Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/f3e230e2513a260bf7d9d69831c9c05b3cda2239.roa
File:                     f3e230e2513a260bf7d9d69831c9c05b3cda2239.roa (raw, json)
Hash identifier:          Xn0iaCcTPkggm9rq1MEn/CcaXrtqu13NHxkC+65Qycw=
Subject key identifier:   33:92:68:19:B1:2B:E7:EE:89:E3:E7:94:81:18:05:3D:DE:03:1B:B9
Certificate issuer:       /CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
Certificate serial:       059285
Authority key identifier: EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/f3e230e2513a260bf7d9d69831c9c05b3cda2239.roa
Signing time:             Tue 28 Dec 2021 20:09:01 +0000
ROA not before:           Tue 28 Dec 2021 03:00:00 +0000
ROA not after:            Thu 28 Dec 2023 03:00:00 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365189 (0x59285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
        Validity
            Not Before: Dec 28 03:00:00 2021 GMT
            Not After : Dec 28 03:00:00 2023 GMT
        Subject: CN=f3e230e2513a260bf7d9d69831c9c05b3cda2239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:64:c6:da:9c:88:73:b9:bf:26:8d:d2:f8:
                    65:c1:e6:86:ac:e0:9a:d4:d6:9f:b1:3a:92:4b:61:
                    ea:83:39:b4:d4:e2:d5:92:6a:04:90:0c:98:c4:1c:
                    11:bf:db:66:f6:0e:39:0d:dc:9d:88:9a:31:06:7b:
                    07:48:a5:13:a0:61:cc:9d:0d:e0:80:b8:ff:c9:89:
                    d6:ea:80:ae:27:ea:a2:0d:89:cc:b5:cc:00:1a:13:
                    e7:93:9a:27:b1:32:b4:e2:05:69:fa:1a:ce:34:0a:
                    91:d4:65:22:3a:68:66:e8:e6:dd:2a:f2:92:7a:ae:
                    cb:81:26:8d:f8:cc:a3:a6:7f:5e:42:73:73:ba:6e:
                    81:98:2b:4f:ab:8d:6c:7b:35:ee:30:8f:2a:2b:f3:
                    7c:95:26:8c:d9:e2:05:9a:d4:ae:5e:c9:40:d9:5b:
                    02:73:b2:8f:e8:9a:2e:d0:f8:59:08:6a:33:b9:5e:
                    17:68:e9:aa:63:ca:92:30:6a:99:cd:e3:7c:84:3f:
                    17:70:ac:b0:38:b1:78:df:24:45:4e:c9:b5:9c:2c:
                    23:19:13:13:bf:e5:33:b3:6e:27:bf:91:d2:9a:6c:
                    b4:a6:77:74:03:18:4d:87:04:de:a4:a4:a6:3b:f4:
                    2d:44:60:65:bf:5e:29:32:a2:69:a4:07:c6:f0:84:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:68:19:B1:2B:E7:EE:89:E3:E7:94:81:18:05:3D:DE:03:1B:B9
            X509v3 Authority Key Identifier:
                keyid:EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/f3e230e2513a260bf7d9d69831c9c05b3cda2239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/2510213418f85a88f8db8d2ffb6e84078f9f70b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:61:8e:b5:0e:72:91:34:1c:f7:ec:38:8d:78:2d:a9:6c:51:
         a9:ed:28:eb:50:d0:51:c0:14:3b:f7:cd:e9:63:20:45:36:4b:
         da:9d:33:ba:89:bc:5e:7b:14:1f:8f:d2:e0:0b:82:0d:cb:25:
         6c:07:57:c7:e1:81:0b:7e:e4:93:27:8e:15:33:69:52:81:fd:
         77:f5:45:72:42:6d:98:24:b6:32:db:59:b5:e2:a5:e5:d1:34:
         04:7b:dc:52:12:50:e4:79:fd:d5:0c:8b:75:a4:db:8e:a6:49:
         16:9b:08:12:4c:71:57:7f:cc:05:b5:e9:1e:d2:29:05:57:db:
         dc:b5:3f:90:05:5d:56:a5:c8:2a:ef:0b:b6:b8:58:3e:2a:32:
         84:7e:0d:33:08:44:d7:2b:08:d2:ac:a9:5e:6c:1f:ce:38:d4:
         93:42:bb:6e:07:a0:27:f0:5f:7e:33:d2:bf:c4:c8:dd:00:0c:
         61:c9:6f:00:24:30:b3:b8:1e:86:9c:ee:13:21:fe:70:03:56:
         78:53:5f:ca:dd:cb:0a:fd:60:43:1f:aa:18:84:4f:f1:21:d3:
         79:06:75:82:b6:7b:79:68:ca:8e:a0:6c:93:32:6d:bd:9a:aa:
         d7:76:85:91:cb:47:80:1e:ec:52:d1:51:8f:bc:25:05:18:2b:
         ca:21:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org