Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/470651c237b406bb433af9590d136053a4506da3.roa
File:                     470651c237b406bb433af9590d136053a4506da3.roa (raw, json)
Hash identifier:          IPhSumekYqUkQ/Ur25w6N+XlcooCi3I1epugG+ynCQY=
Subject key identifier:   E8:89:D8:61:6E:B8:92:F1:9B:2C:DC:9E:63:87:69:B1:32:48:5E:56
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       015B2D
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/470651c237b406bb433af9590d136053a4506da3.roa
Signing time:             Wed 14 Sep 2022 14:28:24 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88877 (0x15b2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=470651c237b406bb433af9590d136053a4506da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:09:f9:1d:a0:0c:c5:93:3d:24:69:ea:7e:
                    43:1e:68:35:3d:1b:03:31:73:1f:51:51:47:a9:9b:
                    7e:7c:44:64:ae:15:5b:38:ad:4b:a7:d6:22:69:5d:
                    c1:89:a5:ac:ed:8d:73:10:f4:0f:07:78:b6:91:99:
                    97:8f:0a:e0:8f:6c:2a:34:90:11:14:81:10:2c:b6:
                    0f:b6:01:73:09:7a:6a:f7:d3:a1:0d:d8:4b:60:07:
                    16:59:f5:84:8a:e4:4a:5f:f9:6c:a0:2e:3b:e5:af:
                    14:6e:02:3c:a5:df:69:8e:16:c6:6e:90:04:3c:3d:
                    84:31:82:59:9b:33:51:b6:c8:7f:54:5e:ce:38:59:
                    f6:49:68:41:cd:3d:9b:a2:b0:8b:86:11:68:57:24:
                    e0:39:41:7f:41:20:25:cb:03:cb:99:9b:5c:60:09:
                    3d:3b:0a:98:54:70:da:6b:0a:eb:2a:69:0e:20:8e:
                    51:75:a6:84:25:85:86:78:ab:f5:1e:35:ca:13:a9:
                    54:91:bc:b2:99:90:54:ac:42:52:e6:b0:3a:a6:ad:
                    4a:43:a8:76:e1:a4:ad:fe:33:09:fb:dc:18:ec:d3:
                    47:46:e8:59:c9:1b:2e:3c:7e:e9:d9:74:d1:ab:70:
                    16:2e:d2:0e:45:9d:82:16:5a:3c:f7:19:14:81:ff:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:D8:61:6E:B8:92:F1:9B:2C:DC:9E:63:87:69:B1:32:48:5E:56
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/470651c237b406bb433af9590d136053a4506da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:49:1e:94:34:2c:b1:76:08:4d:44:d6:0e:03:37:d4:c3:d4:
         39:88:a8:e9:17:72:8e:2b:f6:19:7f:2e:96:7a:4b:a0:bf:76:
         89:f6:c8:6d:6c:93:15:b2:88:2a:a7:8f:d9:45:87:c0:11:c2:
         ed:04:16:94:1b:23:37:d1:dd:ec:9f:8b:3c:9c:12:a9:1f:ad:
         e1:51:fc:13:4b:1c:24:5b:99:fb:4a:93:d9:39:d8:b5:bb:ae:
         5f:df:47:20:32:e1:fc:d2:d4:26:17:be:29:d4:39:9c:41:02:
         2d:4d:69:d5:06:83:72:70:34:48:16:c7:76:9f:18:7d:51:7e:
         ba:f9:d7:cd:86:b5:2a:2e:c9:95:82:5c:12:07:09:95:12:d6:
         61:a6:10:8c:68:aa:d8:d9:24:af:e3:6b:6e:26:69:2b:c5:b6:
         d2:93:5f:50:74:5b:59:f8:80:14:6c:41:db:75:a4:cf:a6:72:
         cd:0b:2c:ab:ad:42:cd:bd:30:b5:b2:8f:ff:4c:b9:3d:05:5a:
         04:b4:7e:02:82:69:92:55:13:c5:df:35:c4:f0:32:63:72:bc:
         56:c9:bf:55:31:02:fc:19:d3:ad:d8:b2:c7:a2:75:15:53:c1:
         be:f8:d6:cc:cf:07:60:b9:50:8f:ab:94:f7:aa:41:53:b8:5d:
         0b:a9:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org