Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa
File:                     bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa (raw, json)
Hash identifier:          Yu+eRLfmRZz9OSQiYN4rU1b6k7yQ54Cl2SrBJekU5Mk=
Subject key identifier:   F7:C8:FD:C1:3E:E2:49:FA:27:17:82:F6:0A:23:B5:04:5E:36:B5:78
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       21CEA8
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa
Signing time:             Mon 29 May 2023 22:22:18 +0000
ROA not before:           Sun 28 May 2023 22:22:18 +0000
ROA not after:            Thu 29 May 2025 22:22:18 +0000
asID:                     272954
IP address blocks:        177.234.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215592 (0x21cea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May 28 22:22:18 2023 GMT
            Not After : May 29 22:22:18 2025 GMT
        Subject: CN=bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:66:ce:52:8b:7f:3f:ec:b2:5e:a6:70:26:
                    20:1a:e8:2d:00:0a:27:6d:66:7f:1b:31:a3:8b:31:
                    74:79:18:cf:60:df:3b:af:2b:9b:70:62:f3:8a:bc:
                    9d:a4:bb:7a:30:8e:40:45:f0:17:cb:41:88:f7:26:
                    92:ac:7b:26:10:d4:79:91:01:e0:a5:55:7f:4d:2e:
                    0e:2f:43:68:0e:25:54:0b:43:68:70:0d:37:22:ac:
                    91:5d:75:d3:8c:76:93:ff:ec:e2:01:97:5f:12:91:
                    87:aa:57:90:29:82:0c:a5:bb:63:15:9f:12:42:f9:
                    e7:86:33:2f:1a:9f:1c:f3:f4:92:05:67:5a:04:67:
                    dc:36:01:0a:0f:7f:0e:86:d4:b7:0d:0e:44:4c:69:
                    62:b1:f1:06:3c:18:13:b5:91:65:85:a5:a6:fc:f7:
                    f7:c3:19:9d:9a:44:54:d3:2a:14:0b:86:f9:c0:1c:
                    5a:b4:85:4d:b3:62:16:68:67:6d:b2:2d:7d:53:8d:
                    ad:6f:f5:55:c7:fd:1b:dc:27:04:67:15:f0:11:05:
                    c5:ba:e6:a3:eb:93:fa:d8:34:ee:e5:4b:31:69:e0:
                    2f:bb:2a:f7:79:36:00:25:ad:94:28:f3:03:6a:bc:
                    40:2c:60:09:f6:f8:4a:81:b2:c7:46:78:cd:98:be:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C8:FD:C1:3E:E2:49:FA:27:17:82:F6:0A:23:B5:04:5E:36:B5:78
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/bf17e1d381aad71c9d7eadb1e8a0b2af8e9a6158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:00:2c:e1:3b:f9:fa:03:6c:6d:3f:8d:99:8e:6e:3f:1a:
         d6:41:24:2c:72:a2:56:47:e3:a2:b7:4a:d7:4a:70:09:df:c8:
         4c:20:ad:b3:92:00:10:be:e2:ea:a0:84:df:31:cd:9b:1a:2f:
         01:8f:d5:92:31:cf:5b:5d:57:2d:82:8e:47:f9:e5:05:bd:24:
         e4:92:46:2e:8f:35:e5:00:98:93:2f:56:4d:9a:2e:1f:7a:80:
         40:22:fe:b9:b1:c7:2f:f4:0b:7b:f9:d2:35:af:e3:fc:ad:0c:
         75:f2:a2:2a:5f:74:c1:7d:34:07:1a:98:80:9b:fb:ff:ff:9d:
         19:e0:c4:19:bd:18:3a:71:04:be:f0:65:8a:bf:e2:8f:f4:04:
         a6:54:8d:de:a6:99:fb:8c:5c:e0:63:96:65:ec:1a:14:cb:d8:
         08:ed:bc:0e:15:c7:5f:c0:73:f9:3e:6b:4c:24:c4:48:ad:1b:
         80:ba:62:1f:5b:b9:79:f4:75:b9:eb:c1:0b:66:f5:ae:f9:d4:
         6f:9f:f2:13:0f:e8:27:81:b2:32:58:fe:08:fc:23:69:3d:64:
         88:ac:3f:8c:4b:77:6c:37:f8:74:64:40:88:64:a2:30:d5:27:
         10:c3:ff:c1:d9:17:72:f9:42:60:a5:79:4c:3e:c2:39:0b:36:
         b2:79:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org