Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/774dad8c4af75caad2a9644284c5a68d213a9888.roa
File:                     774dad8c4af75caad2a9644284c5a68d213a9888.roa (raw, json)
Hash identifier:          ygSPD090wtMpiJ4VlX9n7DwZHdkC5dQehYoDHvdCBQ4=
Subject key identifier:   1B:8E:AE:55:79:1C:1B:0C:20:71:D8:65:35:15:17:8B:58:9A:A1:AA
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       013F27
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/774dad8c4af75caad2a9644284c5a68d213a9888.roa
Signing time:             Wed 14 Sep 2022 14:23:37 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81703 (0x13f27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=774dad8c4af75caad2a9644284c5a68d213a9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:1b:8a:14:bb:fd:77:13:6f:1d:d3:48:64:
                    6e:d3:86:d5:09:bc:61:68:08:b0:b7:2e:14:1e:85:
                    58:78:65:bd:1c:65:c7:aa:6e:f5:c8:fa:f5:c8:97:
                    99:e6:f6:2a:34:5a:9a:1a:cd:1e:dd:b9:e3:88:1e:
                    4c:e6:6a:00:83:3d:0f:a2:2f:a9:7d:4e:af:d8:dc:
                    5f:3e:ca:a6:f7:cc:ee:c4:16:83:fd:f2:3e:0b:8a:
                    dd:d3:8a:dc:2b:f2:93:36:ec:7e:7b:f1:5f:db:74:
                    b0:70:bb:42:24:63:fd:cd:53:5f:48:61:a3:3c:11:
                    dd:3f:9b:e6:fb:d3:3c:36:53:22:e2:c0:0f:5b:2d:
                    5c:d0:00:1a:aa:58:03:79:9a:ae:b6:6e:79:ea:c0:
                    cc:93:d5:cc:90:da:49:1a:23:4f:c6:e4:1c:89:61:
                    2d:cf:5e:b6:2a:21:57:11:bc:93:60:6b:7a:62:89:
                    50:75:5a:69:c0:33:39:b1:4a:5b:67:47:b8:a2:3d:
                    39:7b:4a:83:e7:fb:62:73:b5:a7:b9:b1:a3:60:79:
                    7f:0b:ab:4b:22:fd:76:63:29:70:eb:5c:41:df:a0:
                    d7:4a:f5:b8:cc:35:93:41:6d:16:c7:8c:24:c1:bb:
                    36:62:95:e0:28:38:4d:3a:a5:63:ec:1e:76:5e:0d:
                    e6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:AE:55:79:1C:1B:0C:20:71:D8:65:35:15:17:8B:58:9A:A1:AA
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/774dad8c4af75caad2a9644284c5a68d213a9888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:56:53:2e:cc:be:71:b0:f9:69:bf:1b:57:98:0d:89:2b:
         e3:61:c4:97:d7:66:8e:48:e7:73:ab:4e:a4:e1:92:a7:78:92:
         12:b5:4f:6d:d2:d5:15:67:13:52:74:ce:7c:46:87:18:1b:c3:
         84:70:28:89:1b:0f:a9:99:27:d1:75:c3:10:80:24:e5:83:8a:
         34:f5:25:5c:31:f9:94:2b:0f:ab:49:14:bd:c3:2b:4d:33:8e:
         a2:14:d4:90:b9:43:3e:89:5d:a2:91:c3:62:91:a6:c2:52:53:
         ee:87:94:d0:d0:2f:17:00:76:ae:bd:88:98:93:2f:34:72:fa:
         5d:d2:21:f3:5d:32:dd:e2:40:38:3a:e3:19:48:71:2d:42:f9:
         84:92:f9:c1:a2:21:97:24:fa:51:27:47:e5:29:d8:67:77:6f:
         51:f9:f6:4b:b0:17:4e:80:74:45:79:27:2e:cd:b6:5e:76:75:
         3c:a0:81:fe:d7:0b:bb:33:0b:d5:2a:e0:d4:22:84:1c:24:c0:
         4b:5f:58:68:16:7f:aa:19:8b:d3:14:b5:52:44:44:fc:ae:42:
         f2:8f:25:16:cb:5f:c6:fb:4d:4c:82:09:27:c8:0b:84:88:23:
         df:be:b2:45:44:b1:4d:70:d9:fd:53:c8:2b:52:24:ca:b6:03:
         06:c0:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org