Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/77ec6215b907ea664bbcec1e7ba4edf820805497.roa
File:                     77ec6215b907ea664bbcec1e7ba4edf820805497.roa (raw, json)
Hash identifier:          onfGagMbHj+BUc73Qlh91tBQxhk650rbdo67lUZnuDU=
Subject key identifier:   C6:DB:25:6F:FD:87:A8:A8:D3:07:B3:72:87:91:A0:67:12:37:F7:2B
Certificate issuer:       /CN=0127eff5fb89d4f04f362b89beb72d612147af7f
Certificate serial:       219446
Authority key identifier: F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/77ec6215b907ea664bbcec1e7ba4edf820805497.roa
Signing time:             Mon 24 Jul 2023 14:46:09 +0000
ROA not before:           Sun 23 Jul 2023 14:46:09 +0000
ROA not after:            Thu 24 Jul 2025 14:46:09 +0000
asID:                     64139
IP address blocks:        45.238.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200646 (0x219446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127eff5fb89d4f04f362b89beb72d612147af7f
        Validity
            Not Before: Jul 23 14:46:09 2023 GMT
            Not After : Jul 24 14:46:09 2025 GMT
        Subject: CN=77ec6215b907ea664bbcec1e7ba4edf820805497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:87:e7:70:6e:1f:83:78:00:6c:8f:3a:7b:
                    5a:dc:71:bc:78:e9:ba:0a:1d:83:d1:3b:7e:cc:24:
                    44:23:9d:95:d0:4e:e6:99:ad:f3:e7:b8:86:ef:f4:
                    0a:ec:84:ae:a0:8c:1b:5b:9e:66:b2:65:93:79:b1:
                    e0:f3:53:7d:83:0d:c6:cf:72:5a:61:f2:af:af:92:
                    f6:5f:52:6b:04:fb:ba:da:4b:43:c9:c4:7a:a9:ea:
                    fa:c6:bd:f3:42:23:50:3a:47:c0:74:49:36:14:19:
                    a9:49:2d:20:c9:cb:d9:e2:ab:2a:9c:a8:68:83:2a:
                    71:c6:15:8a:44:c3:4f:d6:31:d4:80:66:e0:ad:3e:
                    3d:0b:55:2d:94:ff:af:81:0e:05:39:71:cb:c8:46:
                    48:9b:33:ef:60:a5:4e:4f:6b:d1:7a:2f:47:81:cb:
                    3a:78:7b:29:4b:17:df:13:c6:94:56:8e:8d:9f:bc:
                    ff:c6:4d:53:2a:20:16:f9:d8:a1:7e:f7:3d:24:6e:
                    52:f7:1f:cf:66:8f:94:32:65:ac:3f:26:81:f1:3c:
                    cd:12:bd:e1:85:57:87:16:b2:90:51:bb:50:5f:9e:
                    fc:a6:62:86:d2:a1:43:d2:8c:79:a5:9c:f2:2d:ca:
                    47:73:cc:0c:54:d8:c2:6e:8a:aa:d8:1d:23:1c:1f:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:25:6F:FD:87:A8:A8:D3:07:B3:72:87:91:A0:67:12:37:F7:2B
            X509v3 Authority Key Identifier:
                keyid:F6:3D:41:85:1E:14:D5:2B:14:A8:8A:D1:88:46:26:17:3E:84:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0127eff5fb89d4f04f362b89beb72d612147af7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/77ec6215b907ea664bbcec1e7ba4edf820805497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c293664-f3e7-4692-ae43-4183d3d6429a/0127eff5fb89d4f04f362b89beb72d612147af7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:55:ee:42:e5:38:20:f1:ea:65:f5:77:fe:42:b5:74:f5:50:
         a4:c3:a1:1a:c0:54:28:e8:ec:63:c5:3c:3c:31:cf:c4:e9:ab:
         bc:09:c3:6e:0f:32:5a:ea:f8:7e:c4:91:82:92:11:00:6b:b7:
         07:eb:78:b6:66:ed:1b:c0:62:d7:77:6d:b1:cf:b0:96:d4:d3:
         93:d0:b6:6a:ca:41:fb:38:be:f1:ce:8a:a2:43:3d:d1:a4:d8:
         68:13:09:0c:0e:e8:04:25:6e:7c:7f:fe:a1:d2:5b:4c:d3:85:
         68:b9:31:ab:86:c1:46:6d:8e:7c:42:4f:51:41:df:54:1a:c8:
         af:d0:19:29:58:2b:a9:4b:ac:ef:08:19:b6:c4:b2:84:11:c4:
         2a:a1:dd:81:5a:a8:56:75:54:17:65:c8:6e:35:98:d0:b1:13:
         6f:ed:a9:fc:88:a5:1a:2d:80:4b:3f:3f:16:e3:81:fc:fa:a8:
         dd:95:4c:71:8b:07:a8:29:9e:c6:de:b4:05:17:3a:0b:75:72:
         08:8b:2f:06:bc:a2:32:4e:96:d1:e0:08:cb:1e:a3:18:73:31:
         0b:16:85:c1:23:af:72:1f:09:4a:b6:76:fd:b4:1c:0b:2a:11:
         ad:66:c2:29:b8:00:dd:8c:e4:25:5c:d7:2e:a3:24:b4:83:e4:
         9c:2e:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 01:41:43 2024 by rpki-client on console-ams.rpki-client.org