Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59936629-5663-4ecd-8862-1b8181ccda69/40d9b32b178afb54a72e836e31f89601a0aa5e27.roa
File:                     40d9b32b178afb54a72e836e31f89601a0aa5e27.roa (raw, json)
Hash identifier:          Z0OU11RoZ3YmUe8T2efFDHD6Vr368ynerFXYJdL3s0E=
Subject key identifier:   0F:BB:77:0B:70:A6:2F:72:C4:61:D9:57:BA:A6:CA:C6:7C:EB:36:0B
Certificate issuer:       /CN=28ad858dbc5ead5f22fc055f3c432b5af5bf510e
Certificate serial:       0344
Authority key identifier: E0:1A:A1:18:43:11:17:0F:28:89:2B:6B:43:28:6E:B3:EB:D3:5C:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28ad858dbc5ead5f22fc055f3c432b5af5bf510e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59936629-5663-4ecd-8862-1b8181ccda69/40d9b32b178afb54a72e836e31f89601a0aa5e27.roa
Signing time:             Tue 07 Mar 2023 14:23:24 +0000
ROA not before:           Mon 06 Mar 2023 14:20:41 +0000
ROA not after:            Fri 07 Mar 2025 14:20:41 +0000
asID:                     27997
IP address blocks:        179.51.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ad858dbc5ead5f22fc055f3c432b5af5bf510e
        Validity
            Not Before: Mar  6 14:20:41 2023 GMT
            Not After : Mar  7 14:20:41 2025 GMT
        Subject: CN=40d9b32b178afb54a72e836e31f89601a0aa5e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:ac:0b:bf:47:46:8a:48:1c:2a:3d:2f:bc:
                    e4:7c:ee:06:a7:6c:cb:0f:10:56:d8:f2:5d:79:b7:
                    d9:69:82:f7:c8:df:ce:b5:96:27:2a:7b:6a:e9:5e:
                    22:19:e9:92:75:1c:46:9d:a3:8e:46:c6:b2:bb:10:
                    16:5c:fd:af:ad:de:b5:21:e1:1e:23:d8:23:6d:ed:
                    1d:d2:d6:13:39:13:4c:f6:c0:78:81:c9:30:ad:98:
                    02:6d:f9:30:9c:1e:dc:86:ef:f0:dd:e0:05:1e:63:
                    6c:da:97:43:c7:c7:99:f6:09:45:ef:36:db:a7:d8:
                    3e:8e:ca:1a:20:f6:38:b3:ea:74:c6:4a:ca:58:b3:
                    23:3c:74:60:b0:18:51:61:db:55:f9:e9:f3:15:fb:
                    79:d8:08:8b:23:94:83:13:c0:ac:29:f7:d3:ff:b8:
                    e2:dd:2c:28:86:f0:01:ce:f7:3d:90:d7:56:92:95:
                    4d:65:90:e5:ed:c7:70:d2:54:67:d6:68:f0:75:33:
                    a9:52:bc:24:5b:4b:09:4d:c1:73:85:22:6c:16:21:
                    d8:63:f8:ef:9f:0a:19:2d:3e:04:f3:3c:a3:cc:c4:
                    4b:a6:7b:10:52:36:47:84:56:fc:d5:23:b6:b1:b7:
                    52:eb:ef:f4:34:5a:9a:2c:b3:f6:7b:a4:dc:b8:1b:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:77:0B:70:A6:2F:72:C4:61:D9:57:BA:A6:CA:C6:7C:EB:36:0B
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A1:18:43:11:17:0F:28:89:2B:6B:43:28:6E:B3:EB:D3:5C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28ad858dbc5ead5f22fc055f3c432b5af5bf510e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59936629-5663-4ecd-8862-1b8181ccda69/40d9b32b178afb54a72e836e31f89601a0aa5e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59936629-5663-4ecd-8862-1b8181ccda69/28ad858dbc5ead5f22fc055f3c432b5af5bf510e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:66:51:aa:f8:24:90:f4:be:24:26:ac:fb:e7:83:05:37:
         fb:68:9f:21:a1:83:b0:18:ef:90:06:24:68:f3:ae:f6:1b:12:
         6f:ef:05:f9:b5:ac:a6:9f:c0:61:cf:7a:20:6a:98:fc:87:17:
         d9:a1:99:ed:d0:9b:c1:a2:18:35:1d:1e:73:24:cf:6e:d6:15:
         67:1c:91:b8:fc:bf:01:f8:12:f0:e0:94:0c:f8:7b:df:af:2b:
         0c:66:16:8c:d2:40:8e:9f:54:7b:88:7e:8d:fd:26:d3:9e:3d:
         e7:de:56:56:96:67:8d:44:4b:0a:26:89:bf:79:14:df:17:eb:
         29:7a:18:e2:22:68:6d:88:a1:8b:c2:22:77:76:12:bf:7a:f7:
         cb:24:9d:4f:60:15:8e:b6:4a:27:c1:55:00:a3:b0:93:a6:c0:
         56:42:d9:fd:a0:41:ce:83:9d:f8:b5:dc:7f:06:64:34:b8:c0:
         3f:87:9d:2d:2e:9f:38:0c:ea:04:07:c9:9f:91:e2:f5:40:1f:
         40:f0:c5:c5:12:df:c0:85:63:58:30:62:0c:f3:c8:51:86:cd:
         20:55:03:77:aa:69:46:dd:9a:d9:ae:c7:03:e4:3e:76:d6:60:
         71:87:a1:91:9f:2c:6a:cf:3b:89:b8:81:af:a6:d9:07:c1:c4:
         d3:d5:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org