Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/a04d4f9e1dce622c54fce6ed7afa1972df4d3ff5.roa
File:                     a04d4f9e1dce622c54fce6ed7afa1972df4d3ff5.roa (raw, json)
Hash identifier:          fQG/s0Ays04i7/1nF761p7GfMq29UPSJ7BtiBp/0mf4=
Subject key identifier:   6B:A8:3D:81:80:BB:53:12:8D:F1:C5:16:80:C9:AB:1E:00:01:9F:66
Certificate issuer:       /CN=d1f68c0822487fbab8a2d6ad5ca533d77d11829a
Certificate serial:       053E7F
Authority key identifier: 9D:CA:F9:9D:C1:21:32:7C:10:97:00:8F:56:FF:34:56:D8:37:B8:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/a04d4f9e1dce622c54fce6ed7afa1972df4d3ff5.roa
Signing time:             Mon 25 Sep 2023 16:03:06 +0000
ROA not before:           Sun 24 Sep 2023 16:03:06 +0000
ROA not after:            Thu 25 Sep 2025 16:03:06 +0000
asID:                     272975
IP address blocks:        179.42.76.0/24 maxlen: 24
                          179.42.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343679 (0x53e7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f68c0822487fbab8a2d6ad5ca533d77d11829a
        Validity
            Not Before: Sep 24 16:03:06 2023 GMT
            Not After : Sep 25 16:03:06 2025 GMT
        Subject: CN=a04d4f9e1dce622c54fce6ed7afa1972df4d3ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:ad:cb:cc:c2:68:9a:73:80:7f:6a:dd:83:
                    83:60:20:93:1c:10:4c:b1:80:5a:d5:f2:47:b4:e1:
                    a6:51:f1:65:28:a8:16:ba:d2:07:17:5d:52:2b:e7:
                    ea:4b:5a:18:ce:cf:54:8a:08:ef:cb:99:70:a3:00:
                    5a:7d:b0:48:ff:ee:fc:f3:4b:32:6b:ae:92:e8:f1:
                    ee:0c:c0:3d:62:ff:d6:6d:69:53:88:bf:85:e0:28:
                    e1:d2:ad:49:a9:e9:f8:85:31:50:7f:29:61:9d:d7:
                    da:4c:53:26:64:53:d7:bf:f9:d2:82:69:64:9a:63:
                    14:15:da:ed:38:8e:4a:a7:44:67:76:ae:c2:89:42:
                    10:49:dd:6b:8a:3e:9e:74:00:85:b0:10:c1:b9:56:
                    fd:c5:22:c1:58:56:c7:42:e1:54:57:e1:7c:3d:0f:
                    2f:bf:6b:8c:ce:5c:a6:4b:40:fc:fa:0a:84:7e:8e:
                    a1:9a:9f:57:c0:d3:64:cf:e9:ff:e4:72:32:b0:25:
                    11:64:b1:48:28:f7:3d:0b:b6:8e:fa:b6:ca:f5:ed:
                    2e:09:c0:04:51:f4:f0:1b:e8:03:fe:13:4e:f8:09:
                    fb:22:bd:3e:ff:e9:c9:97:f2:2e:26:85:6f:2e:24:
                    fa:80:c6:03:72:94:28:01:82:fe:6c:cc:eb:61:d2:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:3D:81:80:BB:53:12:8D:F1:C5:16:80:C9:AB:1E:00:01:9F:66
            X509v3 Authority Key Identifier:
                keyid:9D:CA:F9:9D:C1:21:32:7C:10:97:00:8F:56:FF:34:56:D8:37:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/a04d4f9e1dce622c54fce6ed7afa1972df4d3ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0fe8909-df1e-4cc2-a2da-0230194f115c/d1f68c0822487fbab8a2d6ad5ca533d77d11829a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:cc:8e:37:3b:d3:ea:0b:81:23:31:d7:4f:13:dc:a3:70:
         9d:cb:77:94:a8:ab:d1:e9:f1:60:0e:42:47:de:31:0c:86:f9:
         46:c4:5e:de:02:2a:c6:2c:5b:74:dd:f1:a5:92:58:14:d5:19:
         fd:bd:90:2c:f7:ef:8d:e5:a8:99:b6:2a:27:a3:87:a6:3e:f0:
         f7:69:30:63:e9:e4:57:48:73:80:94:b4:8e:16:f3:f0:42:1d:
         b1:4f:a1:d7:b8:e2:64:66:9d:7a:5c:64:c5:49:04:60:52:84:
         71:59:68:6f:70:b9:30:db:e0:ba:57:4c:9a:45:fd:ae:45:13:
         07:ef:f5:7e:e7:4d:7a:8b:6b:03:f9:82:73:d6:2a:91:36:25:
         d0:7a:10:7b:2b:18:b3:d9:eb:07:b2:02:d1:c8:28:c2:da:af:
         cf:96:50:e1:de:9b:79:df:6c:8b:b5:f3:c3:89:84:3e:16:1c:
         b1:57:fe:92:f7:6a:1a:b9:94:a7:7e:8a:1c:9b:c2:21:9f:15:
         ba:41:9a:a1:aa:1d:87:9f:02:d4:e8:26:9b:42:f4:aa:5e:95:
         6a:d8:18:95:15:1b:16:8d:b9:42:0e:df:3c:e8:c9:ee:75:40:
         99:ab:c3:11:66:9e:bb:1e:63:eb:24:a6:6c:99:9d:77:d1:ae:
         1d:67:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org