Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/de54d5aadbcb8dc511e31b5b4cdb26d4b1083c32.roa
File:                     de54d5aadbcb8dc511e31b5b4cdb26d4b1083c32.roa (raw, json)
Hash identifier:          XW+C9hoUFwjSN8sNRDfasKYjQKGTnSWRx8FHA+e2YhQ=
Subject key identifier:   59:4E:74:8D:01:97:7E:10:9A:7F:F4:44:05:9E:79:36:0D:8B:C9:28
Certificate issuer:       /CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
Certificate serial:       0A4D21
Authority key identifier: 10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/de54d5aadbcb8dc511e31b5b4cdb26d4b1083c32.roa
Signing time:             Mon 04 Mar 2024 21:14:05 +0000
ROA not before:           Mon 04 Mar 2024 21:14:05 +0000
ROA not after:            Wed 04 Mar 2026 21:14:05 +0000
asID:                     272991
IP address blocks:        177.10.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675105 (0xa4d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
        Validity
            Not Before: Mar  4 21:14:05 2024 GMT
            Not After : Mar  4 21:14:05 2026 GMT
        Subject: CN=de54d5aadbcb8dc511e31b5b4cdb26d4b1083c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:83:22:40:d8:bd:c4:dd:5f:35:c2:48:41:
                    e0:31:f0:cc:77:5f:13:cd:16:2b:eb:15:fa:b2:0c:
                    b3:f3:0f:0e:15:58:ba:30:88:fa:04:6c:6d:bc:30:
                    58:76:80:46:c9:df:0c:93:43:2c:d1:93:cc:1d:29:
                    93:4f:f7:20:16:5d:ae:e0:c1:f5:98:f5:84:d0:67:
                    c3:ca:15:6b:37:c7:37:ae:5b:91:1b:94:c6:e6:00:
                    6c:b6:c4:d1:75:67:34:87:4c:90:47:88:77:0c:15:
                    b0:35:a0:d3:50:90:f0:85:ad:f1:01:10:d8:a0:ee:
                    79:c3:a7:2a:f9:d5:35:23:7f:b6:e5:96:52:ba:d0:
                    f8:9a:db:66:22:f8:8b:e5:d2:35:41:2f:a4:24:5c:
                    e7:b7:af:9f:de:a5:e7:c6:e8:de:5f:7d:38:f9:14:
                    cb:84:0a:15:ea:cd:d3:ea:0b:1f:b3:57:0b:d3:c7:
                    d2:f6:11:76:77:7a:cb:a8:1f:1c:2a:59:19:ad:fd:
                    8d:c1:8b:70:65:cb:82:82:bf:af:aa:5b:5e:2a:7c:
                    a3:c9:60:9b:1e:0c:38:f4:65:38:0d:8d:b7:d7:19:
                    53:df:ef:44:be:6b:59:b4:bb:9b:e0:c0:b0:49:83:
                    a2:40:18:5f:53:51:3c:a1:9b:ea:9c:60:95:ef:29:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:74:8D:01:97:7E:10:9A:7F:F4:44:05:9E:79:36:0D:8B:C9:28
            X509v3 Authority Key Identifier:
                keyid:10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/de54d5aadbcb8dc511e31b5b4cdb26d4b1083c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/5daba39e93cb3e66a73d2628b56c529b8a5851a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b3:cc:dc:7f:d6:f3:d5:b6:08:54:e0:58:f7:1f:13:6d:08:
         8c:e4:23:b5:ea:7e:d7:af:b5:00:2c:dd:9d:b3:51:13:72:45:
         dd:e9:ce:2f:fa:0e:80:b6:d7:10:7a:8b:7b:63:46:9d:09:1b:
         d9:45:a7:89:83:85:24:3d:6a:e4:53:5b:18:3c:30:bb:42:4f:
         c8:d6:32:86:93:78:ab:47:21:52:41:8b:65:64:dc:a7:46:2e:
         91:f7:98:c2:18:c5:0b:7e:a2:59:51:31:b9:b0:9c:20:8e:33:
         d7:48:b8:ec:f8:12:0c:7d:9d:95:25:85:19:21:c1:43:be:04:
         23:08:ed:3f:44:cd:2c:a6:c2:06:0f:62:dc:42:e8:d3:59:10:
         79:f5:fb:11:fa:d2:3b:d3:63:70:c7:fd:a0:85:e1:09:27:35:
         09:80:16:76:2a:10:dc:a0:4c:b0:ce:d7:75:31:70:8f:e1:3c:
         ba:bc:c4:e3:21:fa:20:7b:74:0d:4a:28:da:14:1b:1d:61:54:
         20:80:14:16:8a:4c:d0:39:10:eb:1f:40:8a:20:8a:e2:92:c5:
         f6:ed:f8:5e:57:be:b5:61:2e:a5:00:d4:d1:a6:28:e9:3e:1d:
         a5:b5:c2:18:b4:93:95:43:72:8a:36:a4:d2:d6:ef:00:58:95:
         d9:a0:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org