Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/cd1cfe3006e7cdf318b6e140356777ef2b41cc07.roa
File:                     cd1cfe3006e7cdf318b6e140356777ef2b41cc07.roa (raw, json)
Hash identifier:          XW7Sv8iuB9B+Z/tGJUXMvCD8kWU/MOCH/2TsKelYAp8=
Subject key identifier:   43:3E:F0:CE:0B:9D:44:9E:D7:35:2B:C9:D6:77:9B:B7:83:04:64:C3
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       1938B4
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/cd1cfe3006e7cdf318b6e140356777ef2b41cc07.roa
Signing time:             Mon 11 Jul 2022 20:02:11 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     6147
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652916 (0x1938b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=cd1cfe3006e7cdf318b6e140356777ef2b41cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:b3:05:1b:0e:71:b2:e2:ac:5c:4c:8d:a1:
                    b7:3f:81:69:ba:30:ae:97:6d:77:d7:31:bd:55:3e:
                    fa:32:9c:07:31:fb:89:9b:04:86:a0:1a:ed:9a:a3:
                    16:81:f8:12:0e:51:4e:b1:49:ae:81:45:9d:75:ed:
                    93:f6:70:9b:6a:c1:64:a9:35:ff:9d:b9:1b:74:33:
                    b7:00:2d:98:41:69:47:d8:08:68:1c:e9:ce:14:4c:
                    6a:1d:28:0b:06:44:0f:a0:58:a3:8f:d9:96:00:7f:
                    56:68:d5:ad:46:d1:63:6d:8e:82:36:50:79:0e:00:
                    00:f3:50:5d:be:c7:6d:f3:8f:1f:91:93:4b:1e:bb:
                    54:52:88:ed:88:0e:b4:d0:54:b6:15:e8:f0:f8:54:
                    7b:ae:a9:ad:d8:da:82:cd:15:e1:b0:24:50:20:ae:
                    4c:3a:78:b5:56:4b:87:e4:b0:88:e3:7d:1b:fd:ce:
                    84:b2:ca:7c:80:0f:7a:5d:88:18:01:c2:ec:9e:64:
                    8f:14:be:54:00:67:04:7b:3a:68:5f:9c:87:6e:70:
                    86:ec:b6:a1:b9:bd:47:37:15:f2:0b:ca:fa:ca:0e:
                    d9:14:86:27:2b:4a:d0:85:67:36:dd:eb:c0:f4:ff:
                    da:1e:0d:62:26:07:e0:6f:e1:42:74:e3:eb:eb:6a:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:F0:CE:0B:9D:44:9E:D7:35:2B:C9:D6:77:9B:B7:83:04:64:C3
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/cd1cfe3006e7cdf318b6e140356777ef2b41cc07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:b5:fb:f3:1b:23:a3:e7:a4:15:5c:28:f9:a2:fa:6f:2f:
         2f:a9:9e:68:9c:08:6d:ab:67:7f:ef:68:d9:b8:2e:a8:30:01:
         3a:8c:22:07:46:c2:6f:30:2a:20:fe:a4:13:35:ec:c7:4f:6e:
         49:bc:ad:fa:20:f0:1d:47:07:67:2f:08:3c:eb:91:c0:56:5c:
         20:7d:a5:2a:80:16:95:86:92:ab:ad:c8:ca:3b:dc:7a:05:d4:
         90:c9:b2:b1:8d:d9:5b:da:65:89:0d:d5:1d:c1:7f:ef:53:b2:
         e3:fc:8a:85:0c:93:82:5c:6d:1c:b3:5f:48:58:30:b8:a0:54:
         78:c6:49:92:80:c7:d2:f0:4e:87:03:0b:2c:b3:c0:87:bb:4f:
         cf:bd:c5:51:04:89:b7:ab:ba:9e:10:aa:50:06:0d:47:3b:b5:
         42:48:fb:f7:36:de:7f:8d:92:18:eb:33:1a:f3:dd:f8:82:86:
         fa:45:76:84:8b:c9:5b:37:26:a1:6a:d4:95:2a:63:10:bd:1b:
         55:db:73:3d:37:bb:2d:9f:c1:cc:00:d8:1f:2a:3a:0d:5a:08:
         b8:ca:7b:c2:04:74:d0:fa:60:93:10:b8:3b:44:d7:b6:0e:0f:
         f1:8a:2e:b5:f9:d2:2d:e5:3c:ca:61:c2:5a:f1:ed:80:c0:92:
         49:8f:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org