Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e31312e302f32342d3234203d3e203236363139.roa
File:                     3137392e35302e31312e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          uzgCp7vjYj2fNZepFwgV7gSRPbgdnsn0NHeDncjWFsY=
Subject key identifier:   63:5F:BB:91:74:17:AA:AA:D1:9B:64:5E:36:08:BE:F5:91:1E:49:CE
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       35487481CB3AD03FD3C293CA922609E539DD50AC
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e31312e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:37 +0000
ROA not before:           Tue 05 Mar 2024 17:51:37 +0000
ROA not after:            Tue 04 Mar 2025 17:56:37 +0000
asID:                     26619
IP address blocks:        179.50.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:48:74:81:cb:3a:d0:3f:d3:c2:93:ca:92:26:09:e5:39:dd:50:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:37 2024 GMT
            Not After : Mar  4 17:56:37 2025 GMT
        Subject: CN=635FBB917417AAAAD19B645E3608BEF5911E49CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:ac:1a:05:73:38:b1:27:dc:ed:15:8a:2d:
                    98:00:e7:4a:44:5c:db:b5:70:17:77:e2:28:82:3c:
                    92:56:b9:3a:89:24:a2:66:24:f6:a6:22:88:60:73:
                    cf:a4:fc:28:c9:e9:61:bf:ac:df:5e:36:2e:37:9f:
                    f3:e3:d9:15:f6:db:b9:f2:14:a2:41:dd:fd:1b:f6:
                    36:fc:18:8d:65:1d:01:8e:9b:ba:79:6b:7c:55:e7:
                    d6:24:9b:12:32:93:6d:e0:fc:f5:e6:5c:19:3f:3d:
                    93:c6:76:62:72:00:cd:12:17:a1:3c:11:14:50:78:
                    33:28:af:52:45:ad:e6:2f:57:0f:5b:c5:e4:30:98:
                    c2:cd:a3:d1:48:38:03:c2:2f:21:4c:50:6e:22:b9:
                    c6:d1:ab:ef:c0:f4:59:d4:0b:1a:e9:70:fb:a7:61:
                    45:d1:7e:14:26:c4:ad:4f:e9:ec:40:84:c1:bf:19:
                    14:40:64:25:b8:02:f9:f0:16:32:16:2d:98:f7:3d:
                    c4:45:22:a1:62:e3:d4:1e:c1:4e:07:48:ac:e3:99:
                    88:ad:cb:e0:bd:d0:c8:9c:5b:50:3c:f9:1c:a7:bf:
                    61:d3:9b:fb:2e:d6:fb:9f:db:5f:ed:5c:bd:fb:28:
                    05:1e:04:b8:bc:7f:92:92:35:34:47:36:6f:b7:7d:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:BB:91:74:17:AA:AA:D1:9B:64:5E:36:08:BE:F5:91:1E:49:CE
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e31312e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:db:9f:5d:31:b7:5a:fb:2b:b4:3e:c9:6d:00:73:ee:a6:
         f8:1a:a5:09:0f:85:93:62:aa:e5:a6:e7:c7:07:5d:57:5b:d4:
         37:cb:a2:a4:75:af:f5:bf:bd:61:af:8a:29:91:f5:9f:74:27:
         e9:b0:06:d7:e6:8f:0f:75:36:99:30:fb:3f:74:9d:37:a7:ca:
         e1:68:df:92:94:06:99:4c:25:8b:a9:b9:c2:9d:f0:7e:8b:00:
         ba:b8:66:f9:95:cd:ae:39:69:c7:54:60:74:88:b0:12:9b:50:
         dd:6b:9b:37:a7:90:77:4d:10:ec:80:7a:34:22:a4:e2:81:40:
         9f:49:b0:24:86:0d:9d:4b:d7:d0:79:1a:9c:46:36:e4:83:96:
         cf:fa:0a:c4:06:b5:00:e4:d8:1a:1a:71:d6:3a:8a:ba:58:f3:
         c3:f2:04:5c:13:2a:12:5d:40:32:08:d6:59:84:69:b0:bc:71:
         20:9c:45:41:67:55:97:c8:e5:9e:ac:d3:04:ab:95:7e:87:69:
         b7:84:f7:18:df:11:5b:bc:46:5a:61:32:f6:ba:37:d1:56:94:
         b0:ee:f0:33:ba:56:75:ca:30:06:18:ae:95:c9:10:29:20:e7:
         7d:f3:17:8f:23:ed:d5:dd:92:b2:c7:fb:22:66:f3:f0:09:be:
         87:e7:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:48:52 2024 by rpki-client on console-fra.rpki-client.org