Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bdd0d14-4b88-462e-be9f-f119707c727e/82f5b6c58fa1a6867ac1bec54f88568c98740205.roa
File:                     82f5b6c58fa1a6867ac1bec54f88568c98740205.roa (raw, json)
Hash identifier:          Zp8PAOWA7aBcyZkeG7dLlZaCEylO+wEtq7hTgHF6w78=
Subject key identifier:   23:38:4C:66:BB:E5:0C:93:B2:E2:A4:BD:D5:09:B8:5E:64:1C:46:FF
Certificate issuer:       /CN=4e94d40e2d1b9549d824089dd47d6dea916b9f95
Certificate serial:       0278
Authority key identifier: 79:67:88:73:DC:4C:9B:0F:2F:F4:36:60:ED:07:45:41:B6:CD:28:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e94d40e2d1b9549d824089dd47d6dea916b9f95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bdd0d14-4b88-462e-be9f-f119707c727e/82f5b6c58fa1a6867ac1bec54f88568c98740205.roa
Signing time:             Thu 22 Sep 2022 21:18:05 +0000
ROA not before:           Thu 22 Sep 2022 21:08:12 +0000
ROA not after:            Sun 22 Sep 2024 21:08:12 +0000
asID:                     272801
IP address blocks:        179.63.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e94d40e2d1b9549d824089dd47d6dea916b9f95
        Validity
            Not Before: Sep 22 21:08:12 2022 GMT
            Not After : Sep 22 21:08:12 2024 GMT
        Subject: CN=82f5b6c58fa1a6867ac1bec54f88568c98740205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:bc:a8:a0:ce:c5:d8:b3:88:f3:af:68:4c:
                    a4:5c:46:bf:99:32:bd:05:2b:41:12:25:36:38:48:
                    0a:c5:39:6c:cf:cf:ad:ce:7e:29:eb:66:f7:b7:13:
                    f7:e9:67:42:d5:65:bd:9a:22:32:d5:71:d0:19:af:
                    60:03:b1:81:a9:13:1b:1d:be:85:91:0e:87:f1:95:
                    33:c0:21:87:e1:f5:e5:1f:38:d9:6a:d5:0f:22:f7:
                    32:15:ba:c4:97:fe:b8:dc:c2:3c:86:26:d5:de:6e:
                    4b:34:0b:f1:fe:f9:09:b1:bb:2c:5d:2b:dc:fa:c4:
                    bd:c7:98:ae:4a:67:5d:06:95:3d:c3:0e:b3:45:fc:
                    77:fe:b2:08:53:1e:54:f0:60:68:54:e8:86:42:65:
                    0c:ee:0a:1a:07:bc:2c:92:b4:75:90:08:21:b3:ec:
                    a2:dc:ab:5b:11:a5:80:20:53:e9:c8:7a:f4:ed:cb:
                    00:47:a5:ab:64:ac:c8:fe:ed:ce:c6:d5:36:4b:1b:
                    27:21:7b:5a:df:b1:99:29:22:6b:fd:cd:a2:8e:23:
                    ed:b2:0c:ae:47:91:a8:66:8b:7e:9f:ff:d3:8b:c6:
                    80:2b:5a:62:6a:55:31:80:9c:74:6d:fa:44:85:3e:
                    45:3c:9e:95:c3:39:d7:85:b0:c8:6a:55:34:cc:82:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:4C:66:BB:E5:0C:93:B2:E2:A4:BD:D5:09:B8:5E:64:1C:46:FF
            X509v3 Authority Key Identifier:
                keyid:79:67:88:73:DC:4C:9B:0F:2F:F4:36:60:ED:07:45:41:B6:CD:28:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e94d40e2d1b9549d824089dd47d6dea916b9f95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bdd0d14-4b88-462e-be9f-f119707c727e/82f5b6c58fa1a6867ac1bec54f88568c98740205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bdd0d14-4b88-462e-be9f-f119707c727e/4e94d40e2d1b9549d824089dd47d6dea916b9f95.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:64:32:d7:00:08:e0:1d:48:9d:88:bb:3e:ff:83:d8:69:49:
         a9:ae:67:01:e6:89:19:1b:5f:2a:40:35:60:a9:6d:19:93:22:
         5d:69:49:cc:d2:61:92:51:02:66:1b:4d:30:77:91:5f:7d:df:
         b1:41:47:be:4b:14:55:7d:80:93:d5:57:ff:ae:cd:06:42:3f:
         9b:cc:2b:5d:09:fd:14:7b:92:13:5b:ab:b3:3c:47:9f:23:e7:
         65:9f:cc:c7:51:05:cf:8d:38:6a:aa:c8:a6:09:13:87:19:9b:
         84:11:f3:f4:e1:d5:5f:67:f8:e5:d6:73:58:78:b9:c8:d2:a3:
         43:cb:96:cb:24:fa:8b:ea:2b:03:71:89:23:f5:b8:37:89:6d:
         b1:24:24:53:d3:20:cb:b9:a5:a2:ab:2d:db:ea:0b:7b:e3:dc:
         37:6f:87:55:88:09:e4:60:94:36:b4:a7:4c:09:22:aa:17:88:
         1e:7d:d6:38:65:cd:a7:ca:01:df:46:91:1d:82:57:db:8b:46:
         3e:86:a0:74:39:83:2f:da:ef:1e:6d:29:dd:d6:a9:cc:31:42:
         42:68:6d:42:0e:98:96:4b:55:43:f1:f1:f3:c0:a9:c0:a4:1d:
         8e:54:11:18:88:01:83:e0:a1:1a:50:5a:0c:24:0f:aa:ca:99:
         64:67:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org