Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a66f57625b577b1978eede636a8452cee033de8f.roa
File:                     a66f57625b577b1978eede636a8452cee033de8f.roa (raw, json)
Hash identifier:          cS7VJapdm08hZcHRYT8nBwc1tRglbFVC3UIl2CG/GE8=
Subject key identifier:   66:43:C6:3D:48:42:DD:4B:BF:75:98:7B:46:8E:7E:2E:4F:6C:32:F3
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       17DD29
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a66f57625b577b1978eede636a8452cee033de8f.roa
Signing time:             Tue 16 May 2023 08:30:02 +0000
ROA not before:           Mon 15 May 2023 08:30:02 +0000
ROA not after:            Wed 14 May 2025 08:30:02 +0000
asID:                     270036
IP address blocks:        179.60.224.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563945 (0x17dd29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: May 15 08:30:02 2023 GMT
            Not After : May 14 08:30:02 2025 GMT
        Subject: CN=a66f57625b577b1978eede636a8452cee033de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:9f:7d:50:35:73:8e:38:a5:e5:5b:9a:da:
                    a7:76:5d:5d:09:70:02:3c:da:39:d2:87:50:ed:26:
                    eb:f6:a5:8b:51:30:69:ee:5d:8d:3e:5e:85:c8:92:
                    47:d7:2e:c6:78:12:9f:61:8b:03:57:5a:23:e7:b0:
                    c4:dd:b0:1e:d6:2f:a1:38:d1:9c:45:f2:3a:fc:dc:
                    56:2b:a2:6b:f1:5c:6c:fe:ff:3e:7d:e7:af:c0:b0:
                    1b:57:f8:33:66:8d:24:c9:8b:bd:96:44:c3:f9:ea:
                    71:95:14:91:7b:85:2b:73:38:d1:7e:67:7d:fa:46:
                    0e:02:ed:9b:1c:9b:a3:4d:a3:62:12:eb:57:5e:26:
                    0d:85:64:2b:bd:cb:a0:9a:bf:05:b0:f0:f1:94:dc:
                    ad:ac:7a:93:f1:7a:fc:b4:eb:12:e2:c6:c4:90:41:
                    be:2e:4d:47:85:d0:97:c8:f7:7c:27:7d:7f:93:ae:
                    70:64:91:d0:1f:7f:22:6c:ba:e4:69:c5:bb:a6:4c:
                    16:29:24:08:f6:24:92:91:9c:50:c0:b5:7c:3f:06:
                    5c:2d:1b:2b:f5:63:ea:83:11:ad:28:aa:5a:42:57:
                    1d:f2:3f:67:36:73:17:e9:80:43:27:81:3d:77:2c:
                    25:1a:93:92:3c:05:f7:fb:d1:9d:94:aa:7c:7a:2a:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:C6:3D:48:42:DD:4B:BF:75:98:7B:46:8E:7E:2E:4F:6C:32:F3
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/a66f57625b577b1978eede636a8452cee033de8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:72:90:be:4f:4c:a9:92:dd:7c:2d:69:b6:7b:6c:ad:5f:
         21:05:49:f6:50:47:b3:bc:3c:56:5f:7b:52:b6:48:89:62:30:
         6f:71:5d:43:2a:10:83:7d:fd:ae:9c:8b:92:25:f0:90:0a:49:
         ea:cb:00:0b:63:55:45:b7:59:80:d3:aa:c2:ec:15:21:9d:c0:
         de:9b:c0:18:66:f1:19:50:07:a0:9c:47:b2:6d:ab:49:31:51:
         af:ab:04:17:70:57:9f:23:f2:39:22:8c:65:8a:9c:b1:27:d2:
         c7:8a:5a:6e:33:98:32:59:6c:0b:d0:f9:50:c5:f7:7c:f2:30:
         87:37:c0:b8:a2:8d:72:1f:e7:a3:ae:12:f8:9c:10:02:5f:64:
         62:5b:23:c9:86:b7:7d:94:ef:78:e6:76:8b:17:02:dc:26:2d:
         07:e2:71:68:00:cf:6c:ec:c8:86:ca:85:c9:d2:ba:1b:41:a8:
         5e:02:ba:6d:89:71:fb:98:3f:68:35:0b:0a:45:51:0e:57:0e:
         e3:f8:f1:13:e8:c8:cc:1e:e0:53:1c:59:1b:9c:67:35:83:d2:
         24:3c:bf:50:5a:93:d5:bd:97:94:a4:bd:72:8b:36:06:f9:a0:
         01:50:a4:ed:54:dc:6e:7c:68:cd:7c:4c:67:96:55:df:18:4f:
         7a:e4:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org