Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3f3df11a83405c47dd50b4cc7ef7a6d5936d6916.roa
File:                     3f3df11a83405c47dd50b4cc7ef7a6d5936d6916.roa (raw, json)
Hash identifier:          R8pH3sT4Gi0AYB/4G6e25mTSiSUIH/hPTYabZis/gXc=
Subject key identifier:   D1:84:A7:6D:9F:5D:CF:EF:58:93:DE:82:47:40:E4:43:3B:33:D2:C8
Certificate issuer:       /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial:       270E2D
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3f3df11a83405c47dd50b4cc7ef7a6d5936d6916.roa
Signing time:             Tue 26 Dec 2023 20:51:00 +0000
ROA not before:           Tue 26 Dec 2023 20:51:00 +0000
ROA not after:            Fri 26 Dec 2025 20:51:00 +0000
asID:                     52468
IP address blocks:        179.60.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559533 (0x270e2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
        Validity
            Not Before: Dec 26 20:51:00 2023 GMT
            Not After : Dec 26 20:51:00 2025 GMT
        Subject: CN=3f3df11a83405c47dd50b4cc7ef7a6d5936d6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:41:de:b1:7d:c0:88:c2:da:8a:79:bd:04:
                    51:c4:e4:ed:f2:f0:0a:c5:96:0a:76:c5:9b:8e:6d:
                    26:4f:df:78:93:93:97:ae:ef:3f:8d:1a:0a:ce:ab:
                    16:a0:c3:58:8f:02:11:48:b7:78:52:8a:b6:e5:38:
                    8c:4c:17:e1:26:ec:e1:63:df:f2:6e:ff:60:4d:3c:
                    a5:85:57:eb:77:10:4a:65:55:51:98:d2:d3:c5:1d:
                    c7:fa:63:02:71:a4:e3:da:35:1a:6d:bc:8e:af:63:
                    76:ab:62:bc:b3:6f:92:5a:cb:8b:0c:8a:a2:a2:a1:
                    23:b2:50:d4:45:1c:6c:d1:f0:2d:12:55:a4:8f:ea:
                    d0:88:29:58:ba:ac:d0:aa:7e:be:6c:fc:4a:31:2f:
                    72:a0:bf:d3:60:8a:d9:7f:af:f4:c2:80:e6:0c:22:
                    00:af:c0:d1:43:17:e6:b3:f1:fe:53:59:8a:1d:5b:
                    bb:ad:d4:23:e2:86:db:4b:ca:07:0f:4e:23:17:8d:
                    63:44:7b:f5:4d:e2:01:25:4c:c4:e4:ec:43:79:5d:
                    b4:a6:3e:67:90:1b:4e:7c:7a:d8:ad:13:e2:3f:ec:
                    02:1e:87:ff:aa:3a:70:6e:cf:44:a7:a3:0a:71:9d:
                    f5:f9:1e:4b:e7:bd:7f:07:85:40:cc:08:3f:67:dd:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:A7:6D:9F:5D:CF:EF:58:93:DE:82:47:40:E4:43:3B:33:D2:C8
            X509v3 Authority Key Identifier:
                keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3f3df11a83405c47dd50b4cc7ef7a6d5936d6916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:9d:aa:4d:ad:d8:fd:91:00:d0:71:e1:f7:79:6b:6c:c5:
         74:a7:5b:ab:a5:4f:39:cd:a7:18:ea:7d:8c:a4:e8:70:07:ac:
         41:9c:a0:ae:97:99:f3:5f:f9:36:d2:ba:60:fb:df:0c:05:1c:
         eb:f3:93:06:90:99:5d:84:98:c6:54:05:a4:b8:b4:9a:51:37:
         e0:d9:9c:58:46:5d:aa:c3:a2:e0:0a:f6:61:0a:a0:5e:8c:ea:
         2f:65:48:a1:6a:42:49:fc:b5:3c:9f:75:5a:35:15:65:57:26:
         43:0f:90:fe:4f:2d:8f:2e:da:c2:9e:b9:a5:f7:8e:60:45:7c:
         80:c5:6c:2b:88:8a:e8:7e:26:c9:74:58:5f:31:48:30:1d:19:
         b5:33:c5:51:73:e2:eb:92:98:af:ea:f5:6a:10:02:d7:fd:01:
         53:73:e2:8a:a0:35:74:02:ea:2f:d7:56:6c:5f:1e:7b:85:34:
         fb:53:47:51:15:ba:01:dd:2a:30:57:a6:27:4b:8d:d1:a1:74:
         0e:c6:08:4c:e7:be:20:2a:c3:81:5a:51:f5:0d:ff:0b:27:4e:
         44:59:0f:4e:40:9e:88:0c:3e:70:71:66:1e:df:a8:0b:97:77:
         1d:67:19:3a:c0:50:32:56:5c:87:e3:fc:56:31:18:a7:c9:1c:
         d5:e4:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org