Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa
File:                     09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa (raw, json)
Hash identifier:          LsXMy457zXOvZzUuwHyRAFEIECxfOBNbZ8/CxF1PGX0=
Subject key identifier:   AC:8B:FB:A2:06:51:82:24:63:78:01:19:80:DD:53:2D:0C:98:8A:79
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       2783A8
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa
Signing time:             Tue 06 Feb 2024 15:31:39 +0000
ROA not before:           Tue 06 Feb 2024 15:31:39 +0000
ROA not after:            Fri 06 Feb 2026 15:31:39 +0000
asID:                     6535
IP address blocks:        179.4.0.0/16 maxlen: 18
                          186.20.0.0/15 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589608 (0x2783a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Feb  6 15:31:39 2024 GMT
            Not After : Feb  6 15:31:39 2026 GMT
        Subject: CN=09d38e29b1f199892c6d84d4365cc6b9c1749ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:fd:9a:f7:37:e2:5f:aa:ae:30:a9:f9:8b:
                    bd:ff:d8:ee:c2:08:fa:9d:27:65:a4:9c:08:fe:7d:
                    28:39:b1:a0:28:02:1e:bb:57:15:10:45:f9:5a:c5:
                    58:63:db:66:7b:17:32:02:08:0e:d6:77:9f:40:a3:
                    da:59:05:2c:4e:56:5c:0f:0b:7d:19:a6:d6:75:a3:
                    f3:15:f3:02:9a:4a:1b:cb:5c:cd:8c:e1:08:84:22:
                    49:cd:bb:13:1b:a1:f7:63:b7:83:f9:4f:47:95:7e:
                    c7:53:60:2c:1c:c4:e2:67:c5:84:27:c7:7f:40:7d:
                    de:c4:60:e9:c7:1e:54:ed:4a:30:60:17:b0:53:83:
                    b5:84:9d:17:ff:d3:f7:9f:37:a3:c4:aa:f4:8f:89:
                    a5:a9:da:f8:c4:e1:be:c8:ed:1c:7e:cb:64:1c:c3:
                    ce:85:79:06:a6:5b:df:48:4d:54:77:36:ce:ef:59:
                    df:03:a6:97:ea:bc:f4:43:0a:66:e5:82:a0:c3:7e:
                    82:a1:b8:6a:77:33:4a:5f:fc:96:7a:43:0b:68:88:
                    6a:0c:6c:5d:b5:0c:26:e3:b9:0c:f6:dc:e4:40:f1:
                    aa:68:10:a5:e1:43:0c:55:a2:e1:72:3e:d9:b5:1f:
                    c4:bf:5e:91:84:10:86:ca:44:2d:1c:7c:91:3f:77:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:FB:A2:06:51:82:24:63:78:01:19:80:DD:53:2D:0C:98:8A:79
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/09d38e29b1f199892c6d84d4365cc6b9c1749ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/16
                  186.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:90:c5:6a:b3:43:0b:22:d9:94:24:ee:b7:bf:bb:02:18:
         34:35:fa:7b:c0:70:a6:e6:89:dc:a6:6c:86:6f:6d:a1:4c:15:
         65:b1:bd:c4:73:cd:8e:42:bb:81:f1:5d:a9:a7:3b:44:20:41:
         36:5b:94:d5:98:79:46:b2:3c:a0:26:91:e0:cf:de:33:d7:a6:
         14:4b:cc:a1:ab:fa:cb:65:64:10:82:90:70:be:82:38:20:7e:
         f9:a7:31:08:ec:9f:94:08:b8:6c:e0:60:a8:99:7b:fd:b3:bb:
         f2:7e:2b:62:80:39:81:6a:d7:7e:3d:31:1b:3f:9f:92:c5:47:
         14:3c:5c:77:7e:8c:4b:04:d3:f3:9a:47:7d:25:c7:3b:dc:a0:
         fc:a9:e8:9c:57:18:c1:99:0f:14:18:0d:a9:1a:b4:52:5e:79:
         69:a3:67:fb:e0:d9:97:f2:5e:b9:fd:e5:34:cd:80:2d:8d:77:
         aa:03:98:51:93:70:c5:56:34:42:ae:51:ef:ee:48:2b:3d:0f:
         99:4c:2b:a3:53:a5:35:46:b9:ce:79:5e:f8:3e:d4:02:19:bc:
         ec:67:0c:7b:e5:f6:20:69:32:7f:0e:17:9b:81:1c:b9:99:a7:
         57:39:5e:9f:e4:90:23:58:54:ad:eb:f9:da:43:e2:e2:0e:f4:
         62:c5:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org