Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/8041014432e81278155cfbf8c14e98e454cbfbc0.roa
File:                     8041014432e81278155cfbf8c14e98e454cbfbc0.roa (raw, json)
Hash identifier:          5gggNht2iHWGlX/2hS+H56wt1cH663G5Nm2OrYkQDy8=
Subject key identifier:   47:9A:D1:69:50:AE:C2:E9:4F:6A:3B:2C:0B:62:DD:3B:EF:68:F9:A9
Certificate issuer:       /CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
Certificate serial:       1207D5
Authority key identifier: 04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/8041014432e81278155cfbf8c14e98e454cbfbc0.roa
Signing time:             Wed 01 Jun 2022 22:20:38 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270014
IP address blocks:        177.221.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181653 (0x1207d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e46a83c82c11a5000af8536ac8d01b701f35e0
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8041014432e81278155cfbf8c14e98e454cbfbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:f6:b3:de:23:c8:f6:fe:9c:a0:72:b7:47:
                    eb:b0:5b:e7:e2:75:71:01:55:4f:35:fa:08:59:af:
                    4a:83:da:af:2b:68:3a:17:a5:35:b6:00:d2:c2:76:
                    71:0b:13:e1:d6:eb:4a:69:7d:bf:71:93:9f:07:90:
                    ce:cd:dd:51:fc:ff:e6:23:f9:96:b5:f3:7d:e6:23:
                    b4:64:84:1b:14:12:de:d0:84:25:44:f9:df:5f:f3:
                    77:cd:2e:f8:bb:23:dd:fb:96:e3:81:ca:7c:d7:50:
                    2a:f8:7b:dd:05:b4:de:5f:83:14:d4:9a:88:10:0e:
                    40:3e:6b:78:a8:34:90:07:ef:77:27:b2:1a:2a:36:
                    6a:a5:17:75:f3:99:f5:a4:18:e3:e1:35:b1:b7:ac:
                    79:9c:50:04:e9:19:1c:a6:ea:f7:aa:fd:ff:a1:8e:
                    62:a8:ac:9f:da:dd:31:a7:16:73:32:87:a7:b8:7e:
                    85:88:b0:96:6c:de:29:da:78:34:72:c3:99:20:9b:
                    63:62:59:b5:98:8b:82:79:73:d1:a3:fa:03:c3:f1:
                    eb:80:35:46:a5:7e:4d:a3:3f:67:fb:d8:7d:20:25:
                    33:d4:cc:e5:5d:2b:b9:f9:34:5c:0f:c0:30:ef:60:
                    06:b1:af:16:8f:c9:b8:2a:b1:53:67:ed:5d:65:4f:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:D1:69:50:AE:C2:E9:4F:6A:3B:2C:0B:62:DD:3B:EF:68:F9:A9
            X509v3 Authority Key Identifier:
                keyid:04:FC:FF:3D:E0:0F:35:80:B7:17:68:BE:1D:B2:44:F4:8A:C2:89:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e46a83c82c11a5000af8536ac8d01b701f35e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/8041014432e81278155cfbf8c14e98e454cbfbc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5f38011-2445-4072-975d-a399fdc9d1d7/13e46a83c82c11a5000af8536ac8d01b701f35e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:09:b1:5d:68:23:cf:9a:51:1d:8d:ae:c7:29:74:fd:f4:
         25:e7:a9:3d:a7:a4:fe:8e:95:60:8a:36:a9:ec:93:5a:c4:64:
         67:2c:a6:b1:f1:11:bf:4d:08:ad:33:54:66:ad:58:ba:c6:ed:
         e1:ec:96:7f:c6:1c:2e:51:18:e0:2a:66:e0:aa:f3:71:64:66:
         60:7a:3b:f3:14:ce:41:8b:61:b1:7b:34:50:21:b8:a2:eb:c5:
         95:f0:18:b7:13:cd:44:d9:38:94:a2:be:24:05:d8:6a:6f:72:
         3e:f7:96:05:bf:5a:1e:68:cb:77:da:d5:46:9c:92:fc:f5:66:
         85:7c:28:6f:1e:4c:62:ab:31:7f:5b:f6:a6:48:53:f4:4c:f0:
         bc:45:ab:f2:18:e4:01:63:d0:10:4d:c5:d6:38:8d:88:ec:5a:
         a0:ba:e7:fe:d6:7d:9f:06:31:7b:14:38:e0:9a:8f:29:77:0d:
         6f:10:de:32:7c:8f:26:0b:37:b3:4a:fa:7b:1f:d5:0d:4f:b9:
         5b:de:4a:03:83:8d:3c:91:d5:e3:c4:3f:d8:f1:85:52:5b:cd:
         e9:b5:8d:9d:a8:c7:02:d7:e0:b2:36:06:24:21:b9:1b:34:3a:
         0f:47:97:c3:47:ce:29:2b:bc:10:5b:6f:6c:df:a7:77:e2:fb:
         2f:a0:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org