Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/03e70f2240e00ac3f6d2d293bf2d95ed27615047.roa
File:                     03e70f2240e00ac3f6d2d293bf2d95ed27615047.roa (raw, json)
Hash identifier:          p9Ljh1+xrRPxlHjvVD1cLH9Tc9wt6hb90XtfLbxZ8O0=
Subject key identifier:   C6:31:84:DA:A7:AF:CC:C3:AA:9F:4C:49:40:D7:A7:2E:A8:9F:61:69
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F4113
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/03e70f2240e00ac3f6d2d293bf2d95ed27615047.roa
Signing time:             Mon 16 Jan 2023 22:56:38 +0000
ROA not before:           Sun 21 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 17
                          190.90.0.0/16 maxlen: 16
                          179.1.72.0/24 maxlen: 24
                          2800:310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048275 (0x1f4113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 21 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=03e70f2240e00ac3f6d2d293bf2d95ed27615047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:73:94:59:6e:f7:5c:af:cc:a2:82:b9:e4:
                    3f:df:3a:b1:a5:c9:a6:4b:e4:93:c1:e4:e6:62:3e:
                    5c:b6:5d:7c:7c:fa:58:ee:a3:de:0c:be:b9:b1:c5:
                    6a:c7:44:84:ab:8d:df:96:51:a2:5e:dc:8e:bd:9c:
                    bb:15:b3:65:b1:03:4c:93:f9:ac:71:b3:66:98:18:
                    04:cc:ae:00:50:66:99:29:54:3c:d5:74:62:58:c9:
                    b7:db:2c:33:30:ae:35:03:67:83:8c:86:54:e6:51:
                    d7:82:68:3b:4a:dc:dc:7e:41:83:b6:65:7d:d1:59:
                    39:7c:83:2a:38:86:1b:8e:85:3c:d5:7c:c2:8e:5b:
                    6b:ce:d3:f0:10:5f:ab:d1:b6:c5:31:8b:27:33:8b:
                    84:44:6c:85:1d:5e:b6:15:13:5c:7f:0a:9d:8c:f1:
                    49:e4:28:90:03:21:3e:0c:a1:9f:1a:90:4f:f4:96:
                    91:6a:4e:9b:b1:a0:e9:62:f9:ea:62:00:89:d1:d6:
                    db:f9:e9:b7:2c:fd:e3:4f:84:38:01:8b:03:c2:f1:
                    c1:0e:4c:69:ef:ae:60:5e:9d:64:7c:d6:3b:aa:ef:
                    93:cb:78:a5:9e:3e:58:72:28:10:8a:06:99:cd:62:
                    a4:51:f8:15:d4:48:dd:53:c0:28:d0:46:03:b3:75:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:31:84:DA:A7:AF:CC:C3:AA:9F:4C:49:40:D7:A7:2E:A8:9F:61:69
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/03e70f2240e00ac3f6d2d293bf2d95ed27615047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:c1:43:62:29:7d:b8:bf:0a:3f:8c:e2:b6:87:25:a7:80:
         76:fa:86:d1:63:d3:59:4e:4b:2b:4c:d8:50:e6:1d:28:41:9e:
         1f:17:9a:c7:30:2c:72:fb:d9:ac:e4:0b:5a:68:a1:0f:39:00:
         84:2f:fc:66:c4:11:1b:bb:e2:8b:b4:94:cc:9a:f3:83:32:34:
         fb:f3:bd:c5:2d:26:42:ca:8f:8f:0f:99:53:d3:43:06:79:b3:
         18:ae:af:f4:fb:46:45:52:f6:b9:d7:41:59:ec:62:c2:c0:8c:
         83:af:3f:5a:2c:be:ff:cb:58:7d:2b:b6:d4:0b:56:cd:22:51:
         b4:c3:89:09:71:d5:0c:2e:82:21:83:3b:0b:45:8e:5e:09:4b:
         69:a5:d2:ec:2b:12:49:c9:e0:fe:54:83:52:71:e5:ed:1f:62:
         1f:9d:0d:b7:8d:9b:9c:7a:c0:25:be:90:e8:28:c2:5f:7d:c1:
         21:01:74:52:03:cb:37:5d:26:ea:57:7a:57:70:63:9f:44:e9:
         7e:1d:df:93:6b:e8:15:71:65:89:9e:00:22:cf:5d:a6:70:7b:
         2a:f6:40:20:3f:3f:a6:c8:ef:86:c2:16:ba:48:3a:6b:11:78:
         6d:a2:f0:7a:28:5a:29:15:12:5d:bd:fb:d3:e2:ec:9f:bf:c4:
         ac:a4:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org