Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f23a341e178f32eeff9c400a21b1204317b03bf1.roa
File:                     f23a341e178f32eeff9c400a21b1204317b03bf1.roa (raw, json)
Hash identifier:          jgK0oQFjD5oHdUmBtBpzsher0QVrBlgjvAtvsZ5I6oE=
Subject key identifier:   AA:12:FB:D8:08:4C:92:6B:00:F1:FC:F1:76:5C:E4:E2:DE:EF:E7:F2
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       2389D8
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f23a341e178f32eeff9c400a21b1204317b03bf1.roa
Signing time:             Tue 17 Oct 2023 07:30:03 +0000
ROA not before:           Mon 16 Oct 2023 07:30:03 +0000
ROA not after:            Wed 15 Oct 2025 07:30:03 +0000
asID:                     269862
IP address blocks:        138.99.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329048 (0x2389d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Oct 16 07:30:03 2023 GMT
            Not After : Oct 15 07:30:03 2025 GMT
        Subject: CN=f23a341e178f32eeff9c400a21b1204317b03bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:9e:b6:a8:a5:0e:80:e1:1d:92:98:d2:4f:
                    8f:f4:10:3e:f1:92:2c:22:5e:ab:a3:ea:91:57:f1:
                    20:f1:ab:b5:1c:42:c9:11:70:6f:87:5e:03:5b:47:
                    43:89:83:00:a4:25:95:f0:90:a2:a9:27:42:d5:44:
                    cf:93:c0:6d:61:9c:65:5c:d4:42:52:ee:ac:8d:42:
                    9b:b0:eb:4c:1c:2c:43:d6:09:12:50:12:43:72:cc:
                    e3:15:cf:4b:91:23:87:93:d6:87:51:16:4d:ca:8e:
                    19:55:f5:6e:ae:5a:af:25:19:03:fe:d6:b3:ca:cc:
                    58:fa:0e:85:d8:e6:39:63:87:0f:4c:e8:ea:9b:01:
                    3c:e1:65:9c:90:ec:48:cd:eb:03:b2:00:94:f1:45:
                    96:da:b7:6a:75:55:31:05:ea:70:eb:3b:8f:63:7e:
                    5c:c5:cb:d4:47:c1:4d:5e:48:1e:be:e5:ba:ed:f4:
                    5b:6f:80:a8:a6:80:86:e0:7f:af:db:1c:ae:84:88:
                    4f:4e:85:fc:af:b9:1c:93:6e:ea:ac:d6:77:23:15:
                    93:5d:09:ee:16:71:11:5d:1b:71:ab:3f:ae:db:73:
                    ae:be:26:db:59:3c:94:a4:24:48:e4:8f:7e:53:36:
                    6f:40:65:4e:24:b5:67:4d:b5:eb:d5:e9:93:ac:24:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:12:FB:D8:08:4C:92:6B:00:F1:FC:F1:76:5C:E4:E2:DE:EF:E7:F2
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/f23a341e178f32eeff9c400a21b1204317b03bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:68:51:77:cf:a0:4b:5d:ab:0e:5e:9c:e4:16:ed:4a:43:
         ed:42:96:3f:3e:78:33:3d:1d:a8:22:5c:d7:6b:5f:54:50:f1:
         0f:17:4c:58:ac:09:fb:8c:41:2a:94:42:59:65:eb:90:c7:31:
         2b:14:45:37:42:8a:84:a0:bc:97:f4:42:51:c6:11:3a:af:a6:
         46:19:7c:6d:c4:db:4c:f6:be:b2:28:a4:ef:c3:9c:23:0a:1f:
         41:49:35:f1:ab:19:d8:53:f4:34:a5:cf:5b:d6:7d:3c:40:67:
         b6:4c:27:2c:d9:6e:6e:c2:e4:c4:b5:97:c5:94:97:59:94:9b:
         c8:87:b6:7f:91:5e:56:b9:09:e8:f5:fa:81:5b:47:2b:ad:23:
         d8:7c:24:fd:4e:55:69:95:d4:ee:a0:f2:89:ba:46:66:65:08:
         20:4f:4e:ce:6d:9e:8c:22:18:aa:45:cc:bb:7a:28:83:d1:1c:
         36:fd:bc:cf:33:81:a7:88:7c:a7:55:c5:dc:0a:d3:4a:3c:ef:
         75:02:8d:ab:de:d2:f4:d4:a9:fd:e1:f7:92:4f:af:84:51:45:
         f6:3f:0a:2d:40:6e:1d:7e:05:f0:07:32:ca:76:cf:32:ec:8b:
         65:97:a9:61:c1:5c:ec:4e:8f:cb:92:6e:f7:82:80:fe:cb:89:
         70:28:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org