Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4125e8a0fc15a45ff42615c44040698f411e45e5.roa
File:                     4125e8a0fc15a45ff42615c44040698f411e45e5.roa (raw, json)
Hash identifier:          qK1+jaXUVwCKUmErL9dhdtQ4zViGleDABRcEd4ALOmE=
Subject key identifier:   51:EF:48:02:9F:C1:AE:CD:C4:4C:30:FC:9F:B4:6C:12:E1:B3:4B:1F
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       04767C
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4125e8a0fc15a45ff42615c44040698f411e45e5.roa
Signing time:             Mon 04 Jul 2022 12:41:11 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Thu 04 Jul 2024 03:00:00 +0000
asID:                     52444
IP address blocks:        179.40.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292476 (0x4767c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2024 GMT
        Subject: CN=4125e8a0fc15a45ff42615c44040698f411e45e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:f1:7c:e4:50:31:b0:a6:b5:e4:1a:6d:2b:
                    b5:03:8c:db:51:2a:76:05:ee:ed:e0:e9:93:04:e4:
                    68:16:47:ed:2d:93:07:4e:0d:91:47:cd:9a:f8:fb:
                    3f:32:0f:1a:4c:cb:21:e4:f8:e4:d5:1c:04:17:23:
                    c2:d8:5b:33:7a:da:d4:b3:4d:2a:97:59:f2:f0:d1:
                    f8:51:ef:90:a0:e9:fe:62:02:2c:14:b0:cf:2d:f7:
                    1a:6a:6d:70:d9:54:b6:60:43:bb:30:25:ea:b4:b1:
                    e4:24:93:10:20:c4:29:5e:90:b9:fa:03:06:68:be:
                    9b:e6:65:78:af:2e:9b:fc:09:d4:44:7a:c6:ee:fe:
                    a5:0c:17:f2:9b:3d:d0:c3:97:cc:e7:40:4b:2e:34:
                    58:b3:ff:0e:cd:c2:f4:c6:4f:6a:05:27:05:62:cc:
                    c6:95:27:c2:ab:4f:c6:b0:30:1e:4f:7a:54:ba:a7:
                    b8:91:34:ef:ef:34:d5:13:50:21:2f:04:a1:1f:c6:
                    99:14:15:39:1d:fb:59:ee:75:07:b1:51:84:8d:79:
                    c9:e2:7c:87:8a:a6:2e:c0:38:59:f2:7e:9b:e5:0b:
                    da:51:aa:9a:b3:98:3c:21:89:16:4b:92:c7:21:0d:
                    c1:f4:68:bd:b2:25:3e:b2:20:f2:f1:18:8b:11:2f:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:48:02:9F:C1:AE:CD:C4:4C:30:FC:9F:B4:6C:12:E1:B3:4B:1F
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4125e8a0fc15a45ff42615c44040698f411e45e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:80:0d:3b:9c:fe:ff:a9:8e:56:eb:44:cb:89:1c:7e:39:bc:
         31:a9:64:11:a0:80:e2:cf:9d:2d:ee:e2:17:f5:be:0e:8e:20:
         1c:98:44:6f:1c:21:ac:0f:5e:89:24:ab:96:b7:8c:9e:fb:91:
         29:8d:c3:fb:f8:68:48:40:68:5f:ba:07:1c:bb:98:44:ad:9b:
         6f:c1:37:62:8c:d4:a0:ea:43:6f:b2:64:99:90:3b:bc:b1:b6:
         cd:05:0a:79:87:34:04:43:a2:5f:df:ea:60:af:ca:ed:14:26:
         c6:ad:e4:b3:b7:f1:62:03:e8:b2:47:97:3f:91:7a:94:44:8a:
         80:ba:0b:c4:5c:80:3d:43:ab:50:3f:cc:f9:1d:f2:3b:2f:9e:
         e1:d9:6c:8d:7a:e2:9e:fb:47:32:a0:3e:29:ce:c4:c8:3d:e3:
         bf:99:70:73:44:5e:62:33:44:0c:1e:7b:ed:74:45:61:6d:04:
         4d:48:13:cf:3e:3b:c5:11:92:5f:6e:66:5f:59:14:90:e3:99:
         74:94:ff:ef:9b:74:fe:a5:b3:ab:cf:84:69:c5:08:e7:f2:28:
         9d:58:e7:25:e4:ab:b7:eb:46:14:89:b8:c7:fa:5f:4c:0d:5d:
         b0:1c:60:52:18:a4:b3:e9:cf:23:a8:99:19:84:59:d8:14:10:
         2f:99:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org