Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9094c128965a116cf69bf6a8ec6c7e38acc5b5a4.roa
File:                     9094c128965a116cf69bf6a8ec6c7e38acc5b5a4.roa (raw, json)
Hash identifier:          ee9IP4xFBhUbxHVwzK0dgNGwNiX6X49s+XmeqFCk1Ps=
Subject key identifier:   FF:97:3A:42:CC:DB:04:44:FE:60:FD:13:63:05:30:6D:0A:50:D0:9A
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1B3AC0
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9094c128965a116cf69bf6a8ec6c7e38acc5b5a4.roa
Signing time:             Tue 06 Sep 2022 13:40:54 +0000
ROA not before:           Tue 06 Sep 2022 13:38:33 +0000
ROA not after:            Fri 06 Sep 2024 13:38:33 +0000
asID:                     265855
IP address blocks:        179.1.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784512 (0x1b3ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Sep  6 13:38:33 2022 GMT
            Not After : Sep  6 13:38:33 2024 GMT
        Subject: CN=9094c128965a116cf69bf6a8ec6c7e38acc5b5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:77:b7:92:7f:68:83:32:c7:f2:a1:83:7f:
                    a0:d1:88:1a:bc:e7:98:cb:1c:14:26:50:bc:12:74:
                    1b:ea:61:99:7b:82:91:6d:9e:c3:ee:52:b9:b6:bc:
                    7d:7e:4a:88:34:ac:fb:fc:45:f8:b4:71:f6:fd:2c:
                    45:e1:dd:77:56:c6:df:9f:5b:8c:6e:b5:3e:c5:7b:
                    f1:44:cf:c0:fb:5e:74:39:d2:aa:73:8f:d6:1d:eb:
                    ea:f4:36:9e:e8:7e:e1:93:d6:96:68:86:53:c3:9e:
                    37:92:a8:6c:e6:ba:6c:6d:fb:d9:e4:52:0a:21:01:
                    f1:bd:13:48:b1:55:7f:89:d0:ae:1e:41:c4:c9:71:
                    a9:8d:b2:f7:06:06:2b:36:2a:a6:93:e0:78:bc:ed:
                    f3:f7:ca:7f:78:01:b3:19:34:e6:f0:58:3f:1e:fa:
                    01:8c:57:ed:59:f3:56:0c:68:88:b8:d5:ae:6f:34:
                    84:0e:af:8f:bd:4a:28:48:a7:0c:6e:3c:a5:4e:0d:
                    b4:ab:98:b4:73:cf:1c:53:0d:04:ee:9f:9d:1c:b1:
                    af:12:0b:cd:b8:b3:b1:f5:b2:26:c1:0e:6e:a2:4b:
                    7e:4a:f5:27:9a:ff:67:5d:1b:a5:7f:01:5e:5d:1c:
                    7c:24:8e:ed:2e:da:26:0e:be:7c:4f:63:38:1e:5a:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:3A:42:CC:DB:04:44:FE:60:FD:13:63:05:30:6D:0A:50:D0:9A
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9094c128965a116cf69bf6a8ec6c7e38acc5b5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:0c:4f:44:4c:25:26:1e:7b:83:79:e9:f5:9c:9d:2e:ee:
         00:4d:e5:db:54:f8:ef:7e:5d:c8:30:10:a4:09:22:59:d8:d1:
         d7:21:7c:15:a6:d8:95:08:0a:d7:fa:54:fb:c9:81:f0:72:c8:
         9a:c4:6a:ce:77:8d:93:c9:d3:4d:85:6d:cc:ca:72:2e:02:26:
         f6:4a:c5:0e:27:c1:ee:e9:39:05:53:1a:21:2b:df:0c:6f:92:
         1f:7d:e8:18:1e:1f:69:e0:28:87:3d:88:04:72:a9:a7:f4:de:
         3f:8f:16:5d:0c:5f:4c:ee:9c:c2:7a:c3:45:93:35:c2:8e:dd:
         31:a1:21:96:21:b7:ab:94:63:e7:54:34:fd:62:79:b6:fe:e4:
         f5:fd:1d:20:6e:4f:de:ad:30:ce:14:81:7e:8c:f8:1d:8e:17:
         0b:e7:f0:56:e4:fa:eb:df:0f:8b:6f:c5:28:2c:43:24:fd:e0:
         ed:c8:8a:49:27:46:0f:89:3d:bf:48:70:cf:30:2b:0b:87:53:
         38:28:bd:1a:86:d6:66:40:fa:7e:4f:b9:93:7a:99:18:e8:c2:
         37:49:13:bc:5f:31:ad:e9:70:a9:5f:c4:64:ff:9c:c0:23:33:
         41:4e:34:49:a0:6b:c4:a1:77:d9:c2:d5:5b:89:9c:4e:32:68:
         1e:d2:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org