Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/90f2a0a75fa0d4469291ed4a071587e8d87d8cae.roa
File:                     90f2a0a75fa0d4469291ed4a071587e8d87d8cae.roa (raw, json)
Hash identifier:          KD/znfIcJd8EwQv5LKieyNtIlVt7T3rD8N9JA2dFH0o=
Subject key identifier:   1A:BF:99:CB:B1:D0:73:A3:AF:6D:C5:FA:8A:51:4B:03:40:49:D5:8F
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       249CD4
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/90f2a0a75fa0d4469291ed4a071587e8d87d8cae.roa
Signing time:             Thu 07 Sep 2023 07:59:22 +0000
ROA not before:           Wed 06 Sep 2023 07:59:20 +0000
ROA not after:            Sun 07 Sep 2025 07:59:20 +0000
asID:                     395839
IP address blocks:        179.60.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399444 (0x249cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Sep  6 07:59:20 2023 GMT
            Not After : Sep  7 07:59:20 2025 GMT
        Subject: CN=90f2a0a75fa0d4469291ed4a071587e8d87d8cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:cf:86:78:c8:9f:62:da:5f:0b:78:82:96:
                    89:b8:7e:46:64:75:a1:a9:b1:2e:b8:ca:a2:84:ed:
                    bd:c9:0a:26:83:8f:6f:65:66:8e:0c:24:83:4c:89:
                    00:3d:d0:c3:28:ff:3d:e6:44:81:e5:7b:c0:19:c0:
                    19:b4:5d:49:00:be:c8:74:c6:83:e2:37:2c:73:35:
                    a3:e7:7f:4b:e1:d1:1e:4e:4a:b9:06:fb:dd:14:90:
                    a6:16:c0:6b:49:66:34:7d:3e:71:6d:3f:0c:a6:41:
                    ad:e5:45:11:3d:c5:37:4d:34:77:90:b9:58:de:0c:
                    4f:eb:fe:7a:83:9c:c8:7e:47:1d:3d:10:2f:72:04:
                    1c:ea:4c:fb:47:22:51:37:d3:83:c3:9c:c4:56:9b:
                    8b:14:75:41:55:1e:26:7b:a9:3d:2a:b0:2d:a0:3a:
                    e2:66:7f:53:1b:25:e5:56:da:1a:74:c8:64:92:97:
                    b5:97:df:15:e9:63:27:b7:45:4e:24:56:f8:3e:3b:
                    ff:38:a6:23:36:4c:b2:17:9b:cf:b5:ef:d6:71:bd:
                    20:74:db:a1:7b:be:01:8e:4c:66:e1:90:5e:e3:fd:
                    14:91:1b:77:85:63:6f:e3:84:61:c3:d3:fd:76:46:
                    80:da:14:ce:a7:76:4b:32:4f:3c:16:43:83:d6:58:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:99:CB:B1:D0:73:A3:AF:6D:C5:FA:8A:51:4B:03:40:49:D5:8F
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/90f2a0a75fa0d4469291ed4a071587e8d87d8cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:ac:27:e8:32:bb:54:4b:68:61:5e:ab:8d:eb:43:a4:6c:
         e3:80:49:3f:4c:ae:02:c5:25:36:3e:96:a3:98:96:a3:bf:a7:
         68:24:88:bf:34:51:9f:28:b3:45:c6:c6:8a:0a:97:17:c1:dd:
         67:0f:51:a9:97:72:53:8b:65:7a:a0:80:6b:86:76:1a:80:d6:
         43:45:21:a2:65:95:78:8b:ce:bb:8c:d9:9e:a5:0d:ce:85:15:
         01:a5:81:d1:08:17:f1:2f:e9:03:fc:24:79:6c:16:8f:fe:40:
         96:5e:02:3e:de:aa:d1:cb:12:7a:70:b7:9c:67:a2:c8:fb:c6:
         ee:57:f0:7d:86:78:d9:7c:4f:fc:08:24:8c:f5:73:00:69:45:
         ca:4e:9a:8e:1b:c3:38:fc:79:0c:58:a2:c4:3b:2f:aa:25:5c:
         88:80:5d:1a:ff:65:65:6c:31:0e:01:77:0d:46:47:2a:31:e4:
         60:ea:11:b8:22:77:92:48:1e:ec:00:40:58:fd:09:49:14:90:
         02:44:64:71:98:5a:94:50:91:8c:3e:c7:99:86:0b:02:07:0c:
         0c:5b:50:f5:ba:9f:c1:92:aa:21:09:52:e8:67:eb:6b:0f:f8:
         20:df:96:30:8e:f1:32:84:c2:96:95:13:17:45:a4:a0:43:30:
         bd:51:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org