Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c49706915cb4483052a7d1767c847f52b5e82a8c.roa
File:                     c49706915cb4483052a7d1767c847f52b5e82a8c.roa (raw, json)
Hash identifier:          EO8jkywTG2B8x0olUAvbZnQzJbk/vCr69oHHSfg5D4g=
Subject key identifier:   99:FC:C8:56:53:0B:94:D1:0B:1F:8E:78:22:55:A3:3A:3D:86:C8:A4
Certificate issuer:       /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial:       124ADF
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c49706915cb4483052a7d1767c847f52b5e82a8c.roa
Signing time:             Fri 09 Feb 2024 07:32:09 +0000
ROA not before:           Fri 09 Feb 2024 07:32:09 +0000
ROA not after:            Sun 08 Feb 2026 07:32:09 +0000
asID:                     270047
IP address blocks:        179.0.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198815 (0x124adf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
        Validity
            Not Before: Feb  9 07:32:09 2024 GMT
            Not After : Feb  8 07:32:09 2026 GMT
        Subject: CN=c49706915cb4483052a7d1767c847f52b5e82a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:8f:83:37:8b:a5:eb:d7:7f:99:6d:18:06:
                    7c:32:8f:b9:45:c0:da:33:eb:3f:5a:e9:06:30:d8:
                    6e:e3:8e:84:66:26:ea:1e:7c:e3:96:c7:30:3b:b6:
                    54:b1:01:db:78:94:97:1a:ea:c1:d1:aa:43:48:39:
                    de:92:95:46:2f:7a:66:f7:fb:ad:27:39:9d:81:84:
                    26:1d:33:3d:34:7b:95:74:3f:bd:5c:33:e1:be:c8:
                    75:61:47:23:35:76:59:c3:4d:cb:c7:46:14:29:99:
                    12:40:c5:26:3d:5d:96:cc:62:1f:28:16:c3:7d:a0:
                    d4:21:87:f3:eb:83:42:a7:58:20:fb:88:65:48:97:
                    7f:f9:0a:5e:1a:85:a5:97:ea:32:e6:9f:c2:16:52:
                    4c:5f:82:9e:bc:52:ed:3b:3a:df:c3:fa:d7:fa:dd:
                    4a:6e:c0:b1:b9:bc:e1:66:eb:bb:d0:5b:5a:ad:b5:
                    8d:25:83:fc:00:53:b2:da:70:be:d8:5f:06:69:26:
                    d2:a7:94:7a:09:5c:66:13:79:f5:a5:01:a1:4e:c4:
                    b8:39:78:d6:a4:7c:ba:d4:a4:f3:4b:13:c5:57:27:
                    4e:ac:59:cc:2f:ee:08:2a:c5:6f:32:26:fd:fe:4b:
                    69:5c:c5:95:67:ce:27:c7:da:e9:04:28:f0:c2:0f:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:C8:56:53:0B:94:D1:0B:1F:8E:78:22:55:A3:3A:3D:86:C8:A4
            X509v3 Authority Key Identifier:
                keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/c49706915cb4483052a7d1767c847f52b5e82a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:24:f0:63:c5:36:6d:1c:d7:9e:36:c5:db:62:a9:b5:5f:88:
         e2:22:20:ac:a5:a9:51:07:c0:a4:b0:15:5b:79:5b:7d:d7:a5:
         49:9e:3a:aa:3d:26:03:cd:e6:bf:20:56:d9:4a:c4:d6:82:99:
         58:92:c3:72:79:73:e7:62:d7:22:e0:f6:c6:88:dd:c9:1c:ae:
         20:48:34:4f:4e:e8:38:9d:af:ea:a9:dd:6b:4c:ce:1c:f7:c5:
         66:29:8a:3a:3c:80:70:5f:64:0a:df:66:c6:05:78:d6:f5:b5:
         ec:c7:1e:09:61:aa:40:1b:b0:79:59:38:4a:3d:28:e7:6b:bb:
         03:61:ef:f8:31:2c:b9:a1:e9:0a:ee:3a:5e:9f:b0:53:b7:86:
         b9:a5:32:e1:87:94:ea:98:e2:f1:80:2b:d5:27:4e:51:80:9a:
         3d:d9:5a:93:a6:8f:6d:87:79:d3:05:fd:1e:20:b3:0c:41:74:
         28:c3:8c:bb:ff:91:b0:3d:06:16:49:43:41:93:6c:15:53:c9:
         1c:28:6d:ee:27:55:1d:0f:ce:08:d3:aa:ad:fe:c0:22:8e:a7:
         28:ea:7c:ef:aa:7e:37:c3:23:8e:2b:17:a4:1a:37:c8:c2:c8:
         79:0a:18:45:7c:bc:15:85:40:d1:f3:09:43:1d:bc:0f:98:4d:
         18:cb:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org