Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/8be2a6b5da51accfa7161dc0874e473b63c35261.roa
File:                     8be2a6b5da51accfa7161dc0874e473b63c35261.roa (raw, json)
Hash identifier:          w5dOKRghe0JL7qnpVdLPW7SdMg65bBPrTOvzvx7xU7k=
Subject key identifier:   DC:2F:B2:BC:96:3B:8D:19:CD:6B:42:D1:3F:F2:65:A5:34:09:43:22
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       248081
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/8be2a6b5da51accfa7161dc0874e473b63c35261.roa
Signing time:             Wed 06 Sep 2023 20:06:10 +0000
ROA not before:           Tue 05 Sep 2023 20:06:07 +0000
ROA not after:            Sat 06 Sep 2025 20:06:07 +0000
asID:                     207688
IP address blocks:        179.60.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392193 (0x248081)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Sep  5 20:06:07 2023 GMT
            Not After : Sep  6 20:06:07 2025 GMT
        Subject: CN=8be2a6b5da51accfa7161dc0874e473b63c35261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:6d:dd:dc:fa:33:66:ea:cc:69:6a:81:b9:
                    5f:2b:44:c3:d5:80:58:38:0e:4d:3e:9c:c0:1b:31:
                    09:0a:44:d9:0f:cc:ba:1f:d1:5f:c7:59:e5:40:16:
                    e6:9e:fb:e3:8b:70:bb:3f:b2:50:3f:b9:29:f7:5a:
                    12:49:ed:9d:eb:5a:5b:bd:dd:e2:d5:34:a7:48:58:
                    18:a3:90:5b:da:56:3a:f2:86:8f:45:21:12:41:98:
                    b1:60:34:27:e9:82:2d:27:d6:0a:44:cf:ea:4a:3d:
                    fe:57:1a:59:b0:32:61:e8:dd:99:c2:ac:04:9e:99:
                    9e:37:2d:c5:89:9a:34:16:a9:68:62:db:ba:0d:bf:
                    92:c4:cb:c7:ee:3b:53:43:33:e1:53:29:72:73:94:
                    1e:cf:66:cf:0b:db:b6:d1:e8:3c:53:35:95:12:d2:
                    b7:f5:37:be:2e:7f:3f:23:18:0d:8c:d1:86:15:a7:
                    e6:1f:e0:b8:fa:a2:bb:1a:f1:9d:32:7a:c8:1c:2d:
                    19:40:66:32:74:fb:bc:d2:bd:19:51:ac:1b:34:6b:
                    f8:b9:f9:3e:eb:31:02:cc:05:65:06:c0:de:79:e9:
                    bb:9f:26:ca:f9:dc:67:54:39:33:60:4b:fc:d8:55:
                    1b:25:03:b3:34:bc:af:6f:ea:a2:41:4b:aa:37:77:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:B2:BC:96:3B:8D:19:CD:6B:42:D1:3F:F2:65:A5:34:09:43:22
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/8be2a6b5da51accfa7161dc0874e473b63c35261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:a6:25:da:b6:b2:e4:9b:eb:d4:e4:4f:bb:b9:06:27:04:
         8b:b7:f7:4c:2a:43:dc:ba:36:6d:c8:21:44:fa:da:cd:55:d0:
         6c:32:df:c4:2d:67:5a:3c:f1:1f:8d:33:95:dd:f5:ee:48:d2:
         18:1f:54:a5:29:f8:6b:63:42:64:16:86:a1:fe:9c:de:88:8a:
         fe:37:56:a8:ba:76:c9:3a:e1:81:9e:71:37:f6:1f:a5:2c:1e:
         d4:c7:2a:3d:d6:0b:b7:ba:b3:d6:85:ca:8f:fb:a6:78:26:e7:
         4d:3b:9c:59:8e:38:9f:f7:e9:60:a4:f4:7b:06:80:44:22:1e:
         95:e7:fb:86:85:c7:44:36:fc:65:88:d2:cc:7a:47:7f:c8:45:
         3d:15:17:59:9a:0c:e0:61:e7:48:48:02:f4:c1:4e:b2:0b:aa:
         71:3c:ec:88:7f:40:85:2c:9d:48:13:45:d9:24:ae:1e:d3:88:
         47:b2:73:bf:ec:c4:66:9c:dd:78:7a:4a:9b:34:58:8b:87:48:
         f9:9d:86:24:3f:f8:42:c0:51:4f:79:08:a4:bf:f8:ef:77:dc:
         bf:e2:e0:5d:70:35:2e:68:bd:9f:4d:eb:f0:a7:ef:87:f5:a3:
         61:d9:3f:ec:6e:5c:f7:18:f4:3a:97:4d:93:0f:90:2a:0f:4e:
         24:d7:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org