Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/be53fff108089e55f447cd9f8bcb5d096e428317.roa
File:                     be53fff108089e55f447cd9f8bcb5d096e428317.roa (raw, json)
Hash identifier:          GERrtj4mYFqm7ApKE/+NzyoqzsRYcOjSpSTg++WEs5I=
Subject key identifier:   E2:7E:71:22:05:1F:D3:4B:79:97:A8:73:9D:3B:35:35:76:DF:4E:17
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       249844
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/be53fff108089e55f447cd9f8bcb5d096e428317.roa
Signing time:             Thu 07 Sep 2023 07:59:21 +0000
ROA not before:           Wed 06 Sep 2023 07:59:20 +0000
ROA not after:            Sun 07 Sep 2025 07:59:20 +0000
asID:                     209588
IP address blocks:        179.60.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398276 (0x249844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Sep  6 07:59:20 2023 GMT
            Not After : Sep  7 07:59:20 2025 GMT
        Subject: CN=be53fff108089e55f447cd9f8bcb5d096e428317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:23:1b:38:8f:95:3b:34:58:0c:14:81:0b:c6:
                    ec:07:35:9d:3e:b1:69:76:27:28:7f:4b:1c:8e:7b:
                    57:8c:17:07:a4:88:82:01:16:de:aa:23:69:74:bb:
                    45:e1:c6:b6:08:38:00:45:87:75:ee:74:01:49:2c:
                    f2:21:26:14:e8:bd:a5:e0:5b:37:b7:5c:56:4b:7e:
                    8b:06:3d:63:cc:92:71:b4:fa:4c:ef:31:d8:1e:bb:
                    8d:25:f0:9c:5a:e0:c4:05:2a:37:12:d8:0e:46:b3:
                    ef:95:58:65:18:9a:be:f2:74:85:db:d4:3f:bf:ae:
                    59:a0:17:f6:aa:30:1b:9e:fc:3d:ae:d0:35:f8:2e:
                    1d:af:79:5b:9f:e6:40:82:42:f6:aa:29:a8:6e:35:
                    c9:6c:f6:b4:1d:d4:c7:66:e0:97:91:f8:66:dc:41:
                    30:5e:eb:2f:8c:98:0d:66:75:1c:9f:c9:f2:3f:cf:
                    d8:1f:34:31:bc:8c:f1:76:e2:e3:a7:b7:3e:10:88:
                    b5:d3:f3:2a:b6:37:64:58:bc:de:ed:35:c1:d2:5f:
                    1b:27:58:03:7d:47:f3:b5:ed:5c:4f:de:f4:67:2c:
                    a8:fe:08:ee:c0:6d:fd:9e:98:50:95:53:b6:7c:39:
                    78:f5:a2:09:05:fe:f0:55:9a:40:1c:42:de:30:3d:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:71:22:05:1F:D3:4B:79:97:A8:73:9D:3B:35:35:76:DF:4E:17
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/be53fff108089e55f447cd9f8bcb5d096e428317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:98:74:63:14:b2:35:17:12:d8:01:6f:dc:3b:9f:bb:94:ee:
         35:e7:6b:8d:ab:76:45:34:47:3d:32:e9:99:5f:78:6c:5e:20:
         a4:b9:76:95:e8:6d:91:3c:37:e4:75:11:99:b0:c7:35:98:a1:
         0b:db:1f:d5:2a:1b:95:e4:7d:df:ca:d1:b3:89:1b:56:63:c4:
         30:dc:36:53:6f:cf:72:c2:70:a4:37:d0:ac:6a:8e:be:1e:22:
         73:db:b3:e2:a8:0e:c1:dc:55:b2:7f:fe:8c:3d:90:18:a5:c6:
         62:e5:99:90:75:ea:23:3a:82:30:6b:29:c6:b2:3a:15:60:54:
         f5:26:99:34:e0:06:23:5f:4a:86:39:cf:4c:a2:da:6a:1d:00:
         85:42:01:0d:fd:6a:2a:2a:92:8f:f9:78:b9:e9:e2:58:84:a4:
         d0:b9:fc:5f:6e:13:3d:a4:ee:97:5a:f7:12:b6:8b:ae:69:36:
         85:74:f2:f0:e3:2c:9f:7d:41:6f:b0:39:3e:9c:98:4d:88:80:
         f1:0f:b1:e6:37:d0:5d:61:df:60:ab:ff:2b:d2:a2:87:69:ba:
         3b:a7:8b:e2:81:3a:fa:e4:3f:a9:39:b7:05:4b:9f:ff:c0:57:
         5c:35:2b:98:a9:83:0c:69:8c:6a:1f:d1:72:43:4c:44:28:ee:
         d9:3d:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org