Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b17526931685df1abb0181a6fd8079390e8a7006.roa
File:                     b17526931685df1abb0181a6fd8079390e8a7006.roa (raw, json)
Hash identifier:          TpysfjAS6LofvDcZ9hR42zeS/mX66uvsQ1gWecCAyAc=
Subject key identifier:   D4:33:1C:50:F3:80:0D:6D:2D:3D:D2:4D:7C:C4:8B:C9:71:1A:EF:44
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0DA677
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b17526931685df1abb0181a6fd8079390e8a7006.roa
Signing time:             Wed 24 Mar 2021 14:37:06 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        179.48.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894583 (0xda677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=b17526931685df1abb0181a6fd8079390e8a7006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:3b:61:a8:6c:49:06:48:a9:71:6d:9f:a9:
                    dc:eb:09:c2:f8:c3:d5:00:d0:b4:d7:3c:17:a6:96:
                    9e:d7:35:a3:89:9b:91:aa:67:f0:fe:08:a5:61:f4:
                    d4:74:4c:44:89:a3:8d:7f:36:d2:99:76:27:cd:2e:
                    bf:a7:34:d2:54:6a:27:88:fa:30:fc:c4:b7:c2:e7:
                    80:fd:2a:8b:63:3d:43:64:f5:44:37:8f:f4:b7:85:
                    6a:ab:50:5a:aa:3e:0b:d8:eb:de:67:38:87:9e:0f:
                    56:17:0d:b8:ac:ed:55:2b:2c:e6:51:23:9a:d1:04:
                    60:ac:75:ed:73:e6:55:b7:8b:2b:c0:07:f3:e0:e4:
                    e3:55:a7:b8:2c:59:92:b1:e8:36:4c:59:ef:14:cb:
                    15:bf:16:75:e2:9e:52:c4:28:86:99:86:9b:63:33:
                    af:18:50:11:e6:2b:36:6e:09:31:03:e0:27:d5:63:
                    af:3f:27:92:bf:c7:c1:43:f5:0c:f7:69:44:85:30:
                    61:4f:4f:76:04:4b:ef:e9:04:ff:22:31:01:2b:6c:
                    24:84:c3:86:24:e9:4a:31:5e:db:0f:e7:0a:0c:39:
                    e8:76:96:4d:12:6c:97:b2:c7:bd:6f:4b:0e:db:4d:
                    85:ab:04:de:d9:62:de:2d:b8:3b:41:43:7b:fc:7e:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:1C:50:F3:80:0D:6D:2D:3D:D2:4D:7C:C4:8B:C9:71:1A:EF:44
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/b17526931685df1abb0181a6fd8079390e8a7006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:05:87:21:32:17:1d:7e:9b:f9:80:1e:c4:ad:d6:26:76:1d:
         23:f6:86:2f:b3:d7:55:8c:9e:5e:79:87:16:1f:c4:84:88:af:
         26:8f:ef:25:db:5d:ea:46:71:2f:c9:3d:b2:06:e5:76:bb:52:
         b9:6d:4a:81:86:fb:50:38:6a:14:99:7f:53:94:46:cb:07:eb:
         d0:d2:bf:6e:70:43:e4:20:16:4d:4b:e0:94:f6:cf:b4:de:9b:
         1b:6d:df:71:80:d3:2c:97:6d:14:d1:03:c9:d9:14:d3:a7:37:
         13:05:66:2b:50:ca:83:c8:90:b5:9e:2c:1c:fb:4a:54:6c:19:
         0d:64:5b:4d:93:9e:87:5e:d2:8b:4e:dd:7d:b5:fa:c0:af:64:
         bd:e1:2f:96:9d:ec:9c:90:5f:ab:70:09:db:85:7f:17:27:26:
         14:8c:28:23:c7:1b:b8:1a:8e:89:f0:51:68:05:7d:42:74:9b:
         c9:8f:86:a6:a3:63:66:81:f0:71:39:88:f3:01:dd:7e:be:dc:
         bc:4e:b8:92:3a:95:5b:07:08:3e:0b:44:e1:c4:ca:1c:95:1b:
         ee:d8:66:b4:a6:05:7d:d1:f0:29:ed:c9:8f:7a:ba:92:27:43:
         e8:47:50:0a:ad:4f:44:73:31:50:63:ce:72:61:ba:64:22:04:
         50:33:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org