Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/e2ca8addc9dcc61ac3d7142f8f0c8edc1dab1f8a.roa
File:                     e2ca8addc9dcc61ac3d7142f8f0c8edc1dab1f8a.roa (raw, json)
Hash identifier:          +0Rwe1rcHtnEfEvevvKDvG0UKvvnY+EOZRMmD8HHaqI=
Subject key identifier:   B9:AE:34:16:E3:11:EB:53:95:E1:1D:74:6C:99:B6:68:07:D1:51:91
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1F2606
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/e2ca8addc9dcc61ac3d7142f8f0c8edc1dab1f8a.roa
Signing time:             Tue 28 Nov 2023 19:03:22 +0000
ROA not before:           Tue 28 Nov 2023 19:03:22 +0000
ROA not after:            Fri 28 Nov 2025 19:03:22 +0000
asID:                     17147
IP address blocks:        163.247.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041350 (0x1f2606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Nov 28 19:03:22 2023 GMT
            Not After : Nov 28 19:03:22 2025 GMT
        Subject: CN=e2ca8addc9dcc61ac3d7142f8f0c8edc1dab1f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:be:88:16:c0:b7:38:97:d9:7b:7a:86:e9:
                    64:90:3c:d4:f2:ea:cd:98:ba:d3:51:69:81:c0:ea:
                    b5:69:ac:ed:86:82:b8:ba:03:7b:4c:8b:2c:73:d0:
                    de:d8:5f:e6:d7:ca:3f:df:63:e2:a1:98:24:b4:ab:
                    8e:c7:04:50:64:6e:1a:f7:86:eb:a4:c1:ea:a2:34:
                    c7:e2:1e:07:2f:68:e3:07:c7:b0:7d:b4:41:4b:7f:
                    bc:01:ad:6d:a4:89:bf:86:eb:00:5a:03:b6:a7:ad:
                    8f:77:10:94:93:64:65:3c:b7:39:41:48:17:06:62:
                    ac:75:71:09:1b:34:ed:be:59:76:ed:fa:05:a5:67:
                    35:52:9d:0f:3b:67:f1:a3:87:19:aa:f0:a3:10:78:
                    91:a4:36:b9:5c:b0:8d:7f:21:33:bc:2e:da:a8:4a:
                    94:7f:bd:4b:a8:cf:92:e5:c4:8c:34:44:a7:1f:e5:
                    93:fe:9a:38:6e:78:e8:69:bc:8e:21:d9:9b:ba:53:
                    9a:7b:a4:71:9b:84:6f:fb:eb:f8:ee:3f:a0:f8:7c:
                    56:1d:5f:0d:bf:f1:de:33:ce:12:5a:82:dd:1c:6d:
                    ba:90:ba:b7:a5:94:3d:98:e4:74:6e:f2:45:44:f0:
                    fc:ef:a2:1a:8e:e8:2e:08:46:16:ca:b8:97:02:da:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AE:34:16:E3:11:EB:53:95:E1:1D:74:6C:99:B6:68:07:D1:51:91
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/e2ca8addc9dcc61ac3d7142f8f0c8edc1dab1f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:c9:bb:88:db:dc:ba:c5:6f:34:20:82:84:29:1b:0e:49:
         f9:b5:64:c3:85:dd:7d:c8:58:08:0b:5a:f7:10:83:0e:26:0e:
         58:a8:ae:99:39:b0:88:9e:47:aa:d2:93:b1:49:61:c4:4d:2c:
         f2:fd:0f:c3:ab:4e:d9:06:88:56:d5:0d:1d:c6:58:66:0a:2d:
         bf:07:8f:65:f2:a1:20:59:b0:0c:c8:06:34:4a:24:f0:9a:1d:
         e0:4c:f1:15:4a:fd:bc:af:f1:2c:d3:3f:5b:dc:27:db:ec:29:
         ae:2f:b4:ba:78:a5:ca:6b:fd:70:6b:e3:a0:4f:ad:db:13:8f:
         9c:a9:2c:1f:16:87:de:8d:5b:b0:b1:2e:20:62:61:7d:83:5c:
         a7:85:9e:2e:ea:17:d3:ea:53:89:65:5c:02:85:36:87:fa:26:
         9d:ed:2c:d8:1d:2a:b5:c1:8e:1a:4b:32:37:c6:2b:5d:d9:2a:
         77:d3:21:4b:04:20:65:ca:4d:42:b9:5e:f2:92:aa:87:99:45:
         6e:a6:4d:02:f3:6f:30:96:f1:4e:1a:e4:cd:1d:ca:e8:c5:2b:
         71:02:c0:8f:15:40:0d:5a:e1:87:f6:3d:9c:fe:fe:98:63:54:
         2b:f2:ea:b6:7c:51:30:3d:39:8e:80:6e:65:98:bf:e2:9f:4b:
         e1:cc:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org