Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/289ee387268f69e5e4f2b0828218a6161fc11fdf.roa
File:                     289ee387268f69e5e4f2b0828218a6161fc11fdf.roa (raw, json)
Hash identifier:          q2tfpZ/JYD9GV6MfDxvPWMgCUQB2K5Vw2rfkrbqHpXc=
Subject key identifier:   97:91:96:BC:1D:C8:61:78:D2:74:88:1D:9B:A1:0F:F9:50:C8:79:E4
Certificate issuer:       /CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
Certificate serial:       120A35
Authority key identifier: 04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/289ee387268f69e5e4f2b0828218a6161fc11fdf.roa
Signing time:             Wed 01 Jun 2022 22:20:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270014
IP address blocks:        177.221.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182261 (0x120a35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=289ee387268f69e5e4f2b0828218a6161fc11fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:c7:e4:78:53:67:9a:88:5e:85:a0:49:8e:
                    41:a3:dc:f2:7b:bf:59:02:78:af:3a:8e:f4:f7:3d:
                    72:75:39:dd:77:fc:65:8e:1a:0c:77:57:0d:be:08:
                    c1:5e:9e:fb:5c:ab:42:10:94:47:c5:4e:25:24:ce:
                    de:a9:ee:1c:84:b8:12:b7:48:8d:aa:af:43:62:c2:
                    4b:b2:4b:55:85:7c:61:b0:de:09:b4:85:2b:af:8a:
                    71:8d:8f:31:ac:57:96:a1:73:14:10:a3:ac:94:32:
                    72:fb:25:af:13:3f:5f:27:f3:a7:3a:f4:18:55:75:
                    83:c8:d6:9d:7a:c2:64:f9:86:44:3e:0b:b3:70:68:
                    d8:1d:f9:7a:88:10:2f:fd:a8:6d:93:0c:e0:c8:13:
                    42:c8:bb:00:09:ba:3f:83:41:1c:76:20:76:73:1d:
                    70:ff:e7:13:e9:8b:ef:1f:2f:83:1b:00:8b:ce:c9:
                    c6:9f:49:3d:0a:dd:1d:49:99:9c:ea:b3:c4:97:eb:
                    12:d5:cb:d8:9d:14:a1:91:85:60:4a:9a:06:50:f7:
                    b5:d6:25:f9:31:4f:ec:11:24:aa:9e:0d:1a:32:57:
                    ea:69:92:29:b9:07:7e:ac:73:d9:8a:08:df:d0:45:
                    ad:6a:45:dc:ad:42:e7:d7:24:59:7b:de:c3:c5:f7:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:91:96:BC:1D:C8:61:78:D2:74:88:1D:9B:A1:0F:F9:50:C8:79:E4
            X509v3 Authority Key Identifier:
                keyid:04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/289ee387268f69e5e4f2b0828218a6161fc11fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/13e46a83c82c11a5000af8536ac8d01b701f35e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:86:47:c1:3e:3e:43:62:52:e3:fd:25:30:46:a9:ff:ee:cd:
         21:20:17:08:63:bc:df:d6:b2:5d:34:42:85:bc:8c:0e:6f:c5:
         4b:c3:94:12:a3:9d:5f:3c:4c:3c:3f:d0:d9:6e:41:19:54:18:
         90:89:2d:9b:7f:bb:de:79:f4:ee:60:41:e7:0b:25:10:84:c7:
         a8:56:af:de:bb:ad:52:ae:90:63:83:ea:20:71:9a:b4:ca:70:
         e1:69:d2:b7:44:93:c8:ed:2b:2e:c4:5b:eb:3d:46:dd:f3:a2:
         fb:02:29:16:df:6f:de:aa:31:d9:4d:4a:e7:c0:d2:05:80:1c:
         ab:4e:68:f8:bf:a4:8b:0c:e6:e7:f4:dc:3e:ec:52:2d:83:a1:
         79:3a:ad:ab:00:f9:27:89:17:47:94:ab:0e:0c:ba:35:ca:b4:
         2d:9e:5f:f1:e7:f2:a7:44:2c:c5:01:0c:48:81:85:d3:3d:9c:
         fb:38:72:67:5b:f7:18:83:32:a2:e5:6a:ff:f7:a7:c1:a3:d8:
         b3:76:98:99:21:a5:1a:8e:5c:56:97:a3:0d:eb:43:a7:f8:4d:
         1f:15:ea:9e:02:2b:90:5b:23:c1:0c:59:89:a8:60:78:71:05:
         09:27:55:2a:68:2b:37:21:4c:6d:0a:ad:39:a3:ee:80:09:64:
         c9:38:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org