Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa
File:                     a42b864650dda81065d5d7f89134c237a9ce1fab.roa (raw, json)
Hash identifier:          VGhCe2EZ/LlS3nLybEkTLVjTUfBnXpkRrhKIQW04LcU=
Subject key identifier:   87:4B:DF:CB:BA:2C:73:15:AF:A5:BC:69:16:64:94:FC:D0:09:C7:81
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       0B43
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa
Signing time:             Thu 10 Feb 2022 20:57:21 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     270047
IP address blocks:        179.0.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=a42b864650dda81065d5d7f89134c237a9ce1fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:1c:fa:22:fa:04:01:99:4a:4a:41:78:97:
                    8c:b7:fb:95:15:75:78:38:c5:2a:f7:e6:76:80:81:
                    59:cd:db:5f:2c:ac:d9:13:6b:a3:6e:86:16:24:42:
                    8d:5f:8c:67:44:24:2c:6e:87:a9:53:05:1f:45:eb:
                    4c:93:f0:de:39:f2:00:03:d3:83:86:a4:1a:02:c5:
                    11:fa:3c:6e:43:30:84:de:10:b4:87:89:d7:81:21:
                    63:92:59:cb:98:69:81:55:5d:88:5d:60:99:44:7a:
                    d4:61:53:a7:25:39:70:17:5a:08:91:1f:ba:fd:e8:
                    41:c0:b4:6d:4b:df:c0:0c:cd:8e:b3:b2:04:8e:58:
                    a5:27:71:37:ae:59:98:2d:fe:69:fa:01:05:46:9a:
                    78:83:3c:d6:49:7c:9b:8c:5d:de:67:15:9f:ab:0f:
                    b1:8f:99:da:45:c8:59:80:3f:94:9d:c9:b9:a7:a8:
                    a3:79:ee:dc:30:8e:1e:a0:c5:e4:b9:14:c6:ec:1a:
                    a5:e5:00:0d:6f:77:b2:c8:07:76:8c:cf:7a:a1:7f:
                    81:11:f8:1d:49:db:d9:17:fa:11:f3:70:4b:9d:8b:
                    78:7d:11:d5:85:3e:3b:80:22:d0:8f:e9:52:2f:54:
                    2e:13:08:e7:96:ef:d7:32:7c:d9:c6:51:56:1a:c3:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:DF:CB:BA:2C:73:15:AF:A5:BC:69:16:64:94:FC:D0:09:C7:81
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:17:80:a3:8d:f9:9a:5b:92:c6:31:14:7e:9f:6b:60:40:
         00:f5:a4:5f:6c:e7:83:47:74:b4:b8:c1:25:79:53:1a:50:36:
         78:07:08:27:5a:b1:0a:fa:b3:4f:7f:2f:9b:cf:d5:38:a9:0b:
         02:dd:67:c1:fb:a2:c3:34:aa:36:8d:b3:00:ad:d1:c1:d8:d3:
         e0:01:b9:c6:51:8c:7b:7f:a6:7d:4a:ce:74:67:ea:7b:b5:30:
         53:8e:8f:fb:82:fa:4c:f4:03:57:87:f6:fe:fd:f0:78:4c:ff:
         d0:4b:61:6e:49:04:62:80:90:72:47:21:2f:2a:96:ce:bf:c5:
         8f:72:f0:3b:ec:76:f9:56:04:28:03:9e:4a:7a:cc:5f:51:95:
         18:cc:1d:ee:f5:df:00:e6:30:5f:a4:30:50:12:90:f5:91:db:
         ba:18:a6:23:75:33:11:1d:f3:9f:bf:db:74:b5:f4:56:c3:8b:
         1d:14:16:ff:f0:9e:72:d3:50:d2:a7:52:20:ac:29:df:7e:6c:
         b6:ad:1d:20:06:88:83:d6:ab:3f:23:d6:e4:ea:5b:e7:76:a0:
         96:02:61:17:71:fe:07:33:9f:d8:94:c8:de:70:8b:2f:30:2c:
         4c:6b:62:c1:7f:f4:af:5e:73:a9:8e:ef:92:bc:f0:27:50:5b:
         44:c3:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org