ff:87:62:28:f2:96:b1:18:01:
         c9:83:c3:81:c7:83:ad:33:3e:e3:e5:40:d1:ab:91:e5:f9:97:
         74:ed:f4:c2:f9:fd:55:e0:0d:df:3d:17:59:6f:30:c6:5e:44:
         6e:21:ce:7e:f6:9d:99:96:41:89:16:cc:ea:34:b2:ae:85:a5:
         71:2a:8a:66:53:0d:9a:67:32:a6:72:8c:6d:4f:f9:a9:b1:45:
         ff:19:71:3d:4f:42:3e:27:bc:76:e6:2e:bd:c9:b1:96:09:86:
         8d:4f:08:15:3b:fc:d6:5b:15:60:c5:6a:8c:93:1b:ba:a7:c4:
         e8:6b:21:63:f1:85:85:ac:16:e5:a2:e6:d2:bd:3f:06:49:bd:
         7e:3f:2a:c2:ed:9c:3d:56:aa:ed:0c:b2:11:6a:c0:45:70:d8:
         66:55:36:cf:3b:ac:21:de:ea:4b:65:66:d4:27:51:c5:9e:4f:
         63:10:da:a9:24:ac:15:c4:9d:f8:11:91:af:1a:1d:03:57:2c:
         29:57:35:b7:e3:1d:e0:1f:b5:15:ae:36:bf:b6:b4:8e:09:ba:
         e5:1d:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org