Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/59c685583059f0fd314b6137e3e13979d9ebe041.roa
File:                     59c685583059f0fd314b6137e3e13979d9ebe041.roa (raw, json)
Hash identifier:          8O+4z4412DEhAL0T++eMJrtzgmk3YOC5BRYAmMQPREo=
Subject key identifier:   F4:BF:C1:73:0A:5A:03:B1:9C:95:0F:B0:8E:35:A8:CC:5E:4F:8C:27
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       14BDED
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/59c685583059f0fd314b6137e3e13979d9ebe041.roa
Signing time:             Fri 08 Mar 2024 16:57:26 +0000
ROA not before:           Fri 08 Mar 2024 16:57:26 +0000
ROA not after:            Sun 08 Mar 2026 17:57:26 +0000
asID:                     27651
IP address blocks:        164.77.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359341 (0x14bded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Mar  8 16:57:26 2024 GMT
            Not After : Mar  8 17:57:26 2026 GMT
        Subject: CN=59c685583059f0fd314b6137e3e13979d9ebe041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:93:e3:f7:cf:7d:74:f0:98:2d:b6:4e:16:
                    c7:e4:63:58:ff:c7:d5:37:d6:28:f0:76:41:5e:ce:
                    3e:23:80:6a:0c:ca:63:68:fc:24:1b:68:ac:f3:d4:
                    f2:49:0b:a1:dc:ff:1d:52:22:cc:5c:ef:ad:07:9f:
                    b5:0f:f8:79:8b:a5:10:43:fd:33:67:ab:ba:85:63:
                    09:cf:94:6c:2d:08:29:16:73:a4:0e:6d:04:fa:ce:
                    b4:db:20:25:f2:9c:47:01:ee:39:04:c5:47:71:b1:
                    9f:9f:6b:b4:2a:77:5b:df:08:85:88:8c:d8:a9:fc:
                    cb:85:eb:24:0d:45:c3:b1:2b:50:68:da:bc:e5:6b:
                    20:7f:73:e1:26:61:df:02:b4:87:8e:72:49:80:8a:
                    20:d3:3b:5c:d8:9b:cd:25:cb:8f:aa:74:2e:63:85:
                    e9:e9:d2:cd:d1:75:e3:f1:96:cf:57:c1:fc:83:4c:
                    63:f2:8e:a6:bc:d7:02:4d:22:77:c9:5e:19:bf:aa:
                    6f:71:a0:f2:91:46:5b:2d:8b:f7:2c:d3:bf:3d:eb:
                    50:7f:cd:b9:14:d3:42:5f:3b:88:62:17:2c:11:6c:
                    3d:25:94:ea:11:8f:8d:4e:b9:b9:41:72:8d:c1:44:
                    5e:c4:42:28:05:34:3b:e0:3c:0f:06:f2:90:2b:55:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BF:C1:73:0A:5A:03:B1:9C:95:0F:B0:8E:35:A8:CC:5E:4F:8C:27
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/59c685583059f0fd314b6137e3e13979d9ebe041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:12:c5:2a:6e:b2:4d:32:8a:03:61:07:06:69:b1:55:b8:
         02:4c:ce:07:c0:b0:ca:08:cb:94:86:3d:a5:4d:f8:d1:96:fd:
         8f:79:b3:1f:3b:e1:59:64:a7:41:6a:ed:6e:30:b8:bf:3a:b8:
         f6:5e:32:8e:6b:c4:24:3d:0a:fb:41:84:27:48:0b:d6:f0:86:
         3d:14:bf:55:c8:77:9e:5e:41:64:fc:10:e0:d6:8e:de:1e:2d:
         6b:37:9e:95:14:28:2d:78:ca:79:df:17:eb:8e:89:af:f7:b3:
         e1:89:53:e4:66:f4:70:c2:f4:29:58:85:5f:c2:57:a7:55:2c:
         10:71:db:f4:83:79:86:48:74:a7:db:1a:fa:fa:dd:a8:21:29:
         b1:f0:af:10:26:8a:dd:86:30:5d:ff:1c:dd:8c:1b:fb:ce:1f:
         82:63:10:38:1d:74:f7:ac:b6:b4:bc:d5:b5:42:d8:54:ba:0a:
         13:3f:bf:0b:b9:4e:a6:e2:ab:08:1a:f4:a3:42:2b:2a:29:45:
         0a:43:f5:17:73:64:f4:6b:49:21:c8:2e:19:94:ae:0f:07:34:
         87:36:ad:87:59:a1:41:7d:76:22:48:85:58:ef:de:95:5a:97:
         f5:04:33:4d:ae:3b:3a:f5:57:d2:f7:4e:21:3a:03:59:3c:b7:
         59:8c:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org