Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/64758daa7b4e29a04df51d4d1e0368608add8245.roa
File:                     64758daa7b4e29a04df51d4d1e0368608add8245.roa (raw, json)
Hash identifier:          zvnX6A8Ks8EGLh6WXs0nAsl/R7jEnuGni2HxgTqNU7Y=
Subject key identifier:   C4:F1:D4:A7:14:C0:F5:B2:CF:72:33:AD:44:52:C7:AF:5B:50:5D:DC
Certificate issuer:       /CN=c7a7fe124be23600f4dc050bfc4848190cf90309
Certificate serial:       0409
Authority key identifier: 9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/64758daa7b4e29a04df51d4d1e0368608add8245.roa
Signing time:             Mon 13 Feb 2023 17:04:46 +0000
ROA not before:           Sun 12 Feb 2023 17:01:14 +0000
ROA not after:            Thu 13 Feb 2025 17:01:14 +0000
asID:                     262186
IP address blocks:        179.63.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a7fe124be23600f4dc050bfc4848190cf90309
        Validity
            Not Before: Feb 12 17:01:14 2023 GMT
            Not After : Feb 13 17:01:14 2025 GMT
        Subject: CN=64758daa7b4e29a04df51d4d1e0368608add8245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:01:8b:8c:c7:c7:28:6b:bf:c2:32:81:9c:
                    f8:18:0c:6a:23:47:b5:6f:f8:6d:53:7f:00:0f:1d:
                    55:e0:cc:11:03:0a:cc:19:11:16:07:ba:c1:89:94:
                    ab:de:63:16:85:85:df:39:8d:64:d3:56:34:11:2e:
                    22:6c:d7:29:f3:5b:69:35:86:1c:0f:e2:79:6a:06:
                    2c:7d:b4:8e:52:e1:69:59:92:ec:3b:f1:11:55:19:
                    02:4a:e9:54:66:6c:bf:25:8b:f5:2d:9c:f9:dc:1d:
                    fc:62:0a:34:6c:30:43:61:b9:d9:d9:a9:a6:c8:2f:
                    01:44:16:13:ed:a6:a8:b6:44:33:e8:ca:c0:34:5d:
                    c3:2a:76:79:56:e6:f7:88:f7:4d:f0:74:84:19:8a:
                    f9:75:d4:40:77:93:85:83:92:db:e8:1e:7e:4a:4b:
                    f8:85:02:8e:22:52:6a:0e:20:d4:f9:54:63:4f:e8:
                    5e:4a:52:f4:3e:b8:33:bb:1f:b4:79:e8:58:f2:91:
                    49:28:64:d5:64:98:92:74:ad:46:9e:8e:f9:34:09:
                    3a:52:27:34:19:06:e5:11:cf:02:b7:10:1a:06:42:
                    09:92:73:8f:b3:15:86:07:ac:da:a0:e8:5c:85:f8:
                    65:b7:64:f4:3a:f1:2b:7d:3c:f9:ec:1d:b7:39:41:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F1:D4:A7:14:C0:F5:B2:CF:72:33:AD:44:52:C7:AF:5B:50:5D:DC
            X509v3 Authority Key Identifier:
                keyid:9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/64758daa7b4e29a04df51d4d1e0368608add8245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c7a7fe124be23600f4dc050bfc4848190cf90309.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:00:be:52:21:b3:10:d8:92:71:96:ed:62:fa:6f:e0:1a:aa:
         70:53:f9:98:c8:79:cd:8b:0e:8a:d5:44:7a:bc:98:4c:92:51:
         a4:68:e2:af:fb:ff:aa:01:bd:68:09:e8:56:21:ed:dd:35:8a:
         fc:f2:09:62:f9:cb:36:39:65:fd:39:93:8d:e2:11:af:d6:83:
         c5:4e:08:1b:90:a1:d0:47:4a:1c:42:53:e5:17:6d:33:63:0e:
         3a:d1:61:4c:dd:df:68:f8:fa:ef:97:a3:3c:bb:e0:70:67:58:
         05:76:34:57:94:99:55:12:c1:ee:3c:80:41:b1:a5:64:47:62:
         e6:ee:47:ed:75:ed:46:df:60:8d:36:c3:4c:c7:c6:c0:de:64:
         c2:33:35:40:29:1c:91:33:e8:27:64:76:bd:38:01:8e:2c:6f:
         39:59:a8:8a:b4:05:2e:00:ad:0b:08:5b:e8:2b:29:75:36:75:
         31:b2:fe:f6:59:31:34:9f:ce:57:f3:0e:42:a7:52:ac:ee:de:
         04:fa:3f:33:ab:5c:b3:6f:63:58:8d:41:e8:2b:cf:7c:66:55:
         2f:96:77:5d:4c:4f:aa:cc:e3:38:76:ed:88:71:85:e6:ed:f0:
         aa:0e:d6:36:3c:52:29:0c:de:d7:ee:b6:49:27:51:0d:80:0c:
         41:64:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org