Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3137203d3e203236363139.roa
File:                     3137392e35302e302e302f31372d3137203d3e203236363139.roa (raw, json)
Hash identifier:          Kaujnqy6I8fgzjUwMxMUUShexswrqoWDUD2fcfyjoWc=
Subject key identifier:   16:C3:8B:F8:DD:AD:1B:FE:C5:0D:15:12:8D:21:A4:C8:67:03:9D:31
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       769793B936A1A3571497A593665DC4FB4D8CA58D
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3137203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:38 +0000
ROA not before:           Tue 05 Mar 2024 17:51:38 +0000
ROA not after:            Tue 04 Mar 2025 17:56:38 +0000
asID:                     26619
IP address blocks:        179.50.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:97:93:b9:36:a1:a3:57:14:97:a5:93:66:5d:c4:fb:4d:8c:a5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:38 2024 GMT
            Not After : Mar  4 17:56:38 2025 GMT
        Subject: CN=16C38BF8DDAD1BFEC50D15128D21A4C867039D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:cb:63:fe:04:31:68:a9:9e:86:b1:8e:bc:
                    4b:2a:bc:56:c0:82:53:9c:c7:cc:f9:95:47:e4:f2:
                    90:b2:57:54:67:eb:96:b7:c6:eb:13:e8:4e:5f:21:
                    d1:16:5e:31:aa:f4:e7:c9:86:7b:b8:a2:5a:ad:71:
                    6d:07:cc:93:35:e9:e5:7d:f7:6f:ff:79:0e:96:a8:
                    20:b4:cf:9f:aa:5f:9a:ae:61:ec:4a:f0:60:47:81:
                    81:d4:33:b3:a9:f9:c0:8a:3a:93:00:da:82:aa:78:
                    ac:fc:93:bd:dc:b0:5c:23:03:43:f4:7a:1b:cb:21:
                    9b:b2:99:30:d6:1f:f0:48:91:62:39:7b:7b:86:8e:
                    8a:64:f5:10:35:8a:c5:11:8b:eb:79:a5:40:81:b7:
                    0b:db:8f:cc:46:1e:af:26:bd:ef:5f:c1:99:01:e5:
                    11:5b:e7:72:82:f8:59:8b:2f:02:47:15:a8:9e:c6:
                    84:15:de:f2:37:50:06:59:de:21:9e:12:31:00:72:
                    fe:6d:59:1f:83:48:a9:c5:9c:6f:65:1b:c1:17:77:
                    78:b2:77:c7:72:06:9f:c7:a9:e9:f6:44:8b:5c:a2:
                    18:7e:71:93:25:fd:e3:23:6d:6c:05:af:e5:42:50:
                    41:58:ed:c2:b9:2c:e3:bd:b8:fd:5c:18:51:f0:1f:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C3:8B:F8:DD:AD:1B:FE:C5:0D:15:12:8D:21:A4:C8:67:03:9D:31
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f31372d3137203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         99:95:8e:fa:d8:cb:b4:00:0c:f6:87:c5:b3:4c:f0:5a:b1:8a:
         63:10:f0:54:30:65:0d:c7:13:9f:70:7a:99:60:78:f7:cb:25:
         5a:e1:79:a9:e5:d8:5b:29:85:45:ca:7b:cf:4a:88:74:69:ba:
         92:5c:11:05:56:43:26:4e:e6:c1:94:1a:94:2a:70:15:9c:18:
         be:21:a9:10:84:02:ef:94:e8:60:a7:55:e1:2a:8f:bc:e3:0d:
         47:68:8f:6f:51:96:b4:c3:9d:e9:67:18:c5:0b:93:0d:16:4d:
         fd:77:4e:c7:97:8a:94:b3:0c:a2:cb:39:93:9b:57:fd:4b:d2:
         7f:d2:9b:d0:4d:f8:f5:7d:42:2e:cc:fc:b4:dd:ae:7b:b7:36:
         a4:73:db:ad:66:fd:b6:83:45:fc:da:91:1b:70:88:b7:bf:89:
         9a:af:2f:80:9a:d1:ee:32:bf:53:e3:de:40:c9:bb:6a:44:4a:
         05:3f:f2:b0:08:80:7e:71:af:d3:1c:fd:c0:c1:f2:72:cb:72:
         c2:0b:83:22:4c:42:2d:0e:9d:dc:5d:f0:9b:45:03:b5:4f:5c:
         e0:fb:62:2b:21:3c:6d:6d:81:37:7d:2f:d8:18:43:a8:3b:fb:
         d5:d6:4a:fd:25:86:bd:2a:5f:87:e9:e8:2b:bc:90:f0:4e:e8:
         52:99:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:48:52 2024 by rpki-client on console-fra.rpki-client.org