Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa
File:                     35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa (raw, json)
Hash identifier:          6+E3FzythRmb+dQV/DwyY1/uP5+nbMypohZSwf/FVvw=
Subject key identifier:   C8:22:19:78:52:E4:AB:60:65:04:9C:6E:79:57:C3:ED:9A:51:AC:14
Certificate issuer:       /CN=c117f0121a5ef011f07c8d516305c00886bef690
Certificate serial:       136DDB
Authority key identifier: 24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa
Signing time:             Mon 10 Oct 2022 13:47:57 +0000
ROA not before:           Fri 07 Oct 2022 14:52:06 +0000
ROA not after:            Mon 07 Oct 2024 14:52:06 +0000
asID:                     271947
IP address blocks:        177.74.100.0/22 maxlen: 22
                          177.74.100.0/23 maxlen: 23
                          177.74.102.0/23 maxlen: 23
                          177.74.100.0/24 maxlen: 24
                          177.74.101.0/24 maxlen: 24
                          177.74.102.0/24 maxlen: 24
                          177.74.103.0/24 maxlen: 24
                          2803:33e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273307 (0x136ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c117f0121a5ef011f07c8d516305c00886bef690
        Validity
            Not Before: Oct  7 14:52:06 2022 GMT
            Not After : Oct  7 14:52:06 2024 GMT
        Subject: CN=35176c02fdd35a534ddec7626d3aee1cb7e6d3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:c2:ea:36:12:46:0e:8a:fa:2f:6e:4e:7e:
                    51:52:81:0b:c9:ac:1e:2f:f6:1d:48:f0:31:a3:37:
                    6e:4e:41:61:25:9d:25:64:5d:a5:0f:81:ad:60:34:
                    7e:71:07:47:fa:20:f5:f2:e9:74:5e:1f:77:18:d9:
                    26:57:a5:05:02:f6:d3:dc:30:a0:1d:8f:99:ec:ee:
                    d1:c3:8d:af:8d:12:3d:7c:7b:86:c6:36:1e:67:16:
                    42:7e:aa:34:db:1a:ce:6b:df:08:7a:d7:0e:8c:22:
                    bc:6d:5e:6b:2e:15:96:b0:f3:9a:ec:ec:df:67:5b:
                    5a:50:33:f4:19:c3:23:5b:46:23:e7:b8:b1:c9:3d:
                    e7:cb:d9:dd:5a:87:54:1c:f9:09:8e:99:ed:76:f5:
                    6c:1d:c0:c9:af:21:ae:70:52:65:85:5b:ca:59:8b:
                    fd:89:13:06:d1:26:96:71:66:91:a3:4b:9c:db:85:
                    a5:c7:21:48:f6:86:46:56:6a:22:f4:3d:cc:ae:56:
                    12:b5:6f:3c:15:57:4d:f5:83:bf:05:0e:7f:48:c6:
                    1e:46:77:8a:63:0a:8d:22:0d:25:b2:b9:dd:89:fb:
                    86:55:15:5e:29:08:db:f6:3b:cc:78:76:f9:9b:4f:
                    5d:31:f5:af:10:45:ad:bf:e0:84:82:cb:d0:88:c9:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:22:19:78:52:E4:AB:60:65:04:9C:6E:79:57:C3:ED:9A:51:AC:14
            X509v3 Authority Key Identifier:
                keyid:24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/c117f0121a5ef011f07c8d516305c00886bef690.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.100.0/22
                IPv6:
                  2803:33e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:f9:2a:d3:e5:6c:2c:e6:6d:8c:f9:0c:2d:5f:9d:30:1e:
         6c:1b:4f:44:2b:93:8a:16:59:91:d0:d7:e5:21:b0:fd:04:50:
         aa:be:b2:24:00:15:ff:81:aa:bf:26:22:9e:76:05:26:e1:f1:
         9a:84:18:ce:de:6a:06:f3:e0:96:3c:ef:5f:da:6c:1e:ee:61:
         62:c5:40:45:de:f0:67:de:b2:41:d0:d9:84:d9:e5:86:31:b7:
         54:3c:88:e2:00:9b:a9:2e:dd:fe:4d:cc:6a:92:ef:33:fb:a1:
         6a:b7:fd:78:03:6a:53:d6:02:9b:86:81:82:2a:c1:af:c0:ae:
         4e:93:8a:92:c3:87:f4:91:5f:a3:05:dc:46:a7:54:46:1f:71:
         8c:a7:a8:a1:c8:fe:fd:ac:54:aa:2c:e7:bc:62:d2:af:15:f3:
         fd:6e:6a:b0:0c:ff:b4:58:42:7b:77:3a:bd:aa:45:22:e2:8d:
         ff:1a:47:3f:54:a5:e1:92:af:66:d2:6a:41:bb:8e:f9:59:50:
         76:90:e0:2f:fd:76:2a:5f:86:10:6c:47:b5:b7:3f:8b:d1:96:
         a8:06:e4:88:3c:5c:2a:85:96:cc:82:d3:32:f1:3b:20:b3:23:
         c7:91:58:88:7c:c6:7a:2d:e1:94:62:45:0b:83:0e:6a:e4:e1:
         5e:ee:60:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org