Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/9b8a6efcb5a2b34548d8391d5ca3f1f7f2c42442.roa
File:                     9b8a6efcb5a2b34548d8391d5ca3f1f7f2c42442.roa (raw, json)
Hash identifier:          Oyprx6O00VSOwchYmsh9CfyQbs7n/U+/bHMutPfPZEk=
Subject key identifier:   75:44:84:A2:01:EA:3E:3A:E1:F6:F1:2B:2F:2F:3C:67:51:B9:D8:DC
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       205323
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/9b8a6efcb5a2b34548d8391d5ca3f1f7f2c42442.roa
Signing time:             Fri 07 Apr 2023 08:30:00 +0000
ROA not before:           Thu 06 Apr 2023 08:30:00 +0000
ROA not after:            Sat 05 Apr 2025 08:30:00 +0000
asID:                     207688
IP address blocks:        179.60.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118435 (0x205323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Apr  6 08:30:00 2023 GMT
            Not After : Apr  5 08:30:00 2025 GMT
        Subject: CN=9b8a6efcb5a2b34548d8391d5ca3f1f7f2c42442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:7f:6d:ed:1c:c0:09:3a:00:8e:65:5e:8d:
                    fc:85:55:91:65:6a:7c:87:50:fd:23:32:d0:47:a8:
                    ab:b6:4a:94:d8:56:96:74:20:22:60:7f:ad:64:6e:
                    7c:02:e2:f0:16:ac:c9:22:1e:1d:31:d3:15:1b:ab:
                    e8:4d:74:35:a5:e9:b2:18:ef:7d:f7:af:b1:29:42:
                    c6:23:f9:20:2b:a6:8e:97:d7:54:5e:84:23:0c:88:
                    06:55:b5:3d:83:21:a9:5e:09:d4:fc:48:72:2f:46:
                    55:66:f6:3a:ce:11:36:10:49:b6:ca:8d:4e:b1:26:
                    e6:6f:0f:e6:40:cd:cb:6a:8d:ec:ed:b4:2c:44:fb:
                    b2:68:db:54:c1:cd:79:e5:42:e4:09:28:b0:b3:6c:
                    af:01:e6:df:90:3f:66:4b:a2:45:e7:f7:1d:6a:10:
                    31:12:89:46:92:f6:f8:72:50:cc:f2:11:69:6d:18:
                    d9:4d:e9:bb:c1:c6:89:7f:0a:47:4e:f2:43:90:32:
                    30:60:d5:65:1c:d3:42:30:bb:e8:e6:b4:34:28:a1:
                    22:4d:19:16:51:27:dc:80:54:e7:25:db:96:64:c7:
                    c3:c9:eb:5b:14:7e:19:e4:d2:79:5f:69:c5:08:4d:
                    81:4d:b8:fd:e0:f4:49:b5:5f:86:26:22:bd:c6:82:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:84:A2:01:EA:3E:3A:E1:F6:F1:2B:2F:2F:3C:67:51:B9:D8:DC
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/9b8a6efcb5a2b34548d8391d5ca3f1f7f2c42442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:ee:63:e4:fc:b7:68:ae:8b:4e:9e:67:53:ed:1e:4c:d3:
         82:39:26:df:37:20:28:d9:bc:f2:e5:23:81:ce:14:1f:08:04:
         2d:63:55:41:f2:dc:87:f3:f6:21:c5:d0:b9:40:80:3e:e6:01:
         f4:71:b5:95:06:20:52:23:74:2b:8e:30:1f:47:44:29:66:43:
         df:a1:32:5e:16:df:b4:a9:b8:97:9c:85:be:85:8e:65:60:89:
         96:f2:5f:29:17:fc:fe:f0:f5:24:90:21:8f:66:1f:cc:a5:68:
         92:b5:23:c6:bf:68:0a:a8:b2:af:4b:3d:d3:89:f9:a8:f0:26:
         37:6b:aa:c2:b8:25:a0:68:f8:80:3e:59:ab:c1:ee:5e:63:e2:
         a5:23:2e:b4:de:01:dd:96:99:7a:fb:b1:86:4c:2e:e7:49:64:
         24:50:ec:f2:f9:b1:6a:0b:cb:2c:35:e8:63:0b:52:07:ed:e1:
         3e:1d:f9:a0:04:80:f8:cf:10:8c:0a:e9:4c:be:6e:c0:c5:38:
         2c:3a:33:6f:67:3a:41:ae:cf:e8:7d:4a:c4:2d:8c:dd:d7:c4:
         02:5e:c3:9f:7a:36:ff:3e:52:ba:30:12:9f:6c:e0:8b:f3:9d:
         40:ed:c6:ae:d5:68:a1:f9:04:0f:14:47:9c:e1:4d:b5:ca:30:
         e1:88:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org