Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/bdfb5222f99cc848440180867b61e6dc4c0a2e4b.roa
File:                     bdfb5222f99cc848440180867b61e6dc4c0a2e4b.roa (raw, json)
Hash identifier:          HbwGnK1RMwlZZfWwdv4KDM3SWoGD5TlNjeC4Tq30jcg=
Subject key identifier:   DC:64:20:26:44:C5:5F:34:03:25:2F:8A:4F:02:4A:38:55:11:F9:DF
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       125770
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/bdfb5222f99cc848440180867b61e6dc4c0a2e4b.roa
Signing time:             Fri 09 Feb 2024 07:32:21 +0000
ROA not before:           Fri 09 Feb 2024 07:32:21 +0000
ROA not after:            Sun 08 Feb 2026 07:32:21 +0000
asID:                     270047
IP address blocks:        179.0.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202032 (0x125770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:32:21 2024 GMT
            Not After : Feb  8 07:32:21 2026 GMT
        Subject: CN=bdfb5222f99cc848440180867b61e6dc4c0a2e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:95:20:4d:db:63:90:58:78:47:e9:79:e9:
                    e8:4b:33:94:0c:3b:de:73:0f:2c:ef:dd:d0:ec:d1:
                    0c:46:14:aa:b9:ae:3a:5c:2f:af:4f:4c:9c:88:00:
                    5f:74:79:42:98:2f:49:92:76:23:5f:f2:5b:8a:25:
                    cb:c1:74:2c:99:a9:2c:60:5d:8e:89:cc:1b:45:c8:
                    2d:6d:ca:6c:42:fe:b7:4e:1b:90:54:f5:f4:cd:f9:
                    d7:61:13:51:e2:5b:38:94:c4:d3:67:0c:42:c9:71:
                    ba:2a:5b:aa:85:9f:dc:1d:55:87:a4:99:06:aa:b4:
                    82:c0:05:f4:2c:e0:76:32:34:6b:ad:6f:0c:38:23:
                    46:4d:e8:b3:50:a1:7f:91:4d:f7:d3:a8:0a:2f:6f:
                    5d:16:f3:1b:6b:da:c7:27:19:0d:88:bc:f0:ce:2a:
                    9f:0d:e7:fc:94:d2:e2:53:8a:be:e8:6b:f7:21:66:
                    4b:d0:30:15:0b:9b:0b:e8:86:6c:b0:e8:fe:23:4d:
                    e1:f4:a8:e7:23:47:09:cf:15:9d:d3:b8:2c:6d:30:
                    be:45:c8:a2:dd:6c:71:7d:0b:30:0b:5f:d1:d2:6c:
                    df:97:dd:cb:3a:8d:a6:20:df:44:ec:8f:23:8a:c8:
                    70:df:c0:1e:2a:96:d4:cd:e5:bd:bc:19:3d:93:07:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:20:26:44:C5:5F:34:03:25:2F:8A:4F:02:4A:38:55:11:F9:DF
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/bdfb5222f99cc848440180867b61e6dc4c0a2e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:90:c6:b8:c0:e8:44:15:24:8e:c5:e7:21:2a:ed:2b:f2:
         4c:43:73:94:1f:e0:05:76:da:93:29:ce:93:35:3c:81:39:03:
         0e:11:c7:f8:83:f6:23:06:71:46:9b:cd:cc:1e:cc:5f:a1:93:
         94:11:6a:6e:af:47:16:dc:c4:b0:d1:b1:e6:86:c1:d2:5c:da:
         de:0c:34:8d:de:d6:c5:e4:bb:fd:4f:17:76:58:66:d5:56:a4:
         e1:c6:7b:9b:9b:79:e6:7f:0d:99:4b:62:42:c8:d1:e3:75:f5:
         91:96:71:9c:75:3a:f4:bc:20:fb:fb:c9:8a:ec:5a:27:ea:d2:
         4f:d1:56:ad:63:02:cc:82:7e:23:a9:43:38:fc:ce:3d:cd:ec:
         5d:4b:18:aa:9e:d1:33:72:04:8f:b0:3c:41:d0:89:4f:e7:b2:
         f8:33:25:d2:02:15:59:7f:61:84:1a:91:fc:82:55:3a:09:8d:
         f8:57:42:7c:1b:23:b2:5a:49:b8:79:3b:ec:28:e3:c9:80:87:
         66:56:d4:84:8e:93:25:d0:1f:fa:84:96:4b:8c:34:20:3f:80:
         89:90:29:ca:27:a6:7e:97:86:ed:67:d9:7b:0b:9c:e9:c4:7c:
         07:8f:0f:e4:02:b3:a4:7d:b5:38:9c:80:c0:7d:1a:2b:aa:81:
         15:de:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org