Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/64e10e3ff9147b47ec1b97afb03dfba05383f996.roa
File:                     64e10e3ff9147b47ec1b97afb03dfba05383f996.roa (raw, json)
Hash identifier:          N+OIug5mddFAprpGt/COQmIIaGnKi8cYii/r2qS+l0U=
Subject key identifier:   F5:8E:A9:E3:A9:D8:26:A1:16:F5:98:2B:95:C8:F9:7A:95:0A:95:26
Certificate issuer:       /CN=b937c1111990e7b39c1f43b075333acd225a29b1
Certificate serial:       1489FD
Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/64e10e3ff9147b47ec1b97afb03dfba05383f996.roa
Signing time:             Mon 17 Jan 2022 19:16:59 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     28103
IP address blocks:        179.189.218.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346045 (0x1489fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=64e10e3ff9147b47ec1b97afb03dfba05383f996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:16:7b:2e:1d:c6:8a:27:b8:d2:86:3b:ee:
                    0f:dd:a4:9c:9b:b5:7b:9f:28:f1:6a:10:cb:55:45:
                    05:13:aa:a4:d2:4e:15:55:51:d5:9e:24:e8:0a:ea:
                    88:d1:b0:7b:de:1b:ee:ec:10:8c:71:d5:72:4d:07:
                    2c:02:50:d5:90:50:fa:44:e3:00:92:f4:b5:94:f1:
                    5c:9a:5a:79:5d:32:09:67:18:11:5c:97:bc:c7:25:
                    fe:12:05:c6:68:19:7a:8d:10:b7:a9:cf:75:58:21:
                    aa:2f:3c:31:b0:84:b2:28:67:66:76:05:fe:0d:22:
                    31:0d:78:94:4a:6e:56:75:e3:ff:a4:21:60:c9:ef:
                    40:d5:5f:1f:04:12:02:ad:5a:d6:ca:da:68:bb:cc:
                    92:84:b5:7e:26:c2:b0:f3:3f:ab:8e:ee:12:77:6f:
                    0b:6b:b9:54:0b:45:e3:23:97:89:be:a2:96:16:39:
                    c9:c8:d2:01:58:e0:9e:dc:0f:4b:c7:73:e5:25:e4:
                    56:e7:d0:ec:69:44:5f:b7:dc:8b:79:dd:15:6f:d9:
                    d7:00:fb:92:ea:6d:02:7a:59:7a:f0:a1:fe:e3:4f:
                    be:8c:2e:05:95:21:74:8d:f1:2e:49:64:70:64:92:
                    d0:19:cb:db:1e:90:7b:08:a1:16:96:8b:0b:b4:93:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8E:A9:E3:A9:D8:26:A1:16:F5:98:2B:95:C8:F9:7A:95:0A:95:26
            X509v3 Authority Key Identifier:
                keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/64e10e3ff9147b47ec1b97afb03dfba05383f996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:ed:8a:b2:7b:00:1d:59:6d:d5:d2:b5:57:da:25:76:3c:
         9e:bf:51:ad:dc:13:05:84:ed:00:ca:41:37:d2:42:c5:dd:87:
         bb:af:48:34:7a:05:0a:98:79:86:76:83:95:43:bc:e8:19:ab:
         99:11:f7:ef:95:8d:71:02:5d:88:69:ef:43:5a:c5:6a:e0:2a:
         1e:5b:4d:93:d4:71:6d:29:5b:89:f8:09:12:b5:aa:15:4f:89:
         62:45:4d:f1:85:a3:b6:25:cc:b5:f1:a9:5c:38:5b:e0:7e:dc:
         29:79:16:80:d3:04:a9:20:c4:97:a2:50:ab:a1:79:4d:0b:0a:
         b7:42:6e:0e:80:07:61:13:72:e0:d1:3e:1e:c8:e6:59:55:ae:
         10:84:dd:73:a8:97:9c:2d:e2:af:4c:af:42:30:0e:de:85:4b:
         09:00:dd:53:42:70:2f:63:55:05:3b:08:54:c4:f0:38:24:a8:
         61:29:4c:d8:d2:4e:fd:5a:51:48:df:88:21:18:d6:75:86:21:
         30:91:56:7d:d3:1e:e8:83:5e:c2:b3:d7:75:8a:e8:09:10:6d:
         56:3b:45:81:b2:3a:1e:a8:9e:ba:df:87:98:2f:d1:82:21:45:
         84:44:25:7f:97:94:fd:cc:9f:dd:5a:6c:e8:68:31:3c:b4:6e:
         2f:74:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org