Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/b5129c857e839559e33db13a7f07916ad68b87a1.roa
File:                     b5129c857e839559e33db13a7f07916ad68b87a1.roa (raw, json)
Hash identifier:          sDNOxuK/mdBN6KCEymMf5RHhKWI0HI/wU4eOBsslQu4=
Subject key identifier:   57:A9:94:57:A5:8F:B8:F0:D3:C7:17:61:FA:E9:14:F3:BC:0E:EF:05
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       2164D4
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/b5129c857e839559e33db13a7f07916ad68b87a1.roa
Signing time:             Thu 22 Jun 2023 20:22:14 +0000
ROA not before:           Wed 21 Jun 2023 20:22:14 +0000
ROA not after:            Sun 22 Jun 2025 20:22:14 +0000
asID:                     28032
IP address blocks:        179.1.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188500 (0x2164d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: Jun 21 20:22:14 2023 GMT
            Not After : Jun 22 20:22:14 2025 GMT
        Subject: CN=b5129c857e839559e33db13a7f07916ad68b87a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:c4:36:14:88:08:06:2f:da:ca:83:f3:d1:
                    17:f5:2d:d3:50:1d:bc:90:10:92:8a:b4:6f:7a:19:
                    c4:3d:f0:a0:c3:32:ac:8c:0e:91:cc:5a:49:3d:ea:
                    08:27:d7:e3:4a:0e:be:d4:dd:b4:5c:7e:c9:a1:d1:
                    4b:4e:91:65:95:44:a4:f7:d2:c0:d8:8f:b9:a2:0e:
                    a1:f9:ac:2d:f7:93:dd:79:12:13:a5:8d:d5:f6:a8:
                    5c:41:ef:01:9b:22:6f:e3:26:f3:29:17:a5:50:e1:
                    02:58:6f:0c:3d:f5:5f:2a:91:f1:9f:26:72:69:09:
                    f0:f0:b4:e1:64:69:17:fd:2a:b8:51:be:dc:90:7e:
                    7a:72:37:2b:63:27:d7:b2:ca:b1:2a:f0:1a:94:9c:
                    35:a9:8b:16:5c:ba:93:34:1a:1e:b6:22:31:8a:17:
                    3f:c3:1f:8d:32:df:b7:8c:25:47:01:30:96:b3:82:
                    a6:6e:62:20:6d:f5:de:42:89:ee:b3:a4:98:92:2a:
                    0c:a3:8e:da:04:54:3c:5c:07:73:2d:0e:93:d2:fd:
                    72:46:b5:23:2c:a2:e6:ce:29:4b:15:63:ba:d7:be:
                    89:d7:06:ea:c9:37:72:31:61:dc:e0:66:88:77:bf:
                    67:43:37:b5:3e:6d:59:61:3d:27:64:23:d0:29:9a:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:94:57:A5:8F:B8:F0:D3:C7:17:61:FA:E9:14:F3:BC:0E:EF:05
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/b5129c857e839559e33db13a7f07916ad68b87a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:c5:d4:57:44:52:b2:f4:bc:12:49:77:e6:38:ef:d0:6b:
         05:21:0e:47:2f:1a:ed:e3:68:99:73:6b:7b:9c:ef:0b:b7:7f:
         ef:52:2c:8b:bf:55:01:f6:48:04:2d:53:11:ae:f3:89:6f:82:
         fa:8d:91:91:24:3a:57:f1:b1:8b:eb:bf:15:76:8b:d8:8e:c9:
         85:62:6d:a8:ba:38:87:57:e5:a7:88:9e:3f:14:ec:51:55:8f:
         58:20:76:a5:87:0b:ab:bf:b3:2b:42:3e:f5:a5:f7:6a:68:3d:
         f0:12:75:fe:7d:40:e5:e8:70:5a:16:b9:38:25:db:e8:fc:04:
         fa:c3:42:1f:e8:1c:04:94:17:dd:36:18:93:bb:95:a0:ef:33:
         09:1f:ac:a7:d8:90:1d:f5:41:5f:cd:74:67:16:6a:08:28:79:
         59:32:db:2a:f0:1e:12:02:15:8f:99:2e:cc:e5:bb:93:6c:e2:
         79:ac:92:a4:6b:65:9e:08:73:f3:e2:1f:01:3d:b1:6e:b6:c6:
         81:2e:4b:d2:bb:5f:80:d3:64:73:39:ec:9e:1e:24:59:5d:2f:
         b7:72:3b:ab:fa:bf:3e:07:20:95:02:d1:ea:c7:21:12:d9:ae:
         a5:5e:c0:14:2a:b6:5e:2d:18:2a:e6:29:c9:f3:9f:23:bf:cc:
         28:39:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org