Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a851bd9f410b455c5af2793273476f410c1043b3.roa
File:                     a851bd9f410b455c5af2793273476f410c1043b3.roa (raw, json)
Hash identifier:          Y6IsDWrW6wBGZ5l7MFva51SgrdsHcCyoculra0k85B0=
Subject key identifier:   DA:0B:E8:EF:38:DE:3D:BF:DC:9E:07:C5:4B:8B:55:54:B4:60:9E:9F
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       0DDE3D
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a851bd9f410b455c5af2793273476f410c1043b3.roa
Signing time:             Wed 24 Mar 2021 14:31:56 +0000
ROA not before:           Wed 24 Mar 2021 14:31:55 +0000
ROA not after:            Tue 24 Mar 2026 14:31:55 +0000
asID:                     263834
IP address blocks:        179.62.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908861 (0xdde3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Mar 24 14:31:55 2021 GMT
            Not After : Mar 24 14:31:55 2026 GMT
        Subject: CN=a851bd9f410b455c5af2793273476f410c1043b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:b2:78:6b:f3:bd:db:cf:33:9f:49:ea:3d:
                    a0:e0:5d:3b:88:c2:21:1c:42:e1:b5:02:38:d8:0a:
                    d4:ca:12:05:94:25:26:ad:ec:78:77:1e:b1:ab:43:
                    b2:16:e4:cb:86:12:3a:12:5e:aa:ed:39:46:d0:cc:
                    85:ac:44:24:f3:fd:56:41:63:32:7a:7e:75:51:78:
                    84:64:d6:61:de:22:cd:d3:1f:31:08:67:a4:1c:7d:
                    6f:5a:2c:ed:fc:f8:3e:c8:7f:90:c5:ef:42:df:b2:
                    cf:0a:ed:1c:80:92:3e:b2:34:c2:9b:7c:be:97:26:
                    05:75:ff:1c:97:c6:30:8e:22:cf:df:43:b2:78:47:
                    e3:81:61:7d:fe:51:86:58:6d:1a:64:d2:c9:55:00:
                    94:f0:03:68:52:ec:21:ed:42:b1:7c:15:8e:d2:96:
                    7c:6c:b5:ee:66:aa:df:20:74:1d:52:a5:7c:c9:e5:
                    62:bf:c5:47:82:73:b8:db:e8:52:2c:13:2f:ee:9d:
                    e2:71:51:83:30:28:e3:9e:e7:d5:17:fa:b8:9a:9c:
                    27:76:9c:72:16:e9:18:19:99:13:64:96:0e:1c:ba:
                    98:04:87:59:d2:1b:36:1b:ed:9d:e6:a1:05:5f:83:
                    a0:35:0b:02:e6:e9:65:3a:cd:30:bd:68:ff:16:7e:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:E8:EF:38:DE:3D:BF:DC:9E:07:C5:4B:8B:55:54:B4:60:9E:9F
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a851bd9f410b455c5af2793273476f410c1043b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:6c:52:fd:48:e7:95:45:f1:c4:f0:7e:5d:f0:59:40:e8:
         ce:91:24:2f:ac:ce:fd:5f:e5:e3:f5:fd:d0:44:c8:a3:28:51:
         b3:55:f4:e6:76:0a:15:5b:11:96:49:d1:58:cd:70:48:79:91:
         49:dc:d1:90:7b:ae:ec:89:43:6e:cc:a5:0f:40:2e:76:49:9f:
         4a:2d:28:b4:0b:0c:ae:66:26:3e:1e:1d:c6:fe:43:ec:e2:2c:
         60:55:cd:4a:51:dd:c0:75:fc:e1:b5:dd:9c:01:fa:2a:f2:b6:
         15:c5:e2:6f:45:12:5e:a8:fc:2d:e9:eb:a8:c3:b4:0d:0b:88:
         a0:de:af:db:b7:34:dd:b3:f2:a4:ec:99:52:c2:c9:33:ba:6d:
         1c:b7:09:e8:6b:2d:94:a3:6d:5c:4c:e8:a3:29:1d:72:86:71:
         45:0a:31:d3:b6:b2:80:40:97:a1:42:5a:ca:da:e3:32:74:af:
         83:8c:7f:bc:d7:b0:56:ae:48:df:df:f6:00:13:bb:f1:08:2b:
         8a:a0:5b:d2:4e:2e:37:63:36:db:32:b2:35:b6:b1:1e:d0:a6:
         57:57:39:74:b5:c7:ea:08:b5:57:72:fc:f5:c2:13:9c:92:76:
         67:9c:a9:b0:c4:6b:f8:8f:f5:ca:45:db:4b:8f:d5:1f:c4:3b:
         b5:0d:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org