Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/a67c9f567a5c7c6f96dc6ee9665e185ac8361762.roa
File:                     a67c9f567a5c7c6f96dc6ee9665e185ac8361762.roa (raw, json)
Hash identifier:          OfcV0H72QJbSsd2s9+VleSuDGiLzVflI5iJffeBpXdE=
Subject key identifier:   12:5C:5F:A0:28:2A:F7:73:28:EB:1D:35:53:FD:17:1D:3B:C7:95:5E
Certificate issuer:       /CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
Certificate serial:       1AAB
Authority key identifier: 4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/a67c9f567a5c7c6f96dc6ee9665e185ac8361762.roa
Signing time:             Mon 16 Jan 2023 18:50:32 +0000
ROA not before:           Sat 14 Jan 2023 17:12:03 +0000
ROA not after:            Thu 16 Jan 2025 17:12:03 +0000
asID:                     28432
IP address blocks:        177.124.84.0/22 maxlen: 22
                          177.124.84.0/24 maxlen: 24
                          177.124.85.0/24 maxlen: 24
                          177.124.86.0/24 maxlen: 24
                          177.124.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6827 (0x1aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
        Validity
            Not Before: Jan 14 17:12:03 2023 GMT
            Not After : Jan 16 17:12:03 2025 GMT
        Subject: CN=a67c9f567a5c7c6f96dc6ee9665e185ac8361762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:44:4a:b4:f1:23:39:f6:52:b8:84:42:8a:
                    82:7a:5a:20:e0:38:49:7f:06:71:20:12:4a:94:b3:
                    b2:a4:bd:a4:71:8f:c9:f1:df:32:41:f1:63:98:cb:
                    65:02:c6:e4:1d:62:f8:ec:97:47:4e:c3:0d:05:1e:
                    6f:32:21:ca:c5:ef:68:ea:df:d5:a8:3a:fc:43:e3:
                    b4:14:2b:8e:4e:a1:35:8b:68:37:73:f2:3b:26:02:
                    f0:c7:c0:44:2f:0c:41:00:6c:8e:29:60:bb:a2:04:
                    72:72:a3:7a:7a:a8:cc:71:e2:79:41:d2:a0:7f:46:
                    70:44:59:fc:3f:86:20:dc:54:9f:0b:f3:76:0d:72:
                    72:a5:4d:b0:63:ee:08:7a:2a:6c:2d:91:4c:f9:6a:
                    8b:cd:0f:8e:9e:55:e8:9c:45:19:53:e6:e6:8a:96:
                    83:f6:28:fa:a5:a8:91:98:89:79:27:bd:a5:db:03:
                    a7:be:f0:57:35:ce:5c:4d:08:18:81:70:45:c3:67:
                    bd:60:c6:9f:2a:1b:42:3f:3a:58:55:e6:d2:9a:30:
                    10:23:84:34:9a:93:ac:01:27:24:95:02:2f:f7:06:
                    a1:e2:d7:ae:cb:88:fb:b7:1d:d7:10:33:28:4b:27:
                    a7:87:e3:95:fd:fc:2d:16:31:8a:df:ef:89:b1:af:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:5F:A0:28:2A:F7:73:28:EB:1D:35:53:FD:17:1D:3B:C7:95:5E
            X509v3 Authority Key Identifier:
                keyid:4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/a67c9f567a5c7c6f96dc6ee9665e185ac8361762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:88:d9:21:dc:9f:85:ef:d9:6d:48:7d:59:49:1e:96:7f:
         53:29:7e:32:fb:d0:d4:cf:c5:4b:35:0d:22:63:a7:10:b6:f9:
         e8:ed:59:0f:72:a3:0e:67:78:e7:f9:39:9c:9c:d0:02:59:85:
         2e:31:f4:69:05:bd:76:15:80:c8:10:32:6d:ae:93:94:3c:ef:
         64:32:42:34:4e:60:cb:1a:e7:61:2e:8b:10:f4:ce:a5:26:1c:
         f7:eb:a8:a4:7e:fa:3f:33:69:ba:44:16:a9:b4:ff:47:d0:67:
         01:89:ed:77:f2:25:15:21:99:42:72:0c:f7:76:dc:ef:62:76:
         5c:01:72:1f:b5:e0:10:a7:95:f3:55:22:6f:6e:02:9d:6c:71:
         32:fa:b2:eb:c0:09:be:30:36:00:79:a1:e3:6b:b0:70:60:1a:
         23:fc:9a:38:12:46:cd:b0:6a:a4:3a:14:a6:ff:cb:67:e2:6d:
         fe:01:b1:17:38:b9:bf:cb:f5:0d:f3:0e:1c:d2:e3:c0:d8:b5:
         a2:3a:b4:a9:7c:53:d6:15:48:3f:4c:ba:d1:79:80:f6:50:4b:
         2f:60:4d:5a:db:fb:c0:8f:cd:77:ee:6c:58:07:c4:ac:bf:23:
         df:44:e8:7f:5c:05:c3:0b:f3:a0:3f:79:02:c9:c5:56:88:0d:
         53:b6:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org