Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b24891fed095635e811ac0c84adbbe57118a8597.roa
File:                     b24891fed095635e811ac0c84adbbe57118a8597.roa (raw, json)
Hash identifier:          UkM9Vj/izc6Gy9sbnkTOmw4aLv010oSSxlm8JwtPBAI=
Subject key identifier:   B4:2F:0D:3E:E9:7A:FC:4D:E1:B4:D5:C5:2E:5F:12:F9:1E:4B:C9:3C
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       168729
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b24891fed095635e811ac0c84adbbe57118a8597.roa
Signing time:             Wed 08 Nov 2023 02:59:50 +0000
ROA not before:           Wed 08 Nov 2023 02:59:50 +0000
ROA not after:            Sat 08 Nov 2025 02:59:50 +0000
asID:                     271773
IP address blocks:        179.49.228.0/22 maxlen: 24
                          179.19.0.0/16 maxlen: 24
                          2803:f7e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476393 (0x168729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Nov  8 02:59:50 2023 GMT
            Not After : Nov  8 02:59:50 2025 GMT
        Subject: CN=b24891fed095635e811ac0c84adbbe57118a8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:3a:e7:55:b7:10:f0:dd:64:f4:4b:65:77:
                    09:9f:9d:cf:fc:76:71:56:2a:02:6e:e7:29:68:bd:
                    f8:c3:01:f6:43:55:9a:a6:26:de:00:c8:44:1d:d2:
                    26:bf:07:93:46:8d:e4:6e:8c:54:54:e3:52:ea:38:
                    1b:22:40:91:84:71:1b:d6:fd:18:c0:7c:0f:83:cc:
                    ae:19:dc:6a:98:53:5b:3a:04:41:a6:b5:07:86:c5:
                    f9:0c:52:52:f5:86:cd:b1:5d:0c:0a:c0:32:b8:8a:
                    33:d3:74:88:f8:bf:82:8d:b3:70:03:f6:46:c8:a5:
                    fe:32:96:c1:67:ba:76:85:e0:45:95:59:e9:e9:dd:
                    20:12:c2:a7:bb:51:00:f2:91:89:3c:ae:43:1e:91:
                    15:b3:60:ea:67:3b:3e:bb:e4:53:b7:33:ed:70:d2:
                    54:92:cb:f2:10:dc:14:6f:44:42:a9:27:91:51:69:
                    18:63:2a:99:ac:86:81:56:cb:0c:dd:2d:26:84:b0:
                    7a:47:e9:44:c3:a8:75:a8:69:4f:8f:4a:91:13:19:
                    1f:01:32:2b:72:44:7a:45:94:90:eb:7c:05:c5:ba:
                    ca:bf:85:f3:39:8b:5c:9d:0c:d1:91:3b:a6:d2:e8:
                    26:8d:cb:f1:63:33:d3:2e:ee:5c:9a:e4:55:18:da:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:0D:3E:E9:7A:FC:4D:E1:B4:D5:C5:2E:5F:12:F9:1E:4B:C9:3C
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b24891fed095635e811ac0c84adbbe57118a8597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.19.0.0/16
                  179.49.228.0/22
                IPv6:
                  2803:f7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e0:bb:96:f5:59:51:48:44:0f:f3:4d:cd:b2:e1:fe:47:c2:2f:
         4f:fe:74:df:ca:a5:4f:9b:e5:56:72:17:88:2f:7e:40:0c:ae:
         e0:42:79:15:f2:7c:64:06:60:34:d7:b3:6f:38:a4:13:9b:cb:
         11:41:23:8c:1a:a1:1e:d1:c1:65:8b:87:42:9e:47:1a:00:2c:
         02:ee:74:1e:b3:05:70:66:10:60:65:58:2e:a5:ed:90:1a:06:
         d1:32:49:00:22:f0:9b:86:18:bf:4a:a3:fd:1b:0e:e2:01:bd:
         ec:cb:a8:f1:49:dd:69:4e:78:cc:fe:e7:8b:fe:9e:7c:bd:47:
         d9:df:01:f7:7c:47:68:76:50:ee:a9:35:1e:b1:51:56:9a:c3:
         1b:fc:5f:94:24:77:1c:a3:f1:e7:9a:ae:cf:cd:23:74:2e:1c:
         11:55:c3:3b:f9:f7:93:28:99:06:55:42:38:fc:d6:df:c0:1a:
         56:ee:ac:45:4e:99:56:7a:8f:1d:45:fb:1c:0e:07:9e:be:92:
         e3:34:d8:ec:45:ce:ca:f4:11:ca:49:37:93:c0:9c:5a:f3:74:
         a4:da:0f:e8:09:2e:f2:79:65:b3:1a:1f:df:fb:ec:27:be:a6:
         05:8a:66:8b:76:62:8d:86:1f:fb:03:db:f1:6e:7a:96:6f:1b:
         38:e4:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org