Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa
File:                     925c333bcfb041e17ddcac4edb5815a52295d20e.roa (raw, json)
Hash identifier:          BB7axT0sv0vH+Y+eJgKjQQ4XkQRrPTTmPt8sgflecJQ=
Subject key identifier:   D2:4B:DE:EF:BA:1F:B9:6A:B7:E4:27:6B:19:45:2D:60:32:3C:08:1B
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       14C557
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa
Signing time:             Fri 08 Mar 2024 16:57:28 +0000
ROA not before:           Fri 08 Mar 2024 16:57:26 +0000
ROA not after:            Sun 08 Mar 2026 17:57:26 +0000
asID:                     7004
IP address blocks:        164.77.27.0/24 maxlen: 24
                          164.77.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361239 (0x14c557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Mar  8 16:57:26 2024 GMT
            Not After : Mar  8 17:57:26 2026 GMT
        Subject: CN=925c333bcfb041e17ddcac4edb5815a52295d20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:6c:ed:45:70:c4:ff:8a:be:55:f3:0e:86:
                    08:ae:97:f5:89:38:7a:0f:63:66:d4:e7:2c:88:38:
                    56:d3:c0:96:99:45:4c:d5:88:63:32:da:24:b8:cd:
                    e2:84:ec:fd:97:11:47:74:0b:fb:15:fa:e1:ac:c0:
                    fe:5b:f2:d2:58:7a:7b:3f:9d:d3:b7:3c:29:0b:8b:
                    d5:8d:d4:6c:2c:08:4a:74:42:14:44:44:e9:5c:09:
                    a7:60:4c:0d:cf:94:f7:49:05:b7:aa:77:fd:cc:66:
                    b7:a2:98:b5:fd:24:35:52:12:1b:f5:b0:5d:5e:34:
                    83:9c:13:ca:11:c4:75:bf:a5:7c:79:67:51:28:7d:
                    ea:d6:ef:cb:34:6b:98:8a:e7:6f:dc:67:0e:c4:10:
                    43:76:e3:af:bf:e3:7f:b4:6b:56:0a:df:34:d5:48:
                    16:04:82:46:74:fb:40:ff:50:31:79:98:eb:3f:55:
                    a5:40:6b:77:32:b9:b0:f4:b0:68:ea:bb:47:43:f8:
                    1d:92:37:2a:31:0d:9c:ae:8d:99:f2:e0:2d:12:7b:
                    b8:4a:85:13:bd:db:ab:fb:a0:f1:06:a3:9e:2a:97:
                    93:9b:ed:b5:88:73:16:59:72:b6:14:94:f8:a9:a1:
                    79:83:63:fb:5b:6c:24:4b:a4:9f:a9:b1:9a:e1:67:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4B:DE:EF:BA:1F:B9:6A:B7:E4:27:6B:19:45:2D:60:32:3C:08:1B
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/925c333bcfb041e17ddcac4edb5815a52295d20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.27.0-164.77.29.255

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:07:80:38:87:12:80:45:dd:55:1c:4c:38:41:cf:0a:4d:
         ab:eb:92:c1:a8:a1:94:82:8c:ad:ca:2b:f8:72:53:f9:ef:1a:
         0b:b4:f5:e9:6f:88:02:88:90:d7:6b:13:93:40:b3:d3:28:0e:
         a9:66:73:07:7c:55:7c:95:52:63:0e:0b:fd:e7:57:60:f8:88:
         79:7a:40:07:ab:f9:5f:aa:29:05:93:3d:3a:a9:8e:2b:ab:02:
         80:ed:64:c8:82:d4:de:55:ae:4c:25:47:71:79:40:b5:19:6d:
         df:01:1a:a7:9a:24:41:ea:14:ec:a0:52:a0:f7:47:2d:4f:14:
         1e:1b:de:99:28:a2:9a:4b:de:65:a1:06:f7:c5:c8:c8:c1:13:
         f5:9f:c1:2c:10:35:97:dc:2b:0b:6e:3a:46:0f:dc:3a:24:9b:
         52:1e:76:b4:cb:d9:ff:3f:a3:97:85:53:f6:d6:af:56:3f:4b:
         54:b3:37:92:a2:85:ed:df:b1:0b:e2:94:f1:00:3c:51:ca:9a:
         3e:aa:d0:b3:3d:ca:d5:8e:d6:6b:43:76:1e:71:b6:d7:40:4b:
         83:ff:cd:a9:5e:a8:6f:52:31:5d:4f:c1:01:93:25:4f:79:d1:
         52:da:4e:dd:d9:90:86:9e:6e:58:dd:b8:c3:64:24:55:05:6a:
         0c:a4:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org