Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/277c906f02d76990476307e1d028b85a656112dc.roa
File:                     277c906f02d76990476307e1d028b85a656112dc.roa (raw, json)
Hash identifier:          fv2/tGcR1qhzY6Uhzt5Py1URvex8BWl34KEKjs4aSqg=
Subject key identifier:   78:A3:B2:33:47:4C:4D:F2:4E:B0:EC:4F:81:92:91:21:EA:97:B4:B8
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       11E646
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/277c906f02d76990476307e1d028b85a656112dc.roa
Signing time:             Fri 17 Sep 2021 22:00:56 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        177.234.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173062 (0x11e646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=277c906f02d76990476307e1d028b85a656112dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:08:d2:09:67:f7:91:26:fa:16:a6:2a:d6:
                    bb:26:64:8a:75:40:bc:5b:65:ba:49:7c:54:2d:4f:
                    a8:e4:3e:60:48:8e:52:d5:e9:e5:85:1d:fa:f4:6b:
                    28:0b:58:ed:c5:ef:37:9d:7e:8a:29:93:25:59:e6:
                    21:b9:bd:bc:ef:2a:df:c4:87:c8:92:56:c3:b9:1f:
                    a4:38:f6:b5:13:7b:c1:79:5e:6a:44:1e:74:41:22:
                    21:8e:e7:07:c7:1f:20:f4:39:08:ff:a3:bd:ef:af:
                    6b:cc:5b:00:d6:5e:79:6c:da:f7:54:24:4f:9f:7f:
                    a0:01:c7:ca:80:d4:7f:04:6e:cd:b4:1e:34:3a:1f:
                    25:0f:05:16:83:2c:d3:b8:70:ce:93:90:9e:f0:d5:
                    2f:49:c4:92:81:af:f0:a0:08:c3:93:8c:f4:80:ba:
                    ab:4f:2e:03:e8:b1:3c:72:5c:b8:bd:1f:30:9d:0e:
                    56:68:aa:fe:f5:85:1e:2a:1c:93:93:91:de:1f:af:
                    79:68:ed:c1:82:6b:ad:4d:0a:50:5f:78:da:49:80:
                    eb:9a:78:66:2f:7b:fa:85:fa:71:78:34:11:d6:9b:
                    5d:4f:f7:7b:cb:79:81:73:17:77:f3:1c:48:f7:bd:
                    e2:92:ab:8c:87:b4:ac:f1:8d:ea:a6:d0:a7:2c:34:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:B2:33:47:4C:4D:F2:4E:B0:EC:4F:81:92:91:21:EA:97:B4:B8
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/277c906f02d76990476307e1d028b85a656112dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:cd:55:df:0e:8b:f7:82:5a:3f:53:9f:c3:6b:5b:6b:c7:
         a1:ac:f5:13:80:b8:a2:6f:b5:48:ab:5d:c5:c7:32:01:b7:af:
         ae:d3:b7:a7:9d:a0:b1:2b:c1:65:26:d7:51:f6:54:ba:c0:68:
         0b:00:bc:a7:c4:dc:86:07:72:7a:70:cc:41:eb:e3:a8:89:f0:
         0f:58:b2:48:bc:2c:d4:67:c0:2e:07:4e:d5:86:51:24:a1:88:
         4f:0e:87:45:06:74:66:d4:9e:63:e8:19:1b:ea:5e:91:c8:8d:
         f0:3f:2e:08:b6:36:8b:a9:55:d7:a7:e8:5b:e4:5b:c0:95:ba:
         a6:c1:d7:b4:df:e2:0f:1c:17:09:90:e4:a7:dd:c7:1a:e8:24:
         28:d7:98:f2:a0:75:d4:95:1a:81:c3:58:8d:c8:59:f9:df:be:
         a1:c0:1a:62:ab:33:49:86:88:34:21:c2:e8:3f:0a:27:2f:a5:
         a6:7d:21:45:f0:80:f9:e2:51:61:da:b3:0a:cf:39:40:15:c1:
         c2:c8:a5:6f:44:56:47:bb:51:09:ad:63:82:f4:ec:5b:5b:d2:
         53:af:f2:39:2d:64:ea:f2:47:44:10:69:ba:6a:b5:db:06:8d:
         12:79:84:d7:39:0e:2a:13:21:c0:8b:f8:ef:b1:b7:d5:72:76:
         b1:6c:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org