Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f52932a02774309c47e2d35c8da9afd0ceec609a.roa
File:                     f52932a02774309c47e2d35c8da9afd0ceec609a.roa (raw, json)
Hash identifier:          W47eQp0vnLB3oDualvP+N8vOui2C7uQCMaPYH51mKB8=
Subject key identifier:   93:77:D6:D0:31:90:FD:29:C5:D2:DE:43:83:A4:FD:30:B8:57:8F:17
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       0768
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f52932a02774309c47e2d35c8da9afd0ceec609a.roa
Signing time:             Tue 27 Apr 2021 23:53:17 +0000
ROA not before:           Tue 27 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     271903
IP address blocks:        179.49.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: Apr 27 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=f52932a02774309c47e2d35c8da9afd0ceec609a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:87:9a:e0:26:1f:cc:83:f7:cf:d2:0f:60:
                    41:a0:9d:38:99:3f:75:a1:24:91:23:36:15:d1:12:
                    86:c2:3e:c3:3a:67:73:2c:21:69:9a:65:49:7b:13:
                    98:b8:73:cc:6d:c1:eb:32:5e:41:f4:52:4b:20:d7:
                    17:17:7f:cf:8e:fb:55:7b:c7:be:a1:35:f9:cc:2d:
                    6f:a3:30:c8:e8:2d:ce:fa:f6:54:ca:15:6f:68:e3:
                    ac:0e:89:9d:03:97:1d:0d:aa:6e:a8:a1:10:d8:d3:
                    5c:3b:02:9d:42:23:1a:10:38:3a:fc:5a:b0:30:4c:
                    b0:62:56:47:bd:c6:04:9d:7d:f3:e4:44:15:e6:4f:
                    2b:3d:79:44:24:41:ba:83:14:89:51:fc:19:dd:67:
                    ff:a3:73:5e:31:75:0e:33:5c:ae:69:58:48:56:d0:
                    6a:6d:de:58:35:78:b2:26:11:46:56:71:d2:10:78:
                    8d:f2:a4:5f:b7:53:07:90:8e:97:7f:da:c9:54:c5:
                    d0:27:e1:ae:60:dc:c4:13:75:2a:e4:fc:eb:39:bf:
                    42:13:66:07:97:d7:e4:f9:8a:f0:7d:e4:d5:c4:ba:
                    53:2c:b2:0b:cc:21:39:d7:f7:e8:53:38:02:5f:2c:
                    76:b2:fa:ed:c4:ca:52:bf:48:1f:be:6f:7f:bc:6c:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:77:D6:D0:31:90:FD:29:C5:D2:DE:43:83:A4:FD:30:B8:57:8F:17
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f52932a02774309c47e2d35c8da9afd0ceec609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:44:7a:b8:2d:3c:0e:ba:89:20:79:c5:42:36:f6:5e:8d:22:
         9b:d5:b2:51:35:e7:32:7e:7b:d3:25:d5:60:29:8d:f6:cd:49:
         97:fc:d5:dc:b6:05:0c:f3:a1:43:36:6e:f3:87:d2:38:1c:cd:
         9d:48:db:4d:4f:59:94:eb:80:56:27:05:06:d5:a5:88:85:ce:
         f4:e8:3a:b6:7b:60:e8:1e:ae:b8:96:f4:81:9b:90:38:18:72:
         18:cc:c0:07:b1:bd:68:75:63:de:33:c6:2d:11:66:96:e8:8a:
         35:69:b9:fc:0b:a0:2c:9d:32:fd:46:39:94:f8:e9:74:97:b8:
         08:25:c4:b4:75:25:59:6b:a5:e0:8f:ba:36:54:9a:18:f1:3c:
         b9:82:64:b1:b4:00:60:23:cd:56:76:e3:5c:e7:3a:da:3a:9e:
         bb:c9:6a:30:37:42:49:1a:f9:d8:d1:75:c9:15:2d:bb:b4:29:
         5b:95:25:1e:99:22:56:a8:34:78:09:07:cf:e2:78:55:b5:12:
         8a:94:2a:c3:91:22:87:8d:8b:10:10:bd:54:d5:1e:d5:f8:c2:
         b2:5a:8c:e6:49:e5:82:25:a8:30:ed:a0:4f:e1:fb:31:e4:92:
         30:2f:b5:5b:7b:ee:32:b2:50:47:1e:c3:2f:ee:d0:fe:86:53:
         be:6a:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org