Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3130342e302f32312d3231203d3e203236363139.roa
File:                     3137392e35302e3130342e302f32312d3231203d3e203236363139.roa (raw, json)
Hash identifier:          cyQ2l6caNXDeMKoX6da1kIDNUbpjOiM/cm3VgHmdBn0=
Subject key identifier:   37:4B:F9:67:BF:12:4F:C3:0B:7F:30:CD:5D:3D:DF:B7:66:54:2A:06
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       50B1FF744B90B3C050569EA807F4CC3E2B54F5AC
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3130342e302f32312d3231203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:38 +0000
ROA not before:           Tue 05 Mar 2024 17:51:38 +0000
ROA not after:            Tue 04 Mar 2025 17:56:38 +0000
asID:                     26619
IP address blocks:        179.50.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:ff:74:4b:90:b3:c0:50:56:9e:a8:07:f4:cc:3e:2b:54:f5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:38 2024 GMT
            Not After : Mar  4 17:56:38 2025 GMT
        Subject: CN=374BF967BF124FC30B7F30CD5D3DDFB766542A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:04:8a:48:01:1d:99:89:d7:fe:89:dc:c6:
                    ae:ff:3c:20:a1:0b:4f:b4:53:5f:cd:f1:fb:8c:6b:
                    3b:1e:f8:3e:d8:70:c8:ba:20:ae:03:34:6f:ef:71:
                    ce:09:e3:29:26:ed:5e:4c:3c:b0:f8:7a:44:b6:23:
                    fc:ee:70:e6:97:9b:a6:b8:2b:84:c1:fe:22:4f:39:
                    82:91:37:34:f4:fa:32:bb:ad:78:78:72:29:7e:19:
                    4e:7f:f6:58:8c:74:a1:a3:bd:53:77:61:ed:6a:c0:
                    17:de:6f:9c:b1:25:ee:eb:e1:6e:aa:28:e6:7f:6a:
                    bd:12:38:e8:48:8c:7e:82:2d:d8:98:49:3e:dc:da:
                    59:15:f7:fa:09:91:55:11:60:63:93:84:a9:92:14:
                    67:66:ba:6e:1f:58:87:2f:17:4c:3b:15:1f:b2:e6:
                    dd:9c:3a:ce:d6:d1:8e:b0:34:fb:99:09:51:12:39:
                    40:0c:43:0f:b1:06:94:b7:93:b5:f3:56:69:d0:11:
                    17:d3:20:ee:63:b0:7a:7d:cc:99:83:a2:01:22:b1:
                    b5:de:f4:8d:d1:86:f7:88:a5:77:c4:3e:68:7c:3d:
                    5c:93:f6:32:bd:0a:23:9d:77:50:ab:b6:3a:bc:8a:
                    75:66:dc:6f:ff:8a:22:9f:a6:78:57:b1:14:34:85:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:F9:67:BF:12:4F:C3:0B:7F:30:CD:5D:3D:DF:B7:66:54:2A:06
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3130342e302f32312d3231203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:e3:2b:cd:e6:17:92:80:4a:bb:ae:16:d8:bf:3c:18:2a:
         ad:06:cf:dd:bf:92:e9:a1:2f:3c:79:8e:90:aa:ba:30:8a:22:
         c2:a8:60:9c:e9:10:4b:17:c2:c5:89:b6:16:72:4d:9d:fd:75:
         60:c6:26:f9:30:d7:99:47:97:7c:35:88:bb:a1:ab:9c:8f:cc:
         ab:5a:a6:98:f6:be:57:7f:34:d3:ea:0e:41:7d:17:55:d3:25:
         d2:52:61:6f:65:e0:f4:ed:5a:ef:28:ae:e7:0a:60:e4:a0:1c:
         22:f6:6d:3a:8b:52:df:63:1b:4c:70:46:c0:b7:1e:7a:ee:97:
         0f:51:bd:da:a6:3d:98:fb:66:5f:fc:12:de:0c:5c:7c:ee:05:
         a5:07:dc:d2:af:49:2c:a9:7f:ae:cb:33:ca:09:c4:f9:f2:b7:
         79:0e:e6:3f:23:71:95:05:56:d2:c9:97:a4:43:36:ac:33:94:
         04:9f:d4:63:02:e1:75:a6:b3:6b:e4:9f:9b:d3:66:83:78:b0:
         7a:31:39:98:ec:90:8d:b2:9f:00:6b:84:05:4d:98:13:98:07:
         96:f0:64:7a:58:ad:21:49:ff:9b:67:ca:0e:b3:90:79:67:64:
         17:cf:cd:19:ac:ae:20:38:cb:78:62:2a:46:af:83:f8:3d:20:
         23:51:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:48:52 2024 by rpki-client on console-fra.rpki-client.org