Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c2fad506c83acb134dc85820367c653adf740f3f.roa
File:                     c2fad506c83acb134dc85820367c653adf740f3f.roa (raw, json)
Hash identifier:          ArRvs/kG9veNdSBJmO2yoGaUx84XBDE2AL8AYEkWWio=
Subject key identifier:   0F:BF:AB:57:9C:71:0D:B1:EA:E8:E8:B5:7E:5B:BB:F0:83:6E:0A:D2
Certificate issuer:       /CN=fae694f146c7df2742ae4a3ba758294cd18c109c
Certificate serial:       0B3D
Authority key identifier: A6:98:7B:03:5A:AD:59:4A:D3:3E:18:66:2D:C3:8A:B3:93:C2:0D:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fae694f146c7df2742ae4a3ba758294cd18c109c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c2fad506c83acb134dc85820367c653adf740f3f.roa
Signing time:             Tue 10 Jan 2023 21:21:12 +0000
ROA not before:           Mon 09 Jan 2023 21:20:36 +0000
ROA not after:            Fri 10 Jan 2025 21:20:36 +0000
asID:                     28432
IP address blocks:        177.124.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae694f146c7df2742ae4a3ba758294cd18c109c
        Validity
            Not Before: Jan  9 21:20:36 2023 GMT
            Not After : Jan 10 21:20:36 2025 GMT
        Subject: CN=c2fad506c83acb134dc85820367c653adf740f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:94:cb:49:ab:d5:da:11:c8:e3:6b:5a:ca:
                    9f:b0:80:ff:cc:74:aa:b3:9d:b5:d2:20:fe:ea:47:
                    1e:0f:3b:7f:db:5f:bc:9c:a8:86:23:c8:26:f5:5f:
                    9f:fa:67:8b:59:56:0f:02:78:0d:24:e6:e5:c7:23:
                    bb:6c:70:4e:48:8e:d1:42:9f:b6:8b:a0:3f:30:07:
                    ea:c4:83:f7:bd:4e:9f:06:24:ed:b3:20:26:54:f7:
                    af:b5:50:e1:dc:03:4f:e2:c6:8e:bf:ab:72:29:5a:
                    23:a1:d7:72:41:e7:96:bc:db:7a:a7:6a:6d:04:62:
                    12:81:f8:46:df:eb:27:09:4d:6f:9d:be:1a:78:60:
                    7c:01:2a:2a:4c:71:7b:ab:af:53:5d:7b:13:9c:9a:
                    31:02:42:f9:e2:de:d5:b3:3e:18:55:76:a9:58:cb:
                    ed:5c:8b:e6:81:8e:1c:6c:af:d5:ba:70:f8:73:e1:
                    9a:4e:8b:b7:18:ee:90:a0:e0:94:41:b8:77:ef:d9:
                    29:7b:d0:ee:58:ed:7e:51:90:27:ea:bf:6a:3f:5f:
                    19:56:ae:44:9f:82:cd:f0:19:97:c6:82:16:3c:f9:
                    79:86:d6:f5:4d:9c:e8:b3:ec:dd:80:00:1a:d3:c8:
                    da:09:3b:02:af:87:32:31:47:25:c7:ae:01:b4:48:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BF:AB:57:9C:71:0D:B1:EA:E8:E8:B5:7E:5B:BB:F0:83:6E:0A:D2
            X509v3 Authority Key Identifier:
                keyid:A6:98:7B:03:5A:AD:59:4A:D3:3E:18:66:2D:C3:8A:B3:93:C2:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fae694f146c7df2742ae4a3ba758294cd18c109c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c2fad506c83acb134dc85820367c653adf740f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/fae694f146c7df2742ae4a3ba758294cd18c109c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:c6:89:4d:99:5a:f7:c6:9b:af:f8:1d:0d:29:09:2c:8d:
         36:14:26:dc:5d:e9:1b:d5:63:e6:ed:bf:14:be:36:1e:91:48:
         d2:c5:f4:45:54:b8:13:fb:e7:67:d9:66:fa:c1:06:8d:90:d2:
         f4:b4:d5:bd:f5:bd:69:45:84:7c:9e:f9:4d:57:6a:ad:71:23:
         38:78:cb:b3:e1:2b:73:c0:1a:5d:8f:4e:55:9a:11:bc:bf:44:
         64:ee:a5:02:d7:cf:f8:a5:bd:68:63:45:38:f3:01:4e:9a:88:
         b7:c0:9a:44:26:93:95:7c:9a:76:63:ba:a6:15:0a:e0:fb:96:
         aa:14:cf:4d:2e:c0:bb:de:51:0c:e7:dd:b7:ce:03:90:9d:a4:
         f5:87:8f:3f:5a:a4:15:40:b5:7f:cd:e6:74:dd:21:88:1d:ef:
         c4:b5:ec:68:81:02:e9:59:a2:13:9d:52:8c:5e:0a:1d:f7:84:
         4d:fd:f6:31:b7:26:fa:23:09:a7:26:f3:c6:0d:36:0b:f6:58:
         1a:14:2b:72:32:be:01:53:0a:3d:4d:0e:1f:11:3e:a6:87:93:
         f9:2b:cc:33:84:74:69:6d:48:21:fa:4f:34:82:29:c0:d6:f7:
         56:e8:60:8f:5f:63:ad:9c:b2:e0:e0:9b:07:bb:12:1b:71:41:
         b3:d6:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org