Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/03e4444ac188d1ebe37935b8486722f4ddb87727.roa
File:                     03e4444ac188d1ebe37935b8486722f4ddb87727.roa (raw, json)
Hash identifier:          E//m8TgACcYRYVK+x7HjpwhcQ/tr+j2hF13sH3HAUbU=
Subject key identifier:   1C:B6:9A:F6:E0:A5:4E:4D:DA:DF:07:E4:63:12:43:8B:A5:B0:0F:6B
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       229CEB
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/03e4444ac188d1ebe37935b8486722f4ddb87727.roa
Signing time:             Sat 03 Jun 2023 19:19:38 +0000
ROA not before:           Fri 02 Jun 2023 19:19:22 +0000
ROA not after:            Tue 03 Jun 2025 19:19:22 +0000
asID:                     263834
IP address blocks:        179.62.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268395 (0x229ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Jun  2 19:19:22 2023 GMT
            Not After : Jun  3 19:19:22 2025 GMT
        Subject: CN=03e4444ac188d1ebe37935b8486722f4ddb87727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:78:74:6d:f6:3e:53:d1:0d:c3:3b:b1:51:
                    f9:e3:07:1c:90:de:db:39:95:3a:69:a2:85:bd:3d:
                    04:d2:12:37:39:6c:de:a4:86:24:0b:47:40:55:1a:
                    42:7b:52:59:b8:cb:a4:9e:27:3f:a1:e5:d6:50:c6:
                    bc:9f:61:45:46:60:73:3b:4a:bf:b6:0b:69:df:2b:
                    ab:10:31:16:53:93:a6:2d:73:8d:c1:e3:5f:ac:7e:
                    3b:7e:7f:a0:e8:5f:88:40:d2:a6:78:18:1f:df:b0:
                    61:6a:14:9c:1a:b9:ce:24:51:3c:38:b5:68:49:a7:
                    11:f0:11:a8:88:87:2d:dd:4a:3f:53:36:eb:22:da:
                    4e:3c:33:30:07:13:8b:40:7c:8f:6a:ca:7e:c5:99:
                    36:64:a3:f7:b9:08:23:ad:8d:db:c1:c3:07:25:08:
                    99:24:34:ff:3e:fe:a5:46:6c:3d:b9:b6:08:10:ec:
                    87:9b:6b:43:57:aa:c6:76:d7:1f:46:99:cd:c1:20:
                    6e:b7:f0:4a:3d:8e:5d:40:8d:0b:e5:55:16:13:52:
                    23:e8:d4:e1:8e:b0:b4:3a:2b:6b:d5:b1:9d:3c:db:
                    c2:46:57:3c:46:7c:ef:f0:38:cd:36:6d:f5:64:28:
                    7e:25:f5:4e:ff:88:2c:ef:71:e5:17:f2:93:24:42:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:9A:F6:E0:A5:4E:4D:DA:DF:07:E4:63:12:43:8B:A5:B0:0F:6B
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/03e4444ac188d1ebe37935b8486722f4ddb87727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:7c:29:cb:76:d5:68:4f:08:e1:37:37:e1:2e:0f:4b:84:
         82:f5:21:42:d2:20:ed:26:b1:b9:72:39:16:bc:6e:28:ef:60:
         eb:e8:ad:a3:f7:ab:60:6c:c1:3a:be:42:b1:e6:54:5c:5b:9c:
         f0:ad:21:e8:98:48:f8:9e:aa:8c:93:e6:b2:51:12:80:39:d7:
         64:df:43:4f:73:3e:49:05:48:46:a2:81:12:3f:09:8f:3f:58:
         4f:ca:70:8d:24:d5:cb:4b:db:55:94:ac:f0:1e:f4:d5:72:9b:
         79:22:2e:73:7c:6a:9b:2f:04:e9:79:f0:e0:1d:e9:93:3d:59:
         18:5b:43:6c:7f:a2:cb:0b:d3:1c:3e:b9:2c:b2:7e:a1:db:95:
         cc:04:b5:c1:25:da:6f:5e:24:bc:85:0e:f1:42:dc:01:b8:a0:
         e7:c1:92:5d:e5:a6:b0:ec:8e:4f:91:9b:7b:1f:e8:0d:dc:a7:
         55:8e:61:04:77:d8:8d:aa:03:be:45:45:11:a7:f5:a7:d9:c8:
         6b:38:fe:fa:04:96:72:4b:a1:c5:5b:3d:3a:a3:c2:00:c2:50:
         81:cb:44:1d:27:80:51:f8:e0:4d:d0:3a:9e:6a:bd:38:17:6a:
         d9:39:15:70:3f:29:01:07:8b:cd:ac:83:d0:8a:95:42:99:36:
         f9:4d:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org