Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/865b319ceeb4e217fe83b529caea50e014937b2b.roa
File:                     865b319ceeb4e217fe83b529caea50e014937b2b.roa (raw, json)
Hash identifier:          KggtGMNdi8/xCODBttzaFnhEEYBvApZf6AkqNKz0CI4=
Subject key identifier:   2D:B5:E2:10:16:99:89:14:D3:48:36:3A:D1:4B:7A:75:D4:BE:E8:E4
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0156C0
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/865b319ceeb4e217fe83b529caea50e014937b2b.roa
Signing time:             Wed 14 Sep 2022 14:27:53 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87744 (0x156c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=865b319ceeb4e217fe83b529caea50e014937b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:39:07:1f:58:62:66:01:87:39:34:f6:a9:
                    b0:b8:0a:e1:5a:fa:69:d1:f1:fc:07:fa:f1:42:a7:
                    f3:66:9f:c1:99:23:1e:d4:05:16:d9:4e:17:eb:d0:
                    0c:4b:4f:e9:8c:7d:15:57:76:7d:ff:1e:4b:57:95:
                    ce:47:8c:6c:93:df:23:ac:de:f1:03:13:61:bf:12:
                    4a:dd:99:28:cd:cd:05:b8:1b:24:61:f4:81:0b:1e:
                    b1:09:cf:35:0c:f9:53:0c:cd:8f:6c:ce:68:d1:7e:
                    d8:02:e2:39:50:b7:95:b4:c3:e3:df:95:f6:60:5b:
                    2d:46:98:c9:54:8d:84:2b:b0:da:32:57:2b:0a:22:
                    8c:67:2d:d9:42:13:45:1c:45:05:fa:be:df:4c:bf:
                    80:3b:05:6a:43:08:76:da:9f:35:33:a5:f4:c6:36:
                    69:aa:15:b1:11:a7:d0:d3:2f:06:b9:1e:c8:2f:a7:
                    0e:ce:87:0f:82:f8:54:8f:d7:f0:46:79:24:6a:e5:
                    06:c0:d5:22:dc:1c:60:ba:72:67:44:b9:bb:ca:e1:
                    35:88:02:c2:e9:ce:6e:b8:7e:b7:00:89:26:0b:63:
                    a7:48:bc:45:fa:de:03:fa:d6:d7:e4:9a:5c:71:09:
                    f6:01:5b:b3:a5:c6:66:4e:e4:da:56:ee:b6:6b:95:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B5:E2:10:16:99:89:14:D3:48:36:3A:D1:4B:7A:75:D4:BE:E8:E4
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/865b319ceeb4e217fe83b529caea50e014937b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:73:a7:b7:4e:44:a5:2b:2c:de:25:95:da:19:74:e2:8e:3b:
         93:3c:16:61:91:ca:7a:5c:f8:d4:e9:b1:92:53:fb:04:cd:80:
         62:0d:0a:ca:d8:2a:7c:db:4c:73:ae:bc:53:41:0f:ad:01:16:
         3e:0d:96:b8:5f:af:e2:05:26:da:f4:c3:8d:65:90:b8:54:02:
         07:de:fd:14:7d:30:90:f1:a7:b9:0d:ff:57:03:ff:4f:a4:44:
         da:40:a5:f6:f5:1b:7c:11:29:9b:f0:54:06:e9:a8:ca:12:0f:
         20:d5:39:79:29:1d:22:c4:a1:c4:6a:c7:a5:57:6a:2c:96:ea:
         7c:1c:c8:2a:be:29:45:8b:1f:4b:a7:89:46:6a:40:a2:12:e7:
         ed:28:d9:27:e1:64:01:9a:30:7d:db:dc:cc:5f:1f:67:50:58:
         28:97:b3:43:77:f4:c2:e6:5b:35:0d:f3:4f:e2:b0:0a:44:76:
         2e:01:1d:0f:4e:1e:49:28:3c:2b:2e:3a:f3:7f:64:de:11:8e:
         38:e0:e2:40:90:e5:44:d0:50:e6:19:13:a8:3d:fc:37:ab:af:
         61:a8:76:4d:cb:2b:fd:e8:40:98:85:57:30:69:cb:fc:7f:90:
         0b:c8:18:30:13:cd:a8:42:47:1a:0a:ac:13:b2:0b:06:7d:0c:
         e0:f3:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org