Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa
File:                     66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa (raw, json)
Hash identifier:          3uKHe1XlnyHGHkriJVWmU/kZySFHmiwzBeme54bLE4I=
Subject key identifier:   BD:69:42:76:0F:F9:69:16:2F:76:E7:FB:D1:C9:4E:5E:82:B4:86:60
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       21115D
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa
Signing time:             Wed 03 May 2023 18:31:37 +0000
ROA not before:           Tue 02 May 2023 18:31:36 +0000
ROA not after:            Sat 03 May 2025 18:31:36 +0000
asID:                     52468
IP address blocks:        177.234.214.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167133 (0x21115d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May  2 18:31:36 2023 GMT
            Not After : May  3 18:31:36 2025 GMT
        Subject: CN=66fdc177fd3a04658bf8b38f7534d3cf524470f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:2e:70:16:83:fb:ac:a1:ec:42:64:37:dd:
                    17:e4:34:f6:d5:81:ce:a3:97:c3:c5:ac:3e:58:23:
                    b6:fa:5c:c9:70:4b:9d:99:34:57:54:44:46:35:f4:
                    9d:c5:95:3d:bb:50:c2:3c:ad:44:2c:3a:4b:e1:48:
                    9f:24:df:66:f3:55:40:6f:d3:16:86:ec:a8:39:d4:
                    23:14:a1:13:f8:5c:bd:be:37:66:c0:19:8a:fa:5a:
                    c2:06:80:a1:f7:47:6c:ee:a4:80:0f:ee:7d:67:dd:
                    49:17:94:47:88:34:0a:ef:1c:7d:75:63:80:4c:d7:
                    be:14:ed:e6:4d:3f:d1:b1:59:ba:46:65:7a:50:18:
                    33:95:7f:2b:6d:ed:a5:35:01:32:b9:e1:42:09:9d:
                    46:0e:73:31:31:63:b9:d6:f7:43:25:f7:a7:89:d4:
                    de:12:a8:e3:6e:90:60:ee:3b:82:3b:54:51:0c:4e:
                    1b:cb:40:eb:02:62:bc:ff:ab:62:61:44:c6:b1:d8:
                    e1:ba:35:47:63:51:f3:c1:71:04:24:e2:2a:5e:83:
                    03:a5:b5:30:e5:08:91:d9:ec:95:fd:47:94:c5:28:
                    e3:e7:40:ba:dc:a5:ab:41:d6:0b:60:36:48:91:55:
                    f7:ab:d1:a5:79:f0:6e:e3:8a:70:33:29:09:fd:95:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:69:42:76:0F:F9:69:16:2F:76:E7:FB:D1:C9:4E:5E:82:B4:86:60
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:d7:6f:a0:59:7a:df:16:dc:30:6c:c5:22:32:94:f5:65:
         74:8b:14:97:c0:77:4f:69:00:56:1b:62:9c:00:8c:a3:17:0d:
         45:5e:05:85:dc:d4:69:5b:66:17:ef:3b:47:29:fb:ef:3e:14:
         29:34:21:b6:bf:de:cd:6b:e7:ff:22:b1:66:3f:39:38:8c:a7:
         34:34:5e:40:2e:d0:90:a8:3e:63:4e:bd:e3:e7:4a:61:2f:ce:
         88:73:cc:18:b5:cb:c9:5c:b2:e3:5f:4b:ab:fb:4d:9a:18:ad:
         4d:7c:ee:53:99:a2:41:30:84:47:95:64:c4:2f:7f:68:88:f6:
         c5:31:97:1b:b6:17:ed:78:16:94:e4:b7:61:89:c6:93:8c:1c:
         03:be:4e:df:87:fd:10:42:6e:c2:90:9b:15:c1:0f:5c:07:2a:
         20:a5:4b:cd:18:0e:0d:ee:2e:23:c7:c2:df:51:8a:bd:50:c3:
         8c:35:ea:6b:6c:d6:fd:93:03:84:19:cb:dc:4a:3e:2b:ea:c1:
         97:fe:b2:89:5e:65:92:0c:eb:6c:12:a6:b5:2d:19:c6:51:35:
         9e:23:a0:76:d0:61:ab:4b:42:aa:50:2e:9b:08:11:e2:bc:1a:
         ce:76:57:4a:07:b2:20:6b:2b:c7:1f:55:c3:39:98:95:27:8d:
         f4:c9:46:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org