Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1626f99afc7c2af889c756a6d311cdd4c3fc26f7.roa
File:                     1626f99afc7c2af889c756a6d311cdd4c3fc26f7.roa (raw, json)
Hash identifier:          8lsIejZQER/ikF0Ze3f610HdJwPje7+7kePuMoai2gg=
Subject key identifier:   BD:AC:32:F1:3A:93:EB:1A:F5:18:20:B2:A7:6E:4A:DF:4D:DB:18:D4
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       292922
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1626f99afc7c2af889c756a6d311cdd4c3fc26f7.roa
Signing time:             Thu 28 Mar 2024 17:01:36 +0000
ROA not before:           Thu 28 Mar 2024 17:01:36 +0000
ROA not after:            Sat 28 Mar 2026 17:01:36 +0000
asID:                     273190
IP address blocks:        177.234.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697506 (0x292922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 28 17:01:36 2024 GMT
            Not After : Mar 28 17:01:36 2026 GMT
        Subject: CN=1626f99afc7c2af889c756a6d311cdd4c3fc26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:66:4c:22:7d:39:94:82:1e:c9:a4:20:ac:
                    8e:ef:de:d5:25:47:9e:a1:1e:55:06:41:fb:36:58:
                    89:5c:66:36:de:06:7e:e6:dc:ab:66:15:b2:3c:ea:
                    91:33:19:47:3d:0a:45:96:3e:ee:8a:14:52:87:f1:
                    94:5f:08:0e:1c:7e:2a:fa:f8:6f:65:ed:c2:d8:86:
                    36:b8:8e:93:ac:b6:89:92:68:a5:8b:43:f5:17:56:
                    28:c7:28:cf:f5:6f:81:07:f7:8f:f3:b3:78:81:f2:
                    b2:76:26:1f:85:b3:52:a6:ba:6d:ce:27:f1:b4:70:
                    1f:2e:bd:7c:72:3b:bf:10:3f:fc:53:95:ee:fc:c0:
                    19:84:61:8e:6b:f1:a8:5d:0b:46:a8:1c:67:83:85:
                    a0:1b:6a:70:61:be:33:c4:b5:d1:94:18:e1:93:65:
                    e7:b0:59:86:9e:1e:39:76:76:65:37:b7:5a:f9:c7:
                    40:db:23:ea:38:52:e4:e4:91:7e:c2:0d:16:c3:a1:
                    97:a7:77:91:48:f4:8f:ca:a2:9d:3e:97:ad:d1:95:
                    31:ab:48:46:85:8a:7d:9e:b2:c2:bd:62:fb:2f:12:
                    a4:34:0a:06:0a:6c:4e:82:1e:ae:4a:1f:7b:c3:ce:
                    7a:0b:a6:c0:70:46:33:f1:80:ec:9c:86:5f:a8:2f:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:32:F1:3A:93:EB:1A:F5:18:20:B2:A7:6E:4A:DF:4D:DB:18:D4
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1626f99afc7c2af889c756a6d311cdd4c3fc26f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:80:d1:72:65:9b:20:dd:11:88:1c:1e:f4:3a:f1:13:ff:
         38:95:76:ba:65:6d:5e:62:41:0b:5c:1f:12:b6:65:aa:27:63:
         98:3d:f1:11:2c:e4:22:54:df:a3:88:90:d7:7b:d3:88:e3:9e:
         3d:83:74:29:54:6b:eb:da:24:9b:b1:38:77:b8:91:d8:0c:32:
         df:ab:70:73:2f:92:3b:f5:00:14:b4:6c:75:eb:04:95:14:7f:
         d4:31:18:3f:0c:e8:76:4e:3f:52:ac:3a:a8:25:56:7f:b7:88:
         63:20:38:11:91:e4:a6:3f:96:10:bb:62:5e:38:77:f0:b7:35:
         b7:a9:19:2e:25:49:b2:bb:ba:43:81:27:9f:d8:cc:42:26:ac:
         2a:76:cf:73:45:6f:ce:67:02:01:59:42:68:f4:5c:1e:dd:ec:
         7b:72:10:84:09:22:a8:ae:0b:d9:a4:d6:97:e3:f2:ef:b8:44:
         8f:50:f2:69:04:79:c6:9f:86:b5:76:99:3a:d7:21:eb:a2:82:
         87:25:4c:2f:ed:71:a7:13:bc:9e:71:8d:2d:45:86:c6:b6:d7:
         cf:15:37:7a:06:2c:01:c1:ad:0c:38:8a:25:db:b6:ff:94:19:
         f8:41:62:6c:d4:ce:5a:3d:ff:36:c9:07:20:a4:26:29:45:8e:
         b0:d9:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org