Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b77633e27f0886bbb3f6d7cce4ded1d94b67c1be.roa
File:                     b77633e27f0886bbb3f6d7cce4ded1d94b67c1be.roa (raw, json)
Hash identifier:          dDSsL3PwmeB1o0BbpbRrdf69XTc3jZinex1OW5KAmuw=
Subject key identifier:   87:AF:DF:B3:85:94:0F:FF:0D:D1:25:F1:00:B5:8C:31:8A:6E:8E:B1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1085F2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b77633e27f0886bbb3f6d7cce4ded1d94b67c1be.roa
Signing time:             Wed 24 Mar 2021 14:44:20 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082866 (0x1085f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=b77633e27f0886bbb3f6d7cce4ded1d94b67c1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:10:4a:6f:ca:7c:a6:5f:72:a0:1e:e0:4e:
                    8a:6b:e2:e2:b0:6f:91:48:16:e9:59:4d:71:4d:78:
                    b0:39:5c:d6:06:1d:8a:dd:2c:45:dd:48:c5:cd:17:
                    16:3b:ec:d4:57:00:79:90:a2:96:ea:68:62:07:e3:
                    77:8d:ae:ac:4d:87:26:6f:5e:34:55:3c:68:c7:77:
                    26:cc:cb:17:b8:37:2b:1b:1c:5c:79:c7:b2:d1:a4:
                    12:26:d7:32:0f:25:6e:f8:98:91:1b:20:24:22:89:
                    ee:cc:27:6f:87:60:69:7a:00:d4:de:79:64:c4:6f:
                    09:02:53:16:67:96:30:40:3a:f0:86:87:fc:0c:72:
                    02:ad:cc:36:1e:c1:df:b5:0a:d7:8b:93:ff:79:d5:
                    cd:c4:dd:38:1b:3c:e2:19:67:ec:ec:a8:78:34:57:
                    4e:d2:6a:6e:98:2a:35:2a:88:3b:ca:7a:cf:ae:31:
                    bd:14:22:25:31:f7:bc:3a:56:fd:29:7b:59:df:6c:
                    08:9f:d5:05:15:b3:9a:7a:3d:9e:28:53:eb:fb:85:
                    3b:0c:e1:f1:5c:e4:94:ff:92:5f:12:b3:aa:bf:5b:
                    cd:d8:74:77:06:ac:36:c5:fb:10:b1:44:3f:c6:a7:
                    67:45:0d:52:31:4d:86:ef:bb:71:9d:3d:36:2f:c8:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:DF:B3:85:94:0F:FF:0D:D1:25:F1:00:B5:8C:31:8A:6E:8E:B1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b77633e27f0886bbb3f6d7cce4ded1d94b67c1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:95:1b:ff:98:88:32:87:63:6b:b5:a2:ab:08:b6:fb:79:
         1e:d0:ab:4e:53:4a:0d:81:d2:05:0a:b1:ce:e2:2d:c7:b8:6a:
         e1:ba:53:49:e9:46:ed:ad:47:00:f2:2c:dd:19:a7:15:f1:a9:
         27:52:62:6c:39:12:8b:26:44:5d:8d:67:45:22:45:c7:5b:c6:
         32:86:d9:96:b2:a4:a3:fe:52:21:0b:49:dc:c6:eb:b8:ee:bb:
         bc:7e:2c:77:e9:da:af:56:3c:4e:37:09:b8:e7:2b:49:6c:bc:
         f7:57:36:57:cc:01:8d:ef:8e:1c:c1:22:9f:af:51:b7:ef:07:
         ea:9e:b9:7c:a3:12:2f:2d:76:22:89:17:08:8d:97:c2:fd:68:
         de:0c:52:9a:8f:70:5f:3f:13:fd:bf:b6:69:e0:55:f6:af:62:
         80:6e:36:b5:4e:30:10:50:8b:ee:03:04:b9:b3:4c:3f:e2:ae:
         45:97:7f:57:fa:30:c8:14:22:44:de:f8:c5:61:26:c9:88:e2:
         3e:54:e6:f4:2c:2c:7b:4a:e6:90:9f:e4:bc:5e:c1:13:33:9c:
         d4:bf:89:76:56:65:6e:62:84:c8:d7:ac:fe:e6:f8:a7:85:61:
         33:8e:87:82:da:57:b3:30:1e:3a:81:83:f4:b2:b8:0d:5a:29:
         23:08:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org