Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/0f1350e2ea9816bb862f088e9f96cbb064aa1403.roa
File:                     0f1350e2ea9816bb862f088e9f96cbb064aa1403.roa (raw, json)
Hash identifier:          Id1MlsmtKyZr94/NbTn3Dy0tM8UcgdzHLRBPI3pVi6s=
Subject key identifier:   58:A7:C0:5F:2F:BF:70:1E:13:E4:DC:2B:34:65:FD:C4:EA:89:87:AB
Certificate issuer:       /CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
Certificate serial:       02A7C0
Authority key identifier: 4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/0f1350e2ea9816bb862f088e9f96cbb064aa1403.roa
Signing time:             Mon 24 Apr 2023 17:24:17 +0000
ROA not before:           Sun 23 Apr 2023 17:24:17 +0000
ROA not after:            Thu 24 Apr 2025 17:24:17 +0000
asID:                     270152
IP address blocks:        177.124.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174016 (0x2a7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
        Validity
            Not Before: Apr 23 17:24:17 2023 GMT
            Not After : Apr 24 17:24:17 2025 GMT
        Subject: CN=0f1350e2ea9816bb862f088e9f96cbb064aa1403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:a4:d2:32:83:d3:d7:f9:77:43:a6:34:3b:
                    bd:ad:8c:80:2f:14:15:21:e0:f5:de:ff:41:ea:77:
                    d1:80:cb:b5:e3:a0:e6:d7:16:41:f4:2c:27:83:22:
                    15:c8:44:24:9f:1d:7b:66:80:d0:87:03:a8:ce:68:
                    11:97:8a:83:5d:c7:fa:4c:1b:30:61:3d:72:c1:43:
                    b1:03:94:78:c4:4c:98:89:98:3e:35:b9:b7:f0:dc:
                    c4:de:71:94:e6:60:fb:d5:4c:b3:bc:32:e1:e0:2c:
                    44:6a:21:32:77:5f:0d:3f:82:9e:05:fc:a6:4e:b6:
                    3d:b6:50:69:79:36:bc:1a:ee:14:66:64:4f:5c:53:
                    f1:79:c7:c7:99:f0:31:f9:46:6d:6a:c9:18:62:75:
                    65:a9:da:ac:5e:ec:ea:0e:53:5e:2a:42:95:c8:4a:
                    a6:9d:93:2e:6c:67:e6:ca:a1:1e:fa:31:6d:0a:4e:
                    ef:f7:e1:5d:68:63:7b:75:bc:e2:9c:a2:29:6f:7b:
                    34:a3:06:c5:ee:d0:4e:5f:b7:1f:ce:b5:14:d6:a3:
                    43:e9:83:9c:31:ce:27:08:3b:92:74:3c:1f:74:2d:
                    cb:bc:83:97:9f:1f:b1:22:9c:c2:24:86:e7:8e:53:
                    d5:c1:92:6a:33:de:10:5b:29:a2:f7:93:39:51:f6:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:C0:5F:2F:BF:70:1E:13:E4:DC:2B:34:65:FD:C4:EA:89:87:AB
            X509v3 Authority Key Identifier:
                keyid:4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/0f1350e2ea9816bb862f088e9f96cbb064aa1403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:83:fa:6b:4d:54:60:ca:de:15:e9:b5:ff:aa:a7:b7:db:82:
         42:d0:bc:84:bd:ff:78:ad:99:f5:c3:c2:db:e8:1b:6e:89:ad:
         b4:4a:56:69:83:7c:e1:19:55:10:9e:20:ee:b3:fd:9d:9a:49:
         89:06:b5:85:13:7d:f3:68:5a:79:c9:ea:ba:6e:00:69:9d:7a:
         4b:01:f9:c3:66:f2:1c:49:49:c1:f2:07:8e:39:e9:f7:4a:17:
         99:2d:07:15:37:9e:43:cc:c6:6e:5c:29:ec:ce:5c:b5:16:64:
         4a:7f:c8:cf:92:fe:68:e9:53:df:f9:22:11:c6:3b:f4:58:f5:
         78:47:3b:96:29:fa:6b:d6:ac:f5:5f:a6:b7:17:45:f1:9f:3c:
         27:f2:30:26:cd:3a:63:4c:d4:d7:7e:3c:bc:00:3a:7e:ff:81:
         9b:69:70:e9:e8:6c:82:7d:58:a7:10:90:c3:aa:ba:67:fd:50:
         73:74:fe:78:9d:d3:55:49:89:a1:57:e1:c2:6a:ac:4a:79:f6:
         c4:7e:bb:3d:56:ee:bc:c6:0e:ad:21:7d:0f:8a:cd:c2:8e:04:
         00:80:07:f6:ef:10:1f:f8:98:a9:d4:07:04:d1:67:6f:3a:19:
         e1:c0:7d:e0:7c:e1:c7:bd:fc:f0:7c:2f:81:a3:b8:54:b3:0b:
         8c:6a:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org