Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/59d5ff9034ea5a9f48c3d0bd0e75b41401974723.roa
File:                     59d5ff9034ea5a9f48c3d0bd0e75b41401974723.roa (raw, json)
Hash identifier:          PvZWNxNioGiIF+iVApkqkYgnRXkm+Cw4evUKpFMoVT8=
Subject key identifier:   33:60:3B:D9:95:B0:C3:BC:67:D8:8B:80:43:D4:04:D3:BB:A4:82:10
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       1910B8
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/59d5ff9034ea5a9f48c3d0bd0e75b41401974723.roa
Signing time:             Wed 03 Aug 2022 17:55:40 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     271929
IP address blocks:        179.0.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642680 (0x1910b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=59d5ff9034ea5a9f48c3d0bd0e75b41401974723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:d5:75:c3:4a:1d:85:76:7d:87:28:f4:4f:
                    0b:85:1d:b1:e8:9d:cf:5d:4f:e9:7d:f7:7f:a1:70:
                    27:06:00:77:40:85:cb:68:d8:44:5e:2d:ba:8c:d7:
                    54:f9:bb:f7:87:0b:fe:89:00:6b:49:14:6e:ed:05:
                    9b:86:3c:09:81:fa:1b:3e:a4:f3:fb:f0:f1:f5:34:
                    06:29:38:b1:f7:ce:48:6f:ec:fd:9a:2a:fb:72:50:
                    90:bb:8a:4b:c4:5d:e7:f8:9a:4e:3c:71:5d:c8:21:
                    7d:87:97:58:ef:a5:3f:ae:79:3d:b6:9c:1a:cc:94:
                    a9:f2:77:2d:fd:7f:2c:5b:c6:63:45:6e:22:08:df:
                    bc:12:2c:4a:14:ee:e5:29:15:bf:79:27:a7:f6:96:
                    8a:50:b3:c3:e3:38:a4:77:1b:a3:c0:b6:15:0e:f0:
                    12:c1:e2:49:76:55:36:bd:89:de:57:82:73:90:6e:
                    20:00:ba:c1:42:5f:fd:54:b8:b6:77:5a:7b:53:2c:
                    9d:bd:66:17:69:05:6b:50:ba:6b:78:9e:91:63:62:
                    5d:ea:06:ba:8f:ac:aa:0d:66:a3:22:fd:14:a0:69:
                    57:c5:6e:f6:10:17:48:28:53:c7:47:31:54:5d:73:
                    c6:71:27:b0:91:a1:b8:cb:9a:67:0f:ea:5f:39:d0:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:3B:D9:95:B0:C3:BC:67:D8:8B:80:43:D4:04:D3:BB:A4:82:10
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/59d5ff9034ea5a9f48c3d0bd0e75b41401974723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:93:85:82:fe:3b:59:79:01:22:0c:af:57:9a:f6:63:cc:
         39:59:8a:71:63:9b:8d:98:66:77:69:5a:7f:10:3f:8a:e4:18:
         31:c6:d2:25:3e:fa:a4:c4:e4:59:d1:0f:eb:99:94:6b:e9:86:
         0a:ef:4e:d9:6a:77:96:9e:81:7a:22:18:70:c8:d4:49:1b:11:
         0a:b3:0e:d6:1e:1b:10:15:f6:e6:09:b1:c1:55:7e:8b:8b:0a:
         27:45:e2:e7:6c:13:53:98:1f:89:87:d6:d8:3b:20:ae:ae:45:
         96:d9:c2:26:3b:4e:df:51:eb:44:cc:9f:fd:87:d3:69:72:e0:
         6b:8e:f6:a0:83:92:43:c6:57:10:ec:79:a6:c6:43:6c:97:ba:
         91:56:fb:11:b0:c9:80:cb:73:ea:6c:d8:6e:d4:da:a8:91:10:
         aa:87:e7:d7:03:c7:40:bb:dc:ce:04:af:c6:f8:86:42:39:ca:
         23:a6:09:0f:6d:ad:6b:02:84:60:78:f7:ca:03:cc:a0:2f:60:
         17:2f:b2:c7:16:9a:f6:41:27:ea:11:4d:fc:3e:1c:23:ad:8c:
         e3:05:10:23:d2:88:25:0c:1a:cf:79:79:22:a7:d3:50:91:70:
         bd:66:d7:cd:94:23:70:b3:a5:77:eb:e7:bb:33:ba:d8:ab:ae:
         03:53:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org