Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/077c2bee9201a37c16bb6fd8304d829291d76953.roa
File:                     077c2bee9201a37c16bb6fd8304d829291d76953.roa (raw, json)
Hash identifier:          Q7E3rXkUn8Wx17wJFckqJlc3/hdr2FYf781NFpVqJq4=
Subject key identifier:   A6:68:42:1E:6A:1B:E2:DD:50:8A:81:B1:2C:AE:DF:01:15:FB:52:B9
Certificate issuer:       /CN=8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3
Certificate serial:       06D7BF
Authority key identifier: 02:40:26:15:0F:AE:3C:E9:F4:0C:2A:EC:B0:27:F1:20:25:04:5F:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/077c2bee9201a37c16bb6fd8304d829291d76953.roa
Signing time:             Fri 23 Feb 2024 14:34:43 +0000
ROA not before:           Fri 23 Feb 2024 14:34:42 +0000
ROA not after:            Fri 23 Feb 2029 14:34:42 +0000
asID:                     264701
IP address blocks:        168.232.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448447 (0x6d7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3
        Validity
            Not Before: Feb 23 14:34:42 2024 GMT
            Not After : Feb 23 14:34:42 2029 GMT
        Subject: CN=077c2bee9201a37c16bb6fd8304d829291d76953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:ab:7f:d2:ff:43:6b:63:f3:cd:32:72:be:
                    9a:06:ce:85:f1:93:0d:a6:18:cf:99:96:53:e1:72:
                    20:63:df:1b:18:b7:28:e8:f2:ce:95:24:14:6d:a7:
                    37:04:8e:f7:ec:3b:7e:7a:70:99:a8:fe:b4:26:1e:
                    fe:32:ae:a3:7c:5d:e0:70:01:92:38:76:f7:cb:88:
                    7a:8b:e0:26:84:76:fc:3c:4f:94:60:04:a7:a8:54:
                    c7:bc:73:85:74:0e:d1:05:e7:52:44:65:24:59:8e:
                    ea:d2:85:a1:21:94:a7:72:b7:d8:ef:a3:0f:ae:54:
                    db:fd:53:03:c1:ef:c7:cf:93:3c:ff:02:a9:6f:6d:
                    53:43:8b:a6:0b:cc:c1:f8:81:07:b6:c7:2d:83:f0:
                    72:95:2e:e8:88:d1:ea:34:2f:4a:9d:fa:04:a6:b5:
                    ae:e4:ad:1a:09:31:de:05:36:0c:02:ef:4e:2a:f6:
                    7c:be:be:c4:03:79:28:ed:67:7c:cd:43:09:78:84:
                    87:91:41:5b:63:f1:90:82:06:8d:a9:de:4b:5e:e7:
                    81:9a:38:21:c3:38:b8:e9:a7:55:f2:1d:8e:3d:09:
                    38:d6:b4:fd:16:ea:d0:c9:5b:63:cc:18:ff:1a:58:
                    fe:d6:d2:9b:29:5e:02:53:3f:a2:65:6e:e8:b0:e2:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:68:42:1E:6A:1B:E2:DD:50:8A:81:B1:2C:AE:DF:01:15:FB:52:B9
            X509v3 Authority Key Identifier:
                keyid:02:40:26:15:0F:AE:3C:E9:F4:0C:2A:EC:B0:27:F1:20:25:04:5F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/077c2bee9201a37c16bb6fd8304d829291d76953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:66:c6:93:08:72:7f:6b:2d:98:ec:7c:24:eb:e8:e6:ed:
         47:bf:c1:97:58:40:20:c8:5b:ca:94:d6:82:9a:3f:74:ef:4e:
         27:ac:ae:75:8a:97:7a:ad:ba:dd:2b:e4:a5:6e:d4:3c:94:69:
         e6:3a:d9:1d:f1:c5:b3:25:fe:7f:e4:da:a6:f7:77:7b:f4:21:
         2a:9a:d6:47:76:0b:16:e4:cf:c5:bb:d3:98:28:17:df:02:06:
         53:02:73:24:d1:2e:fd:7f:70:bf:e5:f4:a3:78:bd:e5:9f:fa:
         b1:62:1d:1a:20:53:b2:6c:1e:8d:44:c3:e0:f2:e9:0e:0c:09:
         23:42:e1:9e:47:5a:41:5b:57:21:6c:aa:93:45:cc:4d:c5:00:
         9c:63:c1:fc:98:83:7a:e5:a3:56:d9:40:d5:23:40:02:d9:1f:
         8e:32:42:e7:2e:6a:b3:ee:58:4d:16:47:3f:91:c9:5d:22:b1:
         42:ee:f4:05:9f:67:af:94:80:13:b8:e2:4b:ea:a5:93:86:6c:
         4e:91:78:6f:f8:8c:7f:ce:a9:85:ee:f9:1b:b3:e0:e2:6a:6b:
         a8:e6:12:29:36:df:0b:47:1e:f9:5b:42:e4:cd:2a:f4:bc:a0:
         f7:b4:26:76:01:a2:99:cb:a8:5b:74:a5:71:2c:4e:35:e0:b8:
         53:b6:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org