Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d69aedb4324754da1b13253c9b6808fa222882a7.roa
File:                     d69aedb4324754da1b13253c9b6808fa222882a7.roa (raw, json)
Hash identifier:          fd7U7q5WRCAG/3SKtVS+9ZDa8oh73NWF7xIk7KFOmFk=
Subject key identifier:   66:56:92:5B:95:0C:E7:E6:1D:E2:9E:E2:98:DC:0A:B2:49:2B:56:66
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       01393D
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d69aedb4324754da1b13253c9b6808fa222882a7.roa
Signing time:             Wed 14 Sep 2022 14:20:57 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80189 (0x1393d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=d69aedb4324754da1b13253c9b6808fa222882a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:93:77:d8:05:21:d6:c3:11:4f:0a:e7:83:
                    d7:11:91:71:92:53:bb:d6:ca:0d:bc:b2:3d:a5:9a:
                    29:b1:5a:86:80:17:92:8c:03:69:63:84:31:76:e2:
                    6b:b0:08:5f:b4:9f:aa:7d:4e:b9:61:8c:bf:2e:d9:
                    0f:74:95:95:80:51:ad:ac:97:0f:63:12:a9:3f:59:
                    bd:f5:e5:0a:02:a8:67:0f:23:31:d2:85:22:1d:cb:
                    ed:f1:92:8c:8c:49:84:94:db:f2:f2:15:b8:ae:9a:
                    c2:06:d8:10:22:f7:41:29:fb:69:ab:29:50:cf:af:
                    79:46:c2:e0:77:d9:62:8e:1d:df:9b:8f:1f:d6:fd:
                    cf:96:b7:9c:81:48:7f:5c:2e:2f:1d:41:cb:dc:53:
                    ef:9f:b8:13:96:f4:f5:60:7c:a1:30:25:b2:17:60:
                    e4:12:57:38:db:ea:fa:f4:90:ec:ed:ce:92:5c:2c:
                    d6:8a:ff:6b:d4:1a:c6:eb:7e:77:4d:a5:a1:c9:74:
                    98:26:9a:4f:bc:f0:92:10:52:e8:18:47:04:65:9a:
                    25:58:c0:72:4e:89:57:30:36:aa:bf:98:0d:e3:44:
                    89:4b:0f:d1:e8:ec:1d:78:b3:50:83:53:48:ef:3b:
                    f4:56:15:e3:7e:35:96:2b:ee:64:41:66:fa:13:d0:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:92:5B:95:0C:E7:E6:1D:E2:9E:E2:98:DC:0A:B2:49:2B:56:66
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d69aedb4324754da1b13253c9b6808fa222882a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:af:94:75:7d:47:30:6e:c0:38:f1:ec:4f:32:8f:f0:26:
         a0:0f:dd:18:45:13:af:60:8c:80:b7:2b:2a:d1:1d:17:21:20:
         f8:4b:b0:1e:a5:d7:b3:06:89:da:5c:ad:4c:86:58:4a:4e:50:
         20:3c:e9:c5:1b:ca:54:88:bb:a1:7f:83:02:45:3a:d0:65:8a:
         ed:30:96:bd:ba:7f:da:5a:58:cc:0e:39:aa:44:93:05:b1:fc:
         ea:76:b2:39:1a:c5:9a:7a:62:18:96:20:94:20:2d:cc:1a:bc:
         55:46:ee:e8:73:6c:48:8d:81:b1:67:63:92:92:13:55:1d:35:
         36:b0:d1:bd:12:d5:34:49:d1:5f:02:52:00:94:4c:88:67:bd:
         9f:ea:cb:bc:a5:9f:b9:5f:b4:48:78:3a:ba:bd:5b:e1:94:f6:
         44:e8:10:c7:fa:61:83:03:7a:d9:e4:50:80:1a:37:4a:7d:cf:
         7c:b1:1b:7c:f2:ce:41:6a:96:a7:b5:c8:59:a5:22:78:9c:59:
         26:75:53:40:6d:09:9b:46:d5:54:6e:20:0b:a1:58:f0:ba:1c:
         f8:e6:e1:06:e1:76:ff:86:09:1e:4f:3f:e4:ab:1c:e7:71:ce:
         ea:46:cb:0b:34:50:79:3f:45:3a:39:4c:1d:e5:99:a7:cb:5b:
         74:76:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org