Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cf41bd85f8a06616e5d08309061693b046177bbc.roa
File:                     cf41bd85f8a06616e5d08309061693b046177bbc.roa (raw, json)
Hash identifier:          UVO8y9qanUm+eGS80cLrk85ibD6n03VJDc1hSxMbHDE=
Subject key identifier:   54:B3:32:26:8A:F3:C3:25:8D:62:D1:25:C7:9E:DB:EB:4D:EC:E2:69
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       1FCF77
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cf41bd85f8a06616e5d08309061693b046177bbc.roa
Signing time:             Sat 18 Mar 2023 15:43:38 +0000
ROA not before:           Fri 17 Mar 2023 15:42:18 +0000
ROA not after:            Tue 18 Mar 2025 15:42:18 +0000
asID:                     271874
IP address blocks:        177.234.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084727 (0x1fcf77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 17 15:42:18 2023 GMT
            Not After : Mar 18 15:42:18 2025 GMT
        Subject: CN=cf41bd85f8a06616e5d08309061693b046177bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:da:e0:31:3a:eb:99:d8:ad:47:84:b4:df:
                    49:cf:fe:d9:c2:23:1f:c5:a3:e3:e8:c9:1a:c1:46:
                    2a:1f:1c:30:90:ef:3c:9a:5e:5f:8c:1e:81:66:40:
                    de:d9:c5:f2:90:e2:77:49:3c:6c:ee:74:16:3b:a1:
                    0a:1b:c6:59:f5:eb:d2:ac:70:f9:6e:8f:16:97:ac:
                    01:72:fe:f6:ff:d3:a2:0e:03:bc:e3:d0:88:07:d2:
                    f5:80:9e:86:e7:ca:42:7e:30:bb:bd:3d:60:29:5d:
                    19:6c:c8:91:14:f8:3f:3c:ea:98:99:2c:fe:85:15:
                    3b:26:5f:be:da:f1:3a:04:91:6f:b4:11:7f:86:87:
                    e5:a6:19:3c:e0:69:5f:4b:da:a0:92:ff:dc:eb:79:
                    62:3a:79:f6:bc:49:a5:b4:26:3e:0b:38:f6:c3:b3:
                    f7:a5:42:09:63:74:56:63:b9:69:ce:0c:31:04:98:
                    e3:d8:3b:a9:ff:99:c9:d7:6e:70:17:05:72:3e:44:
                    c4:61:d3:89:a1:14:56:b8:00:bd:0c:f8:c3:2c:fc:
                    11:68:6a:7b:aa:d6:e5:79:27:b7:10:a0:a9:c1:31:
                    a4:cc:32:10:7e:95:9f:b0:ec:ca:a1:88:67:fa:09:
                    06:d6:d6:a9:40:d8:cb:0b:4f:60:71:fd:ac:78:c5:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:32:26:8A:F3:C3:25:8D:62:D1:25:C7:9E:DB:EB:4D:EC:E2:69
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/cf41bd85f8a06616e5d08309061693b046177bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:60:3b:0e:ed:0e:a5:e6:c5:c3:3c:61:1c:0a:22:f3:af:
         7a:53:96:c6:d2:e2:c2:07:54:c0:82:99:4a:b7:a8:64:35:0d:
         b7:05:2b:77:5c:0d:4a:ab:dc:a7:4c:c7:d6:27:b3:a5:56:58:
         cb:c2:a7:db:01:2d:f1:30:ed:7a:75:b5:b8:f0:6e:10:cd:82:
         20:b6:e7:35:4a:2b:1e:d0:e8:73:fd:69:b4:bf:6a:cf:95:17:
         b6:63:33:5f:fa:e6:df:c8:8f:25:ff:97:8e:2c:f4:ab:f7:14:
         fa:14:eb:59:a0:ff:5f:17:10:77:5f:7b:5c:d2:76:a3:08:e1:
         df:33:97:61:bf:6b:e4:7d:b2:ae:24:12:f3:ab:d8:09:73:a7:
         23:a2:c4:42:7b:b2:37:e2:75:52:85:3b:75:d8:f1:1b:63:16:
         6f:b9:f0:db:89:33:31:ea:73:e9:44:a8:0f:21:cd:cd:af:3e:
         85:7a:a3:1d:5f:3a:00:0b:0c:06:a0:a2:e0:30:e7:55:98:1d:
         38:7e:fc:ab:6b:c4:d3:ec:17:ce:47:67:21:e7:97:2d:be:d7:
         bc:c4:b6:07:a3:f0:b3:ae:06:56:be:07:f8:34:1f:1b:06:cb:
         ba:b7:10:81:6e:65:d7:d5:e8:3d:81:ec:57:d3:c0:21:a3:3d:
         e7:ab:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org