Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/eb6d3c399f1eecf9a9106ae9ca8eefd13ea75387.roa
File:                     eb6d3c399f1eecf9a9106ae9ca8eefd13ea75387.roa (raw, json)
Hash identifier:          sYAtZwLv/+IheOWfEbmCGIFURxDmrCxjUuWWoEprKH0=
Subject key identifier:   91:AD:F4:03:9F:F0:70:AD:71:89:F9:57:AF:11:CB:77:BA:5C:55:32
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       211BF4
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/eb6d3c399f1eecf9a9106ae9ca8eefd13ea75387.roa
Signing time:             Wed 03 May 2023 18:31:39 +0000
ROA not before:           Tue 02 May 2023 18:31:36 +0000
ROA not after:            Sat 03 May 2025 18:31:36 +0000
asID:                     271837
IP address blocks:        177.234.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169844 (0x211bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May  2 18:31:36 2023 GMT
            Not After : May  3 18:31:36 2025 GMT
        Subject: CN=eb6d3c399f1eecf9a9106ae9ca8eefd13ea75387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:05:6d:4e:0f:7c:fe:4c:97:39:b7:a0:c9:42:
                    ed:35:bd:e8:a3:ec:71:b0:18:b7:75:4e:06:22:ad:
                    4f:81:62:a2:bc:ca:76:3b:c7:8a:10:61:4e:e7:30:
                    fc:a0:49:45:86:42:a5:8d:5b:1b:e1:03:60:1d:8e:
                    53:14:2d:04:ae:cc:55:5e:dc:69:7f:fd:6f:93:1a:
                    d6:46:3e:3a:24:28:3f:42:1a:11:58:41:72:00:14:
                    2e:03:c4:9b:07:26:d0:ea:3d:ee:53:0f:d8:34:ac:
                    5b:e2:1c:16:89:de:03:51:98:ac:0a:cb:31:cf:38:
                    60:91:7d:75:54:67:81:5c:a2:ef:63:5d:30:99:04:
                    93:57:27:a8:66:98:cb:ea:db:62:1a:4b:b5:7e:b4:
                    19:90:c6:8c:55:10:dc:e3:b1:fd:88:5b:fb:48:ab:
                    ea:52:93:6d:cc:8c:e7:e3:e6:0f:9d:1d:fc:2e:a1:
                    39:53:dd:17:63:8b:bb:04:af:92:aa:4c:83:a9:53:
                    38:45:b4:72:4a:17:f0:a2:45:fd:f8:01:24:2d:bd:
                    92:b4:26:91:21:b8:e2:15:44:91:ad:82:7d:73:4c:
                    d1:4a:e0:a3:9f:84:ce:cf:ac:46:eb:36:93:5e:a4:
                    c0:15:e1:e2:3d:df:f7:f4:c5:1e:cc:4b:91:42:f7:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:F4:03:9F:F0:70:AD:71:89:F9:57:AF:11:CB:77:BA:5C:55:32
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/eb6d3c399f1eecf9a9106ae9ca8eefd13ea75387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:0c:bf:a3:e5:e9:02:3f:d5:3e:92:6c:50:29:af:a4:d8:
         b9:f4:44:ff:75:1a:ab:1e:23:49:f9:37:cd:44:fc:2e:b3:52:
         3e:ae:05:ad:ab:74:54:ea:f6:d2:1b:61:3e:20:c3:f3:4f:97:
         1b:05:3c:6d:0b:b8:a9:70:19:61:54:71:9e:3b:a7:cd:96:94:
         30:c7:8f:95:03:01:75:be:72:70:3c:5b:c5:af:16:4e:11:78:
         34:2b:e2:0d:52:01:69:81:93:c3:61:d4:da:44:4c:9f:d8:9c:
         86:21:65:99:7d:2c:99:13:69:a0:a4:90:ba:6c:b0:4b:ba:a7:
         d7:e0:dc:28:37:cd:a1:98:5e:45:d6:4f:78:1a:c8:5d:7c:7d:
         d5:74:23:f0:4c:4a:e7:b7:f8:21:39:09:75:56:ad:7d:2f:77:
         d9:38:a4:17:55:df:4b:49:a2:01:8f:39:aa:f4:d3:81:7c:e8:
         f3:5d:2a:f2:c1:7d:fc:03:96:3d:93:35:7a:d1:d8:bf:ec:b2:
         27:c9:91:5e:7e:fb:9d:8f:18:a4:10:3e:72:38:8f:42:d6:4f:
         c7:bc:2c:78:1b:91:91:4d:19:35:62:01:24:fe:b9:43:71:87:
         50:62:c1:b0:9e:a3:db:be:7b:ab:cb:55:24:b8:12:cc:bf:a6:
         c9:d4:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org