Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/e3b4962724b0e3d3a4cc717fb110a169353c26cb.roa
File:                     e3b4962724b0e3d3a4cc717fb110a169353c26cb.roa (raw, json)
Hash identifier:          HuywGd6lJ45f2cJd3IPNIpUMB8FzjbBlz4NNpZBr1kQ=
Subject key identifier:   DE:2E:3E:96:F3:9B:EE:FA:EE:E7:48:FF:48:30:63:69:C6:9C:94:48
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       243E43
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/e3b4962724b0e3d3a4cc717fb110a169353c26cb.roa
Signing time:             Fri 01 Sep 2023 11:21:30 +0000
ROA not before:           Thu 31 Aug 2023 11:21:28 +0000
ROA not after:            Mon 01 Sep 2025 11:21:28 +0000
asID:                     207688
IP address blocks:        179.60.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375235 (0x243e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Aug 31 11:21:28 2023 GMT
            Not After : Sep  1 11:21:28 2025 GMT
        Subject: CN=e3b4962724b0e3d3a4cc717fb110a169353c26cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:bb:f4:27:66:f5:27:7f:0a:e5:9b:55:72:
                    82:1b:1c:32:48:91:31:6d:de:17:9f:4d:ed:c8:1b:
                    fd:d8:e7:35:f1:a3:60:23:72:e9:8d:f6:a9:bf:a4:
                    37:ba:2f:57:dc:4c:b2:f9:4f:7e:7a:9e:e3:19:61:
                    42:93:22:86:06:db:cf:45:78:d5:c7:53:0d:bc:50:
                    db:b5:c2:92:c5:b9:0d:88:3e:cb:75:f3:f8:f9:27:
                    78:4d:53:46:e7:4e:82:43:e9:1c:21:55:6b:1d:0e:
                    df:db:3d:0f:a7:ac:aa:6c:0f:53:fa:fa:52:63:74:
                    db:4b:bd:af:7b:67:4f:b1:fe:08:31:23:99:87:f2:
                    82:dc:f8:f4:c3:f3:20:61:d0:61:e1:10:5f:c9:52:
                    d5:6d:64:12:9c:de:f4:ea:3a:5d:f6:43:30:6b:b7:
                    1c:56:d1:e7:ec:3c:30:83:39:f3:a0:5e:d3:9e:b0:
                    82:14:e9:95:88:be:e3:aa:f7:9e:3c:6f:4a:3f:3e:
                    fd:e4:55:b9:c2:cd:00:92:3e:53:03:f1:31:11:6b:
                    3c:17:bd:ff:b3:19:6c:b2:92:ba:8f:58:ef:16:ba:
                    93:ea:06:42:e3:ee:b4:a3:ef:c9:17:ef:56:65:1d:
                    28:68:54:0a:98:fc:84:e7:27:45:d1:a5:04:e7:ca:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:3E:96:F3:9B:EE:FA:EE:E7:48:FF:48:30:63:69:C6:9C:94:48
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/e3b4962724b0e3d3a4cc717fb110a169353c26cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:88:bb:39:31:ab:52:71:65:55:d7:05:40:73:ff:8e:79:c9:
         83:e2:ce:73:d9:d2:84:71:fd:61:71:8f:65:8e:0e:10:c3:81:
         5d:dc:7c:4c:c0:51:26:c9:a4:b7:de:f0:01:b5:b7:c3:bd:9d:
         0c:de:78:a0:7d:31:17:ab:59:55:63:7c:74:f8:62:8d:70:b4:
         e9:c5:f6:d6:60:fc:6d:93:4c:e5:33:dc:76:6e:c0:95:31:64:
         7e:f6:d4:b6:0f:d2:4c:13:f3:8d:c7:51:52:d0:d8:38:db:0d:
         e7:74:41:9c:f4:2f:68:7c:fa:a2:a0:57:62:21:c9:ff:5f:b2:
         bf:db:76:e2:d4:a5:66:be:8f:e0:74:1e:68:8b:70:b0:11:d9:
         b0:67:bf:36:63:c0:7d:13:ef:77:eb:37:8d:d3:78:ae:1c:57:
         c7:4b:8d:52:8c:d1:a6:b8:0a:92:bb:5c:61:bc:41:67:ae:58:
         72:3d:62:c8:15:5d:50:e3:ff:10:f2:d5:b9:cb:71:c6:3d:18:
         55:46:fd:c7:22:85:e0:65:67:68:9b:30:80:ba:8c:6e:36:bc:
         c5:f3:a8:19:9f:f8:58:18:f2:0b:c6:0c:0b:95:c4:e3:60:7b:
         65:9a:2c:e3:78:6b:f1:32:76:4f:42:ef:60:1d:88:fd:05:cd:
         35:f9:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org