Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/d252e3d4dfa3fb6e8fd2eb54ff48108a6e458816.roa
File:                     d252e3d4dfa3fb6e8fd2eb54ff48108a6e458816.roa (raw, json)
Hash identifier:          jK09sU7R4k34dpFVhQeR0hktR77pvpDgLdG4A9JFR/w=
Subject key identifier:   EB:D7:D2:CC:5C:49:DE:11:0E:DB:C5:9D:4B:B2:C4:DF:F8:B5:5E:46
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       21D85A
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/d252e3d4dfa3fb6e8fd2eb54ff48108a6e458816.roa
Signing time:             Tue 30 May 2023 20:08:17 +0000
ROA not before:           Mon 29 May 2023 20:08:17 +0000
ROA not after:            Fri 30 May 2025 20:08:17 +0000
asID:                     272954
IP address blocks:        177.234.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218074 (0x21d85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May 29 20:08:17 2023 GMT
            Not After : May 30 20:08:17 2025 GMT
        Subject: CN=d252e3d4dfa3fb6e8fd2eb54ff48108a6e458816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:2c:14:22:63:7b:9c:6e:07:76:0a:e7:2a:
                    75:36:ab:86:46:65:e5:bb:7b:6b:7e:1a:72:83:b9:
                    77:ba:ed:52:1f:42:4b:b1:3c:60:6f:0a:49:1c:ee:
                    06:2f:7f:af:04:b4:90:cd:2e:81:ef:71:c9:a2:5e:
                    d9:6b:65:70:04:f4:7b:72:fd:f6:3a:1c:3a:ca:39:
                    48:25:ff:d4:b5:ee:ad:31:65:d6:97:ee:64:8a:61:
                    46:f3:65:6e:fb:53:20:d5:ff:69:9f:6c:f6:04:32:
                    e1:0c:e3:98:60:19:db:24:68:17:18:27:69:c0:1b:
                    52:d2:10:33:53:1f:cb:ba:3d:4f:08:89:33:b0:6b:
                    4e:03:65:ea:9c:47:27:df:7a:74:c5:5a:14:b5:44:
                    83:4a:bb:c0:25:7c:d7:01:e0:01:fe:e8:a3:54:1e:
                    df:89:9d:81:1f:d1:ef:58:7c:9d:e4:94:54:ae:c9:
                    63:2f:e2:b5:f9:ad:bd:15:58:07:18:9b:37:fc:cc:
                    13:87:62:0f:5e:4f:84:15:ac:fb:73:6b:8a:d2:a5:
                    54:c0:ab:2e:99:97:4a:b7:ef:81:5c:ec:f6:45:c6:
                    0e:cf:d8:8d:f7:47:19:e2:75:46:21:a8:06:8b:46:
                    87:15:0c:ac:21:03:a6:ac:12:64:a7:a8:02:98:0b:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:D2:CC:5C:49:DE:11:0E:DB:C5:9D:4B:B2:C4:DF:F8:B5:5E:46
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/d252e3d4dfa3fb6e8fd2eb54ff48108a6e458816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:08:cd:f9:74:43:2d:01:88:b8:dd:5c:de:03:4d:49:1f:
         8b:6a:c0:2e:76:8e:a8:e9:34:c0:8c:d2:64:f0:01:bd:b4:ef:
         f1:96:49:21:10:d9:3b:63:8e:fe:a0:60:23:6e:80:99:a6:aa:
         c9:10:1d:e6:cf:c0:65:20:1a:e5:1d:85:a1:0b:e5:75:ef:1f:
         ff:c3:22:c3:68:78:5c:d6:78:a4:85:83:be:62:76:65:97:18:
         76:50:c0:ff:a8:c9:76:28:74:45:7c:ed:02:b9:18:92:13:5f:
         ba:fc:0b:01:75:dd:35:72:7b:52:e5:c2:9d:e6:14:d1:5a:27:
         c2:21:d9:a4:28:d6:63:cc:44:70:1e:97:76:54:28:5d:9b:fb:
         47:ad:7c:9c:d2:ad:bc:b6:cb:d2:83:56:28:43:bf:75:a1:f9:
         e3:46:32:eb:6d:a3:77:79:28:c7:0d:a4:ac:cb:34:6a:cc:7a:
         35:13:cb:95:88:bb:54:f9:07:7f:6b:57:3f:ee:49:1c:7c:d8:
         4f:e9:cd:8a:a3:02:81:e9:1b:50:09:dd:96:1f:16:ca:6a:64:
         91:eb:d2:f0:7b:5c:b9:c8:bc:e8:2e:dd:a5:36:98:46:bc:2d:
         06:56:ad:20:73:1d:e9:98:61:42:39:5c:8c:a4:71:5b:6a:0b:
         da:4b:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org