Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa
File:                     242cb1c03837f2351c9a6351a53530d293c96f28.roa (raw, json)
Hash identifier:          ZLknk5GeKuvmp+kKETTOReX1m7V0Hw2519wt1O4VpOM=
Subject key identifier:   B8:33:0E:20:68:21:F8:86:3D:CE:1B:C1:1E:D9:37:3D:E7:22:AA:DA
Certificate issuer:       /CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Certificate serial:       073D30
Authority key identifier: 49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa
Signing time:             Fri 05 Nov 2021 13:00:32 +0000
ROA not before:           Fri 05 Nov 2021 03:00:00 +0000
ROA not after:            Sun 05 Nov 2023 03:00:00 +0000
asID:                     270044
IP address blocks:        179.0.180.0/24 maxlen: 24
                          179.0.181.0/24 maxlen: 24
                          179.0.182.0/24 maxlen: 24
                          179.0.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474416 (0x73d30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
        Validity
            Not Before: Nov  5 03:00:00 2021 GMT
            Not After : Nov  5 03:00:00 2023 GMT
        Subject: CN=242cb1c03837f2351c9a6351a53530d293c96f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:72:1c:93:ec:a6:a8:c3:e0:df:5f:4d:32:
                    fe:30:49:05:ed:16:7f:a0:41:80:a2:50:72:05:b2:
                    cd:84:55:68:8c:81:cb:9d:fb:34:38:b7:b6:9a:b7:
                    15:71:24:2e:aa:42:a3:f5:98:6a:66:2e:08:a4:57:
                    f8:87:bc:a7:3c:f3:fb:a2:1b:90:ad:0b:66:be:47:
                    6f:04:c2:65:16:10:30:28:66:27:a4:10:06:b5:b0:
                    2d:a0:71:38:fc:ed:5b:d9:67:f0:73:8b:e0:8d:23:
                    d1:25:e2:85:31:b4:6b:b9:52:66:44:c6:1e:39:70:
                    4e:b0:4a:33:6b:70:a2:af:1c:df:62:0d:c7:a3:4e:
                    32:ac:a0:29:ed:e9:44:f1:66:ce:0e:cf:ed:6f:04:
                    a2:f7:50:92:fa:2f:3c:f6:24:05:3f:2b:a9:d2:d2:
                    77:97:71:c5:58:37:79:21:f0:f4:cb:40:5d:3d:0c:
                    be:55:46:cb:d0:69:03:df:a3:95:d1:37:c1:45:8d:
                    e4:74:f4:e0:42:75:83:42:7d:8c:e8:b5:a0:21:e5:
                    ed:d1:63:62:21:a2:07:5d:9f:03:e0:0c:7c:58:98:
                    75:a1:d9:68:fe:14:0a:7f:3f:8f:17:26:7d:f2:8b:
                    6e:55:4c:ba:2e:ad:af:30:d2:ac:57:22:22:85:09:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:0E:20:68:21:F8:86:3D:CE:1B:C1:1E:D9:37:3D:E7:22:AA:DA
            X509v3 Authority Key Identifier:
                keyid:49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/242cb1c03837f2351c9a6351a53530d293c96f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:cd:5a:87:de:e6:c0:7b:e5:8a:7f:25:23:aa:9d:e4:64:
         a0:09:d6:47:c3:fd:e9:3a:9f:94:ea:89:b8:e4:d7:f2:62:54:
         90:20:73:c2:9e:2a:39:e5:5b:7f:91:65:ac:64:89:25:27:db:
         0e:bc:04:8a:f4:c0:d1:ec:4a:5d:f4:cf:56:92:a3:ac:a8:f6:
         59:00:9f:73:98:de:c0:83:3b:45:7b:ca:52:bc:46:5c:74:81:
         f3:81:71:35:5c:e2:b9:c8:7f:e5:aa:6c:b3:ee:b6:b0:e6:ab:
         eb:46:c1:0b:d7:37:c0:f2:ab:67:65:22:ed:be:7f:f5:a4:5c:
         79:d3:c6:79:c7:0f:88:ff:8f:23:8c:f5:8f:1d:5f:55:4d:ec:
         d7:e2:e3:36:24:64:e6:32:ae:bc:b5:46:81:d5:f2:aa:e0:5a:
         d2:f2:1e:bb:aa:1b:fe:4e:4e:1d:1e:41:4a:49:c0:d5:5a:ea:
         a0:e7:7e:be:da:1b:5c:01:3e:5d:50:84:9c:b6:6e:ad:36:ef:
         1b:ef:c8:99:5e:76:f8:d3:c9:fb:d0:dd:af:61:cd:66:69:4d:
         a6:24:bc:06:7c:e7:d7:fd:d4:f1:23:e5:31:10:58:58:6f:e7:
         ad:7b:48:b9:45:8d:36:ce:0f:35:71:c4:22:73:ce:94:86:3c:
         34:26:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org