Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ab2cf8554808383cd8f3efeaa410be432d8debd2.roa
File:                     ab2cf8554808383cd8f3efeaa410be432d8debd2.roa (raw, json)
Hash identifier:          vsTYvNvK28bSNv6DlMVM4dMuRjWcrUIBuM0lytfI970=
Subject key identifier:   09:A6:A8:37:9E:5E:7E:74:C4:D1:50:1E:E6:4C:16:54:18:AE:01:09
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       25973F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ab2cf8554808383cd8f3efeaa410be432d8debd2.roa
Signing time:             Wed 28 Jun 2023 22:29:57 +0000
ROA not before:           Tue 27 Jun 2023 22:29:52 +0000
ROA not after:            Sat 28 Jun 2025 22:29:52 +0000
asID:                     265855
IP address blocks:        179.1.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463551 (0x25973f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jun 27 22:29:52 2023 GMT
            Not After : Jun 28 22:29:52 2025 GMT
        Subject: CN=ab2cf8554808383cd8f3efeaa410be432d8debd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:83:22:30:01:e8:0b:10:9b:84:86:97:bd:
                    fe:33:b4:6f:6c:8f:c5:db:93:d7:0a:21:c5:6e:d2:
                    5d:25:d4:e6:a7:46:61:13:6e:2a:8a:08:a5:d0:fd:
                    1c:85:df:f4:e2:92:6d:15:cb:8b:32:b4:11:d3:9d:
                    ce:2c:0e:81:a1:df:49:cf:0c:02:88:dc:dc:0b:17:
                    eb:00:f8:8b:69:6d:46:2c:b6:23:46:8c:2b:20:49:
                    5e:da:4f:54:f8:ca:b6:9d:4d:d7:82:3f:6d:fa:40:
                    a3:ad:d3:d9:6f:7a:c9:80:f8:b9:b6:b6:31:da:df:
                    51:a3:c9:9b:3b:74:a9:1f:38:e9:7f:a8:33:a4:56:
                    c8:88:10:ad:5c:d9:e8:07:36:85:e2:eb:47:4c:80:
                    42:92:ae:15:5d:74:b2:68:62:ff:af:c0:d9:e6:24:
                    2b:5c:23:f7:51:b4:2b:86:10:88:de:2c:f2:e5:b0:
                    85:61:87:73:6e:86:40:35:2f:40:1c:85:66:dc:45:
                    15:94:7a:1d:d9:89:67:cb:c5:2d:8a:78:cf:83:ec:
                    ce:97:f7:fa:85:c1:5c:41:cb:bd:5d:33:5f:b5:84:
                    11:c1:6f:b6:b8:3e:a5:53:98:aa:8b:8e:50:42:0d:
                    bd:6b:a7:96:83:82:1f:90:61:42:0d:7b:80:9b:2f:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:A8:37:9E:5E:7E:74:C4:D1:50:1E:E6:4C:16:54:18:AE:01:09
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ab2cf8554808383cd8f3efeaa410be432d8debd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:79:a6:18:2a:e7:81:ca:2a:22:f4:d1:b3:9b:4b:42:f0:27:
         a2:82:91:85:72:71:34:4e:da:92:6b:00:2e:b8:9b:14:5c:00:
         d8:7f:eb:9a:b1:e6:11:c2:2e:e3:34:91:82:57:c3:f2:c9:ed:
         c8:f8:09:26:d1:53:0f:dc:1c:50:b9:d6:20:0e:6a:5b:d5:ed:
         f5:d0:2f:54:d1:39:88:ff:d1:1b:74:cd:69:54:65:50:78:7c:
         e8:0e:aa:bb:9c:2a:01:23:b5:a0:43:a0:3e:e6:43:b9:66:0a:
         26:fe:4d:10:d5:17:fe:0c:f4:bb:7c:fd:62:c9:c3:6d:ce:53:
         76:c8:db:ae:c5:9c:2f:ca:05:ad:40:e3:9a:ba:8e:ad:ce:60:
         1a:53:d5:0c:85:e0:66:e2:34:89:56:5c:6f:13:cf:09:58:c0:
         5c:4c:e0:fb:b7:83:a3:a5:6f:50:20:a5:6a:0a:f7:ae:8c:f3:
         dd:e0:e8:68:5b:5a:0c:39:88:5d:49:45:c6:3f:64:06:17:a6:
         b7:c8:3e:3a:29:74:72:6c:b2:1c:74:0e:1e:70:73:1f:bb:be:
         32:1b:76:90:78:c3:64:63:07:03:69:2e:4e:51:d8:55:bd:95:
         04:d8:1c:0d:6b:97:6c:c2:ee:b1:cf:b4:ed:96:be:08:75:f3:
         ee:15:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org