Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3a0990e793ba55c79eb7f1449953fb497277abb2.roa
File:                     3a0990e793ba55c79eb7f1449953fb497277abb2.roa (raw, json)
Hash identifier:          apVyAi06S2QAQY9h2nlCiTLspsMPqwsvy2+FFKM2H5Q=
Subject key identifier:   34:DC:DE:5B:29:52:3F:0F:22:88:57:44:5E:3E:D2:4C:36:43:34:1B
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       D8F9
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3a0990e793ba55c79eb7f1449953fb497277abb2.roa
Signing time:             Tue 13 Sep 2022 19:51:31 +0000
ROA not before:           Tue 13 Sep 2022 19:50:43 +0000
ROA not after:            Fri 13 Sep 2024 19:50:43 +0000
asID:                     27823
IP address blocks:        179.43.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55545 (0xd8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Sep 13 19:50:43 2022 GMT
            Not After : Sep 13 19:50:43 2024 GMT
        Subject: CN=3a0990e793ba55c79eb7f1449953fb497277abb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:d7:40:49:dd:b4:92:51:88:14:30:c8:49:
                    30:cd:f5:94:cb:43:19:5f:73:95:9f:49:ea:5b:4d:
                    52:2b:ea:29:8a:9b:5a:13:54:c0:66:f1:98:c3:78:
                    14:c1:9c:30:23:89:f3:5b:30:00:c6:35:da:ec:45:
                    bd:97:fd:dc:57:b3:64:c2:97:6d:87:13:83:bf:3a:
                    3b:74:d4:f7:0c:44:ef:b4:23:1a:6e:02:7c:23:d4:
                    44:05:e5:74:42:d5:75:86:2b:b4:8f:d5:f5:3d:ef:
                    ae:dc:1b:ea:e8:a5:98:7a:bd:d0:0e:9f:11:96:5b:
                    59:a3:c5:ce:af:90:ab:3e:c0:ea:6f:0e:7b:c3:05:
                    33:f6:3e:68:1b:d4:60:21:92:e4:26:24:48:5a:0a:
                    f8:32:f0:ca:3a:9b:2f:8a:cc:f2:d8:a5:48:9f:84:
                    56:2c:f2:c4:7c:21:12:bb:6d:f2:06:4b:ea:46:f8:
                    95:1e:e1:9c:3b:3d:30:ed:e6:ab:2d:6e:6f:d5:c7:
                    76:89:ba:60:d2:af:ac:13:6d:50:32:45:1c:fe:42:
                    c6:21:4d:87:e5:48:88:8c:d9:16:e7:47:f3:df:10:
                    bc:d6:59:93:b2:f4:b7:32:88:ad:f6:5e:07:f7:8b:
                    c5:c4:a6:ac:8d:42:3a:48:93:8f:a8:68:be:5d:59:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:DE:5B:29:52:3F:0F:22:88:57:44:5E:3E:D2:4C:36:43:34:1B
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/3a0990e793ba55c79eb7f1449953fb497277abb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:03:6e:d8:7a:4d:9e:75:b8:f5:b7:35:a7:80:35:aa:e3:54:
         bb:9e:75:9b:10:d0:76:ca:26:0d:24:ec:50:69:56:cd:84:83:
         ed:30:f0:a4:f9:83:0a:dc:43:2e:3c:8d:38:ae:26:f0:cb:f7:
         3f:ed:5d:5f:90:ca:4c:ff:f9:e3:54:71:e1:ea:2f:ab:fe:66:
         cc:57:d8:67:f9:51:fd:01:1f:36:9d:29:3e:dd:1c:e2:c3:18:
         ad:6e:48:29:a9:b3:3c:5c:f4:4e:8c:0c:a7:8e:ee:87:6c:92:
         55:b8:7d:94:37:c1:ab:d7:0c:63:9a:2f:dc:27:b5:27:ab:31:
         67:e0:a4:87:89:5e:02:65:7c:cd:c8:ed:e0:d8:88:bc:5f:32:
         99:67:e7:20:4e:60:48:c2:ea:92:8d:5c:db:40:ed:aa:0f:cf:
         01:07:60:35:75:78:a3:a8:ae:b4:97:a1:e1:b9:d9:2c:70:e6:
         65:3d:f6:36:52:4c:ab:2a:51:78:b5:48:cb:e4:cd:1c:e6:53:
         10:52:1a:45:f4:80:da:a2:f2:f3:72:9b:dc:5d:c0:23:8f:35:
         a0:64:37:0a:ab:7d:48:72:3b:22:49:02:64:37:c8:77:84:5d:
         ed:ab:89:60:52:91:0d:20:01:de:8f:8e:55:7b:43:e6:19:d2:
         42:a4:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org