Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/26f80394820b404f9f675ae5263bdd3a36885043.roa
File:                     26f80394820b404f9f675ae5263bdd3a36885043.roa (raw, json)
Hash identifier:          x0nzO/hSVrH/k9JsJrhl3AdGq9a1mwqPrdjGsjIAFJk=
Subject key identifier:   DF:12:7B:B2:9D:0B:31:75:2E:88:21:D2:FA:4F:7B:9F:5F:06:51:84
Certificate issuer:       /CN=8b30529e01283b8f6a2964516330aadb9c799016
Certificate serial:       11CBDE
Authority key identifier: E2:F8:01:66:86:34:14:DD:25:6A:31:7B:C3:A1:39:13:36:FA:A2:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b30529e01283b8f6a2964516330aadb9c799016.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/26f80394820b404f9f675ae5263bdd3a36885043.roa
Signing time:             Fri 12 May 2023 08:30:00 +0000
ROA not before:           Thu 11 May 2023 08:30:00 +0000
ROA not after:            Sat 10 May 2025 08:30:00 +0000
asID:                     270000
IP address blocks:        177.10.188.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166302 (0x11cbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b30529e01283b8f6a2964516330aadb9c799016
        Validity
            Not Before: May 11 08:30:00 2023 GMT
            Not After : May 10 08:30:00 2025 GMT
        Subject: CN=26f80394820b404f9f675ae5263bdd3a36885043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:4f:7e:0f:82:00:a7:08:fb:07:a0:ec:65:
                    e2:63:2e:0f:60:de:52:69:d6:22:bc:63:52:ea:2b:
                    62:21:81:ac:80:9b:a1:c7:20:ff:3b:d3:44:db:5b:
                    2b:18:91:72:af:a4:9a:80:60:a2:4f:97:7e:da:4f:
                    67:b2:f3:cd:ec:37:9a:8a:6f:a4:c5:c6:d1:3a:d2:
                    a1:c9:cf:2e:90:36:ad:b5:87:0f:44:ee:16:39:78:
                    f6:79:c2:44:32:ca:a4:40:2e:f6:4f:39:f6:b3:39:
                    ae:a5:19:15:91:1a:fd:f1:65:b8:06:e6:b2:7e:af:
                    c0:7a:8f:ca:fa:4b:6d:5b:13:58:17:fd:a1:5b:f2:
                    04:49:78:1b:5a:68:7e:1d:ab:9c:fc:d4:f5:b5:fc:
                    d5:e2:13:d8:e3:d5:c5:00:8e:62:c8:13:d1:42:8c:
                    b5:02:e9:af:ab:52:49:68:66:80:06:28:31:9d:43:
                    03:86:d4:e6:b7:14:36:42:fd:52:e5:1f:d7:14:9f:
                    77:3a:2f:da:a0:58:4d:96:27:7d:51:6f:07:d7:10:
                    6e:bf:32:ac:ad:cb:34:fc:ec:be:b5:d3:23:d0:04:
                    cc:e8:2f:6b:bd:d7:90:37:11:d5:10:6e:5a:16:f2:
                    39:9e:1a:cb:52:16:19:99:e0:a7:5e:a7:42:0a:87:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:7B:B2:9D:0B:31:75:2E:88:21:D2:FA:4F:7B:9F:5F:06:51:84
            X509v3 Authority Key Identifier:
                keyid:E2:F8:01:66:86:34:14:DD:25:6A:31:7B:C3:A1:39:13:36:FA:A2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b30529e01283b8f6a2964516330aadb9c799016.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/26f80394820b404f9f675ae5263bdd3a36885043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d46ef708-78f7-487e-8fbb-ee30bde8e3d5/8b30529e01283b8f6a2964516330aadb9c799016.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:92:d0:11:05:69:18:a2:2e:58:80:20:42:6e:f4:62:c7:1a:
         b7:9d:4f:90:5b:fd:50:a1:83:ef:56:cb:8b:01:77:1e:3f:46:
         8d:44:c6:61:19:1f:61:a4:0d:9e:a0:1c:8c:05:c4:65:e4:43:
         62:e2:3e:85:1d:41:0d:da:87:c4:28:76:09:f7:79:53:94:fb:
         09:5c:00:41:b8:ef:08:d5:37:b2:73:da:5d:b0:be:8d:f9:f5:
         74:09:e4:36:46:96:a0:9a:06:66:d7:3c:3a:4d:b4:14:c5:09:
         6b:3f:93:2c:44:22:18:ec:b9:a8:52:fa:4a:65:75:58:f4:79:
         09:71:ca:f2:9e:3b:86:3e:14:5d:31:7f:2c:ac:ad:72:81:31:
         fb:b3:70:2b:e3:00:89:43:fd:c5:4d:5b:a6:5f:0b:a2:56:c3:
         4f:d0:34:99:d8:42:20:88:d0:27:e1:74:b9:23:75:5b:8a:a0:
         f9:46:ff:c9:c8:ea:37:eb:26:7b:8d:ed:a1:b1:55:c2:1e:97:
         54:96:25:46:82:5f:e1:3f:19:8b:33:61:19:dc:73:07:8a:4b:
         f3:b8:ca:c3:76:32:95:49:13:4c:27:90:e6:4f:05:97:74:57:
         dc:61:05:e9:1b:72:25:e2:23:69:0a:84:aa:ac:06:59:a3:92:
         64:b0:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org