Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e38302e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e38302e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          BW1k3sz94x8KrWOK6gj7OxNOTxp8vUB2xwvPqvQALyM=
Subject key identifier:   90:8E:2A:92:74:3C:A6:32:A6:99:A5:4F:23:07:7D:A5:DD:28:07:C7
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       7F27879420669AF941A2E498610FA8A20B6CCEB4
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e38302e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:39 +0000
ROA not before:           Tue 05 Mar 2024 17:51:39 +0000
ROA not after:            Tue 04 Mar 2025 17:56:39 +0000
asID:                     26619
IP address blocks:        179.50.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:87:94:20:66:9a:f9:41:a2:e4:98:61:0f:a8:a2:0b:6c:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:39 2024 GMT
            Not After : Mar  4 17:56:39 2025 GMT
        Subject: CN=908E2A92743CA632A699A54F23077DA5DD2807C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:76:3b:a8:ca:07:fc:b8:49:9e:c8:59:55:
                    f5:0c:56:a9:14:cb:3e:2e:2d:88:20:a4:77:3c:b1:
                    3f:7a:d0:95:00:ae:b5:76:0e:cc:ed:0a:94:89:cd:
                    90:44:df:34:04:11:f0:07:4c:95:e9:36:ed:a1:84:
                    e4:e3:6c:d0:80:c9:8d:fd:ce:2a:11:24:1d:a6:32:
                    ac:80:04:e3:1e:23:cc:57:c6:34:9d:8e:90:07:00:
                    d2:86:dd:9d:cc:bf:d4:9e:39:a2:5c:76:9e:fe:d1:
                    f8:30:b1:28:03:3d:0b:b7:88:0e:1b:d5:71:02:30:
                    91:4f:34:3a:d7:82:c8:90:f8:6f:94:36:00:03:57:
                    d8:a5:92:e3:cc:a4:12:80:51:4f:b4:b5:71:62:22:
                    d1:c1:21:a9:50:23:ed:7f:d8:9b:13:e1:c8:f8:3c:
                    e8:bc:18:00:27:30:42:63:9d:d2:ac:76:01:b9:4a:
                    58:42:76:8c:69:b7:01:a5:c7:ee:c3:00:45:18:31:
                    d8:8e:c4:c2:15:79:d9:2b:bc:b1:c8:d2:00:88:80:
                    79:09:4c:b0:1d:28:f3:37:c7:99:20:12:11:90:d8:
                    ed:f7:cf:4e:fc:8a:63:fe:f3:f8:ea:72:06:d3:81:
                    a2:40:5f:b1:59:0c:a6:41:bd:71:b8:d1:98:1b:2e:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8E:2A:92:74:3C:A6:32:A6:99:A5:4F:23:07:7D:A5:DD:28:07:C7
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e38302e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:85:ce:31:bc:2a:16:a9:99:0b:45:06:d3:8e:b6:fd:65:
         be:b8:44:d7:98:61:f7:cb:65:40:ee:aa:d9:05:01:80:ba:b1:
         53:e4:4b:a4:f8:89:b5:3d:a8:c7:44:64:53:88:7f:5a:4f:ff:
         04:50:27:82:eb:25:db:5d:7c:89:7f:a0:b1:0b:36:51:7f:76:
         87:fe:59:b3:f2:56:35:25:fb:6c:59:06:dc:a5:07:4e:f4:bc:
         b7:ba:91:85:ac:1c:ed:48:ff:05:23:50:be:e8:d8:57:52:5a:
         67:b6:0f:f0:b0:0a:1e:98:df:1f:86:06:0c:17:25:98:82:96:
         76:f2:7c:2c:3f:26:a7:f9:c0:00:0d:74:8a:18:82:53:01:89:
         33:f9:6a:8b:6a:52:e5:12:8a:25:b5:fc:73:f5:e8:0a:c3:4c:
         c2:d2:b0:dd:81:cc:66:d6:b2:af:db:52:4f:4d:ca:8b:ae:a6:
         9b:a8:80:35:9d:7d:0f:49:82:06:66:c2:17:b6:14:d6:22:5f:
         0b:1d:72:e0:5c:a3:ff:ec:2c:1c:0d:f3:85:30:a1:a0:ea:16:
         67:44:db:67:2f:8b:4d:c1:d7:54:2f:da:c4:a4:37:f7:1d:42:
         8c:6d:45:5f:b1:75:11:4e:8f:b9:3b:e5:c7:56:e6:14:38:07:
         25:a7:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:48:52 2024 by rpki-client on console-fra.rpki-client.org