Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/9236e8ea3d6f3acbb79ee9e176616e2a60c5b678.roa
File:                     9236e8ea3d6f3acbb79ee9e176616e2a60c5b678.roa (raw, json)
Hash identifier:          Ld2FsQg8GKcjZ4jhi3hefu886R+LMT/EpT7TkWqizJM=
Subject key identifier:   00:1F:4B:BD:61:B0:23:5E:AD:6A:CC:FF:20:F2:ED:2A:10:34:8E:1D
Certificate issuer:       /CN=2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf
Certificate serial:       0D6008
Authority key identifier: 8B:F3:93:14:28:AE:E0:C0:F9:4F:10:2B:DE:4C:8C:C2:C4:78:2A:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/9236e8ea3d6f3acbb79ee9e176616e2a60c5b678.roa
Signing time:             Wed 24 Mar 2021 14:42:26 +0000
ROA not before:           Wed 24 Mar 2021 14:42:25 +0000
ROA not after:            Tue 24 Mar 2026 14:42:25 +0000
asID:                     263193
IP address blocks:        179.0.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876552 (0xd6008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf
        Validity
            Not Before: Mar 24 14:42:25 2021 GMT
            Not After : Mar 24 14:42:25 2026 GMT
        Subject: CN=9236e8ea3d6f3acbb79ee9e176616e2a60c5b678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:df:f4:49:08:c4:f5:06:65:66:43:89:ca:
                    c1:7b:b7:c1:0a:35:df:71:0c:f2:8a:8d:b2:10:8e:
                    48:f8:16:6c:9c:b0:76:45:0d:7a:84:04:66:2a:1d:
                    1f:2a:23:1b:37:3f:42:65:a0:24:d3:08:bb:53:90:
                    64:cb:fe:56:71:b9:8a:d6:c5:0e:44:94:5b:f9:c5:
                    3f:1e:1d:84:e0:20:18:3f:a2:3e:89:44:29:f1:d4:
                    b4:2b:4d:4f:7f:b9:c2:fb:88:e5:33:8f:f8:99:1d:
                    96:e4:8e:54:15:ef:f5:dc:22:27:9b:b4:56:95:65:
                    d6:de:93:c3:de:c1:90:13:6c:0e:62:50:ac:e6:00:
                    8f:f6:63:a0:c6:8a:fb:a5:69:fd:75:c0:60:77:fc:
                    b8:a6:76:33:ad:0d:5f:f0:9b:29:28:b0:7f:63:db:
                    fa:d7:b1:59:4d:e4:f3:cf:f9:56:9a:2b:0a:0d:c9:
                    89:90:8c:83:2f:d2:88:48:fa:ff:22:62:f2:ab:57:
                    6c:f4:85:26:b6:62:59:65:75:52:92:21:c3:ce:c0:
                    93:f6:f0:f5:6e:f2:a5:6d:2d:0a:1a:c6:95:fa:89:
                    de:02:ae:e1:02:4d:18:c3:33:fc:7c:d9:8d:48:2a:
                    2c:75:26:58:96:a9:45:a7:37:cc:60:94:d4:9c:45:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1F:4B:BD:61:B0:23:5E:AD:6A:CC:FF:20:F2:ED:2A:10:34:8E:1D
            X509v3 Authority Key Identifier:
                keyid:8B:F3:93:14:28:AE:E0:C0:F9:4F:10:2B:DE:4C:8C:C2:C4:78:2A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/9236e8ea3d6f3acbb79ee9e176616e2a60c5b678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8035d1f7-4a4b-45a2-88fd-b836326086c1/2a8df7f49423ea87b4ecb5b0b60acf64a9583fdf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:42:7f:7e:0d:dd:47:94:50:85:b4:9f:82:e7:c3:1a:3a:
         d5:8f:fb:36:e8:fa:58:c4:c7:ff:3b:99:51:4c:b8:15:88:8f:
         b4:1e:b8:86:3b:82:41:8f:9d:85:6e:d3:d7:09:28:1b:91:76:
         ef:53:2f:b8:d7:03:1c:0b:b9:87:fd:a5:5b:cc:f1:5e:61:2c:
         75:3c:f9:91:58:5e:af:d9:74:84:32:44:33:6a:47:e2:fb:fa:
         34:2e:f4:8f:b3:70:8f:2e:fc:f4:5f:2f:f1:3a:92:67:63:21:
         36:7a:16:a2:cf:93:8b:30:52:1b:5c:a3:28:36:a0:5f:ef:ae:
         80:f9:51:8b:6d:78:6b:99:91:c0:ba:67:7f:0a:57:aa:6d:1c:
         33:d1:bb:5c:cf:bc:0c:86:93:9e:26:86:0c:2a:f0:75:d5:ae:
         b5:94:c4:86:98:ff:1f:ac:c0:c1:62:a3:d9:4f:13:e4:0e:37:
         fb:04:2a:1c:14:71:d2:73:1e:1b:96:e7:f0:3b:95:2e:bc:3f:
         cc:9a:0c:be:21:91:00:5a:d6:3c:86:94:b0:04:b8:46:8e:f1:
         da:89:4c:51:0a:a6:38:57:4d:99:b0:42:e2:f8:85:b4:a4:dd:
         b1:d0:90:02:bf:cd:79:ff:5c:1b:d9:53:15:16:26:eb:e2:69:
         31:3f:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org