Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff.roa
File:                     e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff.roa (raw, json)
Hash identifier:          jmBCG8X1+bZHusrD/dps5F0HlnWhb4v5XLMEVUbSP1s=
Subject key identifier:   D2:E8:8C:00:19:E7:6D:75:93:AA:7D:4C:BB:70:8A:46:C1:43:50:46
Certificate issuer:       /CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
Certificate serial:       052A
Authority key identifier: 85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff.roa
Signing time:             Mon 07 Nov 2022 13:05:52 +0000
ROA not before:           Fri 04 Nov 2022 12:57:22 +0000
ROA not after:            Thu 07 Nov 2024 12:57:22 +0000
asID:                     27994
IP address blocks:        200.59.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251
        Validity
            Not Before: Nov  4 12:57:22 2022 GMT
            Not After : Nov  7 12:57:22 2024 GMT
        Subject: CN=e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:93:ad:d8:40:85:d7:19:88:b9:13:b2:9f:
                    c0:e6:20:67:06:44:d0:1b:b4:f3:20:ac:b1:a8:9b:
                    f3:1a:41:fc:66:49:02:1d:01:49:b5:24:9f:1e:80:
                    c7:19:6e:88:c1:2b:92:2a:8a:ff:e7:a3:0d:08:bb:
                    e8:be:e5:78:ec:76:4a:08:16:d8:5f:dc:ef:43:fc:
                    37:0c:99:29:bf:5f:56:e6:b7:16:7e:b9:21:cd:c7:
                    67:49:6c:ae:71:f7:d9:57:55:d2:5f:45:40:ce:b8:
                    fc:21:12:19:0f:2e:dd:4d:8f:d3:a8:2c:bb:41:57:
                    85:57:cf:65:2b:c0:34:ae:65:9f:ef:ef:d7:89:9a:
                    b1:14:7a:83:78:67:3a:ba:8f:db:ef:30:b2:50:11:
                    3c:77:de:35:58:2d:91:8c:61:52:40:56:6b:62:b8:
                    e6:ff:bd:ca:0f:cc:73:c5:29:a3:2f:be:01:ac:cf:
                    45:67:ec:6f:91:71:a8:11:1a:f3:6c:2c:66:1e:4b:
                    d5:08:9e:51:77:c5:77:7b:4d:21:85:9d:90:dc:2f:
                    b8:f2:53:a4:ab:aa:4f:d9:7c:37:0e:6b:cc:17:68:
                    e5:21:9b:16:28:9e:8f:d1:a2:38:2d:fc:ad:f0:c9:
                    2d:0c:80:6a:83:b3:f8:51:cf:5f:3e:5e:5a:84:55:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E8:8C:00:19:E7:6D:75:93:AA:7D:4C:BB:70:8A:46:C1:43:50:46
            X509v3 Authority Key Identifier:
                keyid:85:2A:9A:BE:63:FA:68:B3:44:E1:CF:0D:23:5B:D5:F3:4D:C4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/e80b2db7af77de8e9d4ac49d9dc5e02f3ef6a7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969d6fac-c54d-416a-810f-e45005a90900/3a9b6bf0ea9f0d47341b54a2214aabbcf74d4251.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:7f:45:d4:73:43:81:36:c6:33:6e:fc:b6:fc:39:ca:04:
         9d:7c:10:9f:d0:18:3a:c5:a0:c5:64:25:cc:8f:b0:57:de:da:
         5d:2e:84:1f:37:a9:84:a4:17:f9:2b:eb:cf:c0:cf:b3:44:41:
         7b:21:1a:65:77:1e:cd:d5:7b:c2:26:49:e1:4e:66:60:fb:66:
         8d:7f:bf:eb:07:2a:cd:7f:b5:2a:e3:d9:87:d2:d3:1d:82:03:
         8f:97:ba:39:d0:62:90:c1:27:94:3d:3b:c0:3e:a6:0a:39:b1:
         99:af:27:f7:d6:72:25:42:3d:71:47:25:29:38:f7:d9:6b:81:
         16:86:77:19:43:b6:84:85:18:35:50:72:ab:c5:92:3d:dc:de:
         3b:fd:f8:a0:12:94:8f:2f:92:a8:67:57:a0:e0:79:66:dc:c2:
         8d:c0:ea:32:ea:ed:34:35:10:a2:55:40:95:ec:4e:80:35:9c:
         2c:08:5e:34:fb:ad:49:55:3f:9e:b8:48:b0:88:61:5a:d5:12:
         a6:33:b8:ef:bd:47:79:51:98:32:29:4b:9b:e1:5b:4c:31:49:
         51:3a:dd:ab:9f:87:3f:8e:5c:69:90:a5:5c:1e:7c:7b:34:96:
         64:9b:b0:f1:4e:86:fb:a5:4b:9b:68:c9:6d:b6:48:41:00:e3:
         fc:35:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org