Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/a79fa15a8e3846bf49cdf781880525937dcffa87.roa
File:                     a79fa15a8e3846bf49cdf781880525937dcffa87.roa (raw, json)
Hash identifier:          3iuLz9gyvetW7toQ2NaemJjBcDhHrvz6HCnCojFCI20=
Subject key identifier:   57:A4:B3:5D:39:E5:D7:AE:A5:EB:28:52:DC:02:77:03:9D:6B:CD:58
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       139660
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/a79fa15a8e3846bf49cdf781880525937dcffa87.roa
Signing time:             Fri 12 Nov 2021 12:36:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52468
IP address blocks:        186.179.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283680 (0x139660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a79fa15a8e3846bf49cdf781880525937dcffa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:8c:ab:00:36:ae:5e:f9:87:8c:b4:c8:51:
                    fa:f4:66:56:db:a5:3f:18:4c:26:0c:36:19:b5:21:
                    71:ec:c3:59:9e:22:e1:4f:f2:84:45:c7:50:ad:eb:
                    b3:fc:14:4c:e1:92:0d:51:b8:67:9b:f8:0f:51:2a:
                    d0:ea:05:07:cd:da:12:94:0f:32:e0:7a:34:f2:ac:
                    f9:e9:d4:19:23:e7:0d:14:bb:00:af:5e:3a:59:3c:
                    db:84:54:ab:f2:ee:55:e1:ed:8c:4b:bf:8d:42:02:
                    08:1a:cb:11:75:bc:be:40:2b:53:f7:d4:a8:7b:40:
                    db:10:78:05:33:2c:01:10:6f:57:e7:8a:d7:52:8d:
                    b2:d2:5f:32:59:f6:e5:d7:8f:3a:48:75:14:57:5e:
                    7c:21:81:e8:33:89:7b:7f:ca:89:18:ae:8b:56:22:
                    6c:cf:c2:bb:73:c2:28:6c:79:1b:28:b6:1f:7e:eb:
                    ad:0e:97:d6:26:33:93:ef:7d:1c:9b:f5:aa:3c:43:
                    03:2c:70:13:30:a6:96:12:5c:8e:aa:a0:d8:da:68:
                    97:b7:f4:74:0a:f0:f9:36:02:d8:8b:d3:6b:c3:39:
                    b7:8b:e2:d6:69:b7:d9:96:94:83:2b:b3:b9:bc:e7:
                    9d:9d:c0:30:47:1e:ae:8e:c5:f0:e7:44:f1:20:15:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A4:B3:5D:39:E5:D7:AE:A5:EB:28:52:DC:02:77:03:9D:6B:CD:58
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/a79fa15a8e3846bf49cdf781880525937dcffa87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:36:11:70:d4:d6:8e:f4:26:73:03:5e:70:18:8d:3a:e1:
         d8:96:c7:6b:c1:1d:63:ee:84:bd:5c:71:21:d2:57:d3:62:c4:
         d2:ed:cc:2e:6b:43:f7:32:26:70:94:3d:76:09:ac:62:5e:86:
         76:e4:af:6f:7c:b3:f5:62:60:26:f5:bc:e9:c9:7f:95:65:b4:
         90:cb:a5:17:b1:8c:ef:22:54:59:17:6a:56:7f:34:61:19:00:
         c9:63:7e:f6:4a:88:06:1b:62:69:98:0c:42:85:e1:83:3a:61:
         d4:44:12:be:a4:e7:0e:6a:7a:7c:39:49:05:6e:87:38:af:10:
         15:87:df:9c:8e:ef:ef:bd:f2:9d:26:92:a9:f9:69:a5:41:3a:
         fa:93:bd:d8:a4:47:3b:9a:62:d0:20:cb:20:09:8c:33:bd:00:
         11:30:c9:25:63:6c:d3:46:80:e0:2d:6c:b2:1e:93:bc:15:1f:
         4e:b0:63:aa:22:80:e1:1f:34:45:be:54:3c:db:2a:a4:22:3f:
         83:c0:b7:5a:16:5d:95:4b:04:11:a3:15:3f:f7:d3:0d:97:4e:
         26:9b:be:10:62:68:6a:9e:2b:62:8a:16:a5:e1:fa:b0:21:9a:
         58:b7:6b:65:ff:a7:aa:48:8f:1e:6b:b8:58:d2:59:50:f9:68:
         61:74:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org