Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2b9269bad5ff79fdd86abdb8c604f327b862797a.roa
File:                     2b9269bad5ff79fdd86abdb8c604f327b862797a.roa (raw, json)
Hash identifier:          i4wMuP93zm2XzdzOmt6jBuNFXJLIBVbotaBKSPGpgBk=
Subject key identifier:   E9:BD:10:A5:26:6A:C8:57:29:6B:BA:31:B5:39:32:53:7D:73:13:AE
Certificate issuer:       /CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
Certificate serial:       1BEF96
Authority key identifier: A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2b9269bad5ff79fdd86abdb8c604f327b862797a.roa
Signing time:             Fri 27 Oct 2023 09:29:07 +0000
ROA not before:           Fri 27 Oct 2023 09:29:07 +0000
ROA not after:            Mon 27 Oct 2025 09:29:07 +0000
asID:                     263230
IP address blocks:        179.0.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830806 (0x1bef96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
        Validity
            Not Before: Oct 27 09:29:07 2023 GMT
            Not After : Oct 27 09:29:07 2025 GMT
        Subject: CN=2b9269bad5ff79fdd86abdb8c604f327b862797a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:1f:ec:dc:fd:b3:7f:f8:6c:da:ee:64:c1:
                    b8:2e:74:1c:5b:c5:3e:79:ba:b0:72:e6:c8:f3:0c:
                    44:52:32:16:10:be:75:20:07:15:b7:00:03:cd:69:
                    07:26:ff:b9:5e:de:d0:2f:ca:67:52:3d:b3:ac:3e:
                    37:b9:35:95:8a:4b:62:31:e6:f3:ea:c8:e5:7f:0f:
                    44:f3:17:ca:1c:5f:58:c0:79:91:13:dd:68:23:5c:
                    68:75:94:65:c2:71:6b:7f:8b:7d:90:b6:83:56:14:
                    10:6f:18:f6:b1:ae:56:81:83:c5:e2:17:32:07:da:
                    15:94:46:fc:f6:55:33:3b:df:85:3f:c2:46:69:ca:
                    d6:1d:b8:ee:8b:17:16:45:47:e1:7d:07:d6:34:2a:
                    35:e9:2a:82:5b:ce:24:d1:cc:e5:7f:58:03:01:79:
                    c1:c3:cf:44:a8:be:e5:05:93:80:f8:38:0a:a6:0d:
                    12:ae:90:7b:5b:23:85:b3:a1:ad:fd:ac:e2:c5:a2:
                    85:9d:1c:fa:29:ef:9f:c4:2d:50:fd:fe:41:65:06:
                    ff:aa:13:e5:85:3d:ff:5c:f4:6a:c9:79:90:a2:8b:
                    85:67:01:cf:d0:fd:c1:9a:72:06:4a:23:a0:9f:30:
                    06:00:57:a3:5d:df:d5:f8:ec:81:4e:0b:ad:22:cd:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:10:A5:26:6A:C8:57:29:6B:BA:31:B5:39:32:53:7D:73:13:AE
            X509v3 Authority Key Identifier:
                keyid:A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/2b9269bad5ff79fdd86abdb8c604f327b862797a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/cb6445348fda58c2a60a9db541fbbec77e7a759a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:ca:ad:4d:0c:a0:c6:f7:6b:50:83:7a:a1:8f:b1:18:f9:
         48:da:b2:0e:af:0f:35:67:c2:6b:a7:46:6f:3c:a0:26:27:ee:
         a1:a7:9a:9e:ca:e3:44:98:dc:00:37:f2:f8:bf:f1:55:ef:fd:
         98:c0:70:31:28:d7:67:e6:9f:36:05:7f:b6:26:cd:1e:cc:eb:
         b0:c8:3c:b2:18:f6:2b:5e:d8:5f:33:07:17:f8:a2:22:da:03:
         59:62:fe:ff:da:ec:74:86:8f:23:e7:72:00:df:ff:8f:1e:b6:
         02:6d:f0:92:fc:44:00:bd:d7:22:53:34:06:68:e1:6d:25:db:
         49:cf:93:fd:c1:a1:5b:36:6b:69:54:b9:4d:a4:eb:fc:8e:1f:
         3d:d9:5a:ce:e6:13:81:bf:1d:54:36:7c:88:98:dd:ab:86:88:
         f7:8b:22:5f:19:7b:fe:af:6e:d3:1b:f1:f0:5d:5e:70:90:f1:
         93:59:a1:aa:3e:71:ec:b3:f9:75:08:42:26:38:af:15:82:40:
         fb:08:58:40:a4:b4:7c:5c:4b:c4:7b:43:5c:de:36:80:e9:36:
         8f:79:eb:f2:b4:b5:67:0b:4d:e0:09:29:d4:b4:e2:c6:4d:79:
         aa:9a:8b:56:c4:d1:90:f6:15:c2:6e:06:e3:04:6a:b7:f7:3b:
         69:d3:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org