Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/6571acb0cab4d40a0ea0e01e342f1c27d1276340.roa
File:                     6571acb0cab4d40a0ea0e01e342f1c27d1276340.roa (raw, json)
Hash identifier:          35VcUMkyh4k78C+ddb4fKiHWSBjTrebvfCN+CKaJI/w=
Subject key identifier:   27:0F:09:16:87:22:22:71:A8:EF:1C:2A:83:4E:B7:42:2B:EA:44:2A
Certificate issuer:       /CN=61be3d295d2a0cd57e45fda40db66d5e6304478e
Certificate serial:       16AD7A
Authority key identifier: 8C:53:FB:30:51:D9:59:8A:85:57:51:5C:1A:AA:AD:DE:0B:AD:8D:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61be3d295d2a0cd57e45fda40db66d5e6304478e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/6571acb0cab4d40a0ea0e01e342f1c27d1276340.roa
Signing time:             Wed 27 Dec 2023 01:35:17 +0000
ROA not before:           Wed 27 Dec 2023 01:35:17 +0000
ROA not after:            Wed 27 Dec 2028 01:35:17 +0000
asID:                     271817
IP address blocks:        179.51.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486202 (0x16ad7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61be3d295d2a0cd57e45fda40db66d5e6304478e
        Validity
            Not Before: Dec 27 01:35:17 2023 GMT
            Not After : Dec 27 01:35:17 2028 GMT
        Subject: CN=6571acb0cab4d40a0ea0e01e342f1c27d1276340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:e4:7d:d1:35:d9:e4:1f:ab:92:4b:c1:4e:
                    64:95:c4:7d:73:c7:a7:59:6b:3d:7a:80:9a:cf:29:
                    0a:77:c4:61:fd:f0:99:81:10:44:a3:fe:58:88:18:
                    ab:f3:d1:bc:ff:5e:7b:4d:ad:a7:2b:8c:85:4e:ac:
                    a5:5b:36:2a:93:84:93:99:c6:ad:4d:00:bc:94:a4:
                    6a:4f:11:b5:12:b9:4a:99:f1:c5:b7:a4:45:73:20:
                    cc:b4:e2:12:e9:dc:09:43:54:fa:6d:5c:c4:dd:b3:
                    28:ac:93:2b:75:1e:68:dd:fc:b1:f8:58:13:e0:6e:
                    2e:1b:27:20:ed:1e:8b:9e:c3:68:dc:06:f7:12:d1:
                    49:0e:cc:7d:35:4f:34:e5:06:da:a0:e7:7d:be:33:
                    4d:21:c3:55:6d:fa:b4:90:7f:66:78:b0:48:3d:45:
                    0a:8d:a6:ef:f1:81:8f:ff:51:30:82:d7:07:c2:4f:
                    1b:2c:28:15:27:f0:33:07:06:83:3c:b2:9e:9d:6d:
                    97:3d:2e:84:2e:fc:13:da:b6:4d:75:46:60:4c:12:
                    c9:a9:ff:1a:56:af:22:30:0e:0b:2b:6a:40:68:10:
                    63:9e:49:32:c2:93:c1:8c:26:c4:88:d3:92:14:54:
                    ec:c7:55:65:e3:f5:b3:35:de:5f:16:3b:e8:fd:20:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:09:16:87:22:22:71:A8:EF:1C:2A:83:4E:B7:42:2B:EA:44:2A
            X509v3 Authority Key Identifier:
                keyid:8C:53:FB:30:51:D9:59:8A:85:57:51:5C:1A:AA:AD:DE:0B:AD:8D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61be3d295d2a0cd57e45fda40db66d5e6304478e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/6571acb0cab4d40a0ea0e01e342f1c27d1276340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/61be3d295d2a0cd57e45fda40db66d5e6304478e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:f5:c7:74:45:5e:e5:ad:c1:2a:c6:a9:28:6d:87:d3:07:
         21:d9:e2:16:82:5b:3d:b6:de:21:29:10:5c:be:e0:7d:f5:65:
         81:e9:e6:72:f9:c7:0d:0d:e8:fa:65:86:54:4c:f2:4e:70:d9:
         36:5f:38:d8:03:52:e3:f0:04:e9:2a:8c:12:1a:08:02:43:c9:
         4a:5d:e1:69:bf:d5:8f:9a:30:bd:40:e5:e3:5b:1a:72:09:9a:
         37:c5:72:1f:eb:4e:05:90:b2:72:7a:73:83:2a:bb:9e:f4:e1:
         8d:1f:da:2a:f9:46:58:ce:b8:ed:d8:d6:c1:b3:af:90:69:1f:
         c6:e6:3a:98:10:e6:29:37:8f:87:a0:b4:d5:b4:d1:14:fe:e8:
         f0:71:0d:73:59:a5:ce:c8:bd:90:cc:be:b0:0c:88:2b:2d:1c:
         26:c5:f5:02:e2:86:f8:ef:9f:36:97:f8:66:46:62:61:ac:cd:
         27:ba:e4:f3:45:f5:6d:e2:c1:f6:8d:cd:96:d8:f3:2b:0d:3d:
         a4:87:42:31:5c:69:58:cd:d2:cc:d0:3f:53:63:82:c4:37:23:
         5a:4b:53:aa:cd:57:83:ed:4e:58:32:68:d0:09:18:b6:47:6f:
         22:b6:e5:57:c0:1e:fc:fe:87:60:6c:c9:33:88:f8:c4:13:8a:
         b0:3f:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org