Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8c6da8d862d7d8fc26a3ccd8d4cc0f9c3d464664.roa
File:                     8c6da8d862d7d8fc26a3ccd8d4cc0f9c3d464664.roa (raw, json)
Hash identifier:          f6ExD6setjPrtoDKhXaas0e8keqbS0uOAMZ91Vjg/yQ=
Subject key identifier:   E7:C3:4F:4B:51:F9:29:7D:81:CC:43:71:7F:5F:97:C9:52:BE:09:0E
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11E828
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8c6da8d862d7d8fc26a3ccd8d4cc0f9c3d464664.roa
Signing time:             Wed 29 Nov 2023 14:19:13 +0000
ROA not before:           Wed 29 Nov 2023 14:19:12 +0000
ROA not after:            Sat 29 Nov 2025 14:19:12 +0000
asID:                     27927
IP address blocks:        179.40.100.0/22 maxlen: 24
                          179.40.104.0/24 maxlen: 24
                          179.40.105.0/24 maxlen: 24
                          179.40.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173544 (0x11e828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 14:19:12 2023 GMT
            Not After : Nov 29 14:19:12 2025 GMT
        Subject: CN=8c6da8d862d7d8fc26a3ccd8d4cc0f9c3d464664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:4b:ab:e7:12:8b:06:06:fd:82:6c:2c:f8:
                    4a:25:9b:b1:a7:ac:5c:1c:5b:30:4d:36:77:ef:83:
                    26:af:b4:7b:5c:09:64:3b:42:29:29:2d:03:47:18:
                    c5:66:71:62:20:9c:22:5c:8f:71:5e:f9:88:8f:a8:
                    b8:f8:55:14:e7:ce:5c:19:d9:bf:5c:ca:1f:7a:97:
                    91:81:90:c4:2d:13:60:9c:95:6d:1c:21:ca:ac:6b:
                    fd:3b:00:a7:c5:76:51:4c:e2:ac:aa:cb:9b:93:23:
                    44:42:a8:ea:b0:d0:e7:27:f1:92:e4:c3:23:d4:dd:
                    c0:ed:ae:18:a2:77:33:7a:b8:af:e6:43:7d:23:27:
                    cc:b4:9b:c8:ac:15:52:f1:b0:84:5b:71:6f:6b:a4:
                    78:c3:09:79:5e:a0:29:12:20:aa:36:0f:95:b0:23:
                    48:7c:da:23:30:d0:82:76:c8:4f:92:ed:57:e7:91:
                    b9:f5:2a:63:c9:0e:51:d9:df:c3:18:2d:cc:c0:b8:
                    4a:5c:51:fa:89:b4:ff:70:b6:dd:65:a0:ce:0d:52:
                    a0:0b:75:81:09:3e:86:6e:89:e5:4e:87:69:b2:7f:
                    b8:45:1e:77:bb:7c:7d:5a:93:c6:f8:6b:2f:ce:11:
                    ea:96:c1:6a:48:87:68:94:72:36:40:23:08:a0:41:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C3:4F:4B:51:F9:29:7D:81:CC:43:71:7F:5F:97:C9:52:BE:09:0E
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8c6da8d862d7d8fc26a3ccd8d4cc0f9c3d464664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.100.0-179.40.106.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:b3:20:91:14:36:60:22:70:f7:91:b4:cf:eb:87:36:8d:fd:
         44:41:9a:2c:43:35:01:5a:e4:bb:10:4f:90:5e:09:40:22:ef:
         39:f9:1f:24:f1:dd:af:16:97:c4:85:67:9a:47:2b:30:a0:bd:
         3d:ef:33:08:9d:3c:14:cd:23:90:03:83:df:25:3f:64:2d:af:
         d4:6b:1c:96:39:ba:e1:df:aa:61:8e:a4:64:e1:2f:42:f9:ba:
         db:c2:f0:1a:5d:db:b4:71:2d:e7:e7:2e:8e:77:7f:96:6b:33:
         06:20:ea:a2:b6:21:64:e0:1f:cf:fc:f4:48:99:d7:00:af:0a:
         36:66:af:73:c8:3d:e8:cf:b5:a3:f3:f9:74:a7:b3:67:fb:8b:
         3f:ef:d4:d7:c5:e8:70:8e:ea:33:b1:2d:d8:23:fa:3d:97:80:
         d8:c7:5d:c9:0f:72:2e:a6:8f:1f:a5:19:85:1a:93:08:23:47:
         84:0a:17:0a:3b:e1:de:d5:19:0b:77:cc:f7:e4:2e:ff:3f:00:
         9a:a0:de:6b:69:19:d5:0b:ac:96:56:43:ee:95:d6:06:11:c5:
         b6:36:92:27:1b:02:ab:8d:ba:0d:2e:02:8c:31:c1:c7:e9:2e:
         26:70:ac:6c:40:13:c6:31:89:9e:4d:14:85:ac:be:a6:a2:c8:
         6a:e2:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org