Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/f04897f2a3b7f0cec8eba60a04702eddcd4d63c1.roa
File:                     f04897f2a3b7f0cec8eba60a04702eddcd4d63c1.roa (raw, json)
Hash identifier:          0T2k3DDYthpRnFu4lPBGDJZIrnLc0rhRx/1lZmR7VfU=
Subject key identifier:   C1:92:13:75:B0:0E:03:8A:3D:04:9F:ED:70:DE:52:57:1F:04:B3:CE
Certificate issuer:       /CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
Certificate serial:       192CF1
Authority key identifier: C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/f04897f2a3b7f0cec8eba60a04702eddcd4d63c1.roa
Signing time:             Tue 11 Jul 2023 08:30:00 +0000
ROA not before:           Mon 10 Jul 2023 08:30:00 +0000
ROA not after:            Wed 09 Jul 2025 08:30:00 +0000
asID:                     270036
IP address blocks:        179.60.227.0/24 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649905 (0x192cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa6f0faf06b0e820543ffb07cae0e88c6810fef
        Validity
            Not Before: Jul 10 08:30:00 2023 GMT
            Not After : Jul  9 08:30:00 2025 GMT
        Subject: CN=f04897f2a3b7f0cec8eba60a04702eddcd4d63c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:62:fe:1d:28:18:0b:b2:e1:f9:f3:0c:45:
                    3f:60:f0:68:c2:82:ab:0c:83:01:75:60:6f:33:71:
                    ad:30:ca:ac:c7:bf:74:7c:28:ef:57:65:0f:a3:c5:
                    eb:75:85:ef:58:90:87:81:cf:14:3c:66:2e:57:6a:
                    0c:ee:d1:d0:8e:e1:8f:f7:26:c2:ed:cf:16:06:4c:
                    7a:ba:d8:36:50:af:d3:fc:a8:4f:d1:33:3c:af:13:
                    b3:5a:12:83:b7:8a:89:1f:1a:2d:a5:1e:cd:36:c1:
                    dd:b9:b5:bd:58:b0:e4:12:be:f1:00:fc:77:5e:ba:
                    c3:6f:c1:fc:51:49:ec:21:29:7f:6c:75:50:40:b8:
                    7f:aa:91:15:ae:87:ab:1b:c0:5d:da:e6:7d:ea:f4:
                    44:e9:9c:79:29:7c:66:6a:89:f3:c7:01:55:3d:d5:
                    54:65:d2:eb:3b:4b:bd:c9:86:99:ee:15:a8:88:da:
                    4f:6c:e8:31:61:4a:4a:77:e3:71:c5:05:70:5d:f9:
                    70:b3:37:54:2c:62:3a:80:56:d4:13:a4:91:17:d9:
                    9c:84:82:85:5a:28:b9:39:27:3c:fb:76:a5:ef:77:
                    cb:b0:a8:10:76:c2:40:b3:80:e7:71:d5:ff:2d:ba:
                    29:2a:8b:ff:52:de:73:04:b3:15:a8:1a:4c:5c:cf:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:13:75:B0:0E:03:8A:3D:04:9F:ED:70:DE:52:57:1F:04:B3:CE
            X509v3 Authority Key Identifier:
                keyid:C6:CE:D1:A0:30:39:FD:A9:27:3B:AD:3B:53:4D:F2:6B:D7:B5:C4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/f04897f2a3b7f0cec8eba60a04702eddcd4d63c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d793535-cdba-4b0c-986c-d49d8ca657ea/9aa6f0faf06b0e820543ffb07cae0e88c6810fef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:98:c0:b3:60:17:db:df:18:be:7c:64:41:a0:18:01:2a:
         b6:29:c5:1f:1c:f6:a7:ae:8a:a0:5a:e8:41:00:91:ed:7e:c5:
         59:80:dd:73:ab:af:db:11:76:a7:88:9e:3a:dd:02:85:1a:86:
         0d:4f:df:d9:15:a3:62:64:68:24:83:5e:86:ec:21:23:8b:ec:
         2f:c6:52:2a:7f:ba:1b:92:58:67:1d:2a:00:2f:61:14:78:dd:
         34:38:7e:1f:94:62:e9:42:5c:1e:20:ca:e9:02:e9:45:23:ec:
         1e:41:ef:ff:77:38:66:cd:c2:04:23:c5:15:30:60:4c:7c:ab:
         9a:6b:d6:09:a9:36:68:ad:d9:dd:1f:52:a5:89:70:1b:7c:29:
         f8:12:ad:6a:f7:07:b1:3c:ac:45:6a:ed:a9:84:e8:65:92:cc:
         b3:ab:92:d9:ae:a6:1e:43:eb:03:72:91:55:53:10:43:e1:19:
         3d:0b:4e:0f:1a:f5:6f:45:b8:29:a6:fc:30:bb:72:63:df:ae:
         9f:76:35:7d:22:1e:bb:ab:6d:f0:7d:11:a3:6e:b8:10:a4:8c:
         42:fe:a5:f3:d2:cc:69:49:fd:20:a3:5b:d9:63:a1:4d:29:82:
         01:63:b7:00:a2:a7:aa:7e:46:f8:8b:bc:f9:e5:a5:bc:64:a6:
         58:1f:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org