Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/4d2fa380c654b61d3bdfa9da19f3080c3a02fb77.roa
File:                     4d2fa380c654b61d3bdfa9da19f3080c3a02fb77.roa (raw, json)
Hash identifier:          uGpsQUYCd0VpIJVktf8o4AhrMNTH4kBqXaD5mpuDAbU=
Subject key identifier:   BD:3F:99:75:27:15:8D:BE:2E:A9:46:75:06:5E:EF:7A:E5:EC:DD:86
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       277EEB
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/4d2fa380c654b61d3bdfa9da19f3080c3a02fb77.roa
Signing time:             Tue 06 Feb 2024 15:30:13 +0000
ROA not before:           Tue 06 Feb 2024 15:30:13 +0000
ROA not after:            Fri 06 Feb 2026 15:30:13 +0000
asID:                     22047
IP address blocks:        179.2.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2588395 (0x277eeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Feb  6 15:30:13 2024 GMT
            Not After : Feb  6 15:30:13 2026 GMT
        Subject: CN=4d2fa380c654b61d3bdfa9da19f3080c3a02fb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:a0:7a:4a:6f:29:c8:3d:3c:1d:bd:18:8d:
                    7d:6a:36:9c:14:7a:93:60:95:5e:02:62:82:ee:b0:
                    57:80:c1:a4:af:e2:96:d6:df:35:c3:6e:5b:b3:79:
                    2e:f6:14:9f:4b:c0:66:70:af:19:34:4b:5e:2a:43:
                    5a:20:b7:b7:92:09:2d:8d:08:c0:f3:58:0f:5d:4f:
                    1a:db:4c:43:6f:d6:8a:e9:21:b4:d0:b6:be:68:6b:
                    ff:a5:0f:9e:25:6c:1f:2a:59:c7:ee:8d:20:44:b2:
                    01:4d:3e:9b:0b:ac:34:28:6d:b3:af:09:ff:2a:80:
                    7a:2e:cd:68:01:27:81:35:19:80:d2:30:79:90:42:
                    1a:e5:0c:4e:6b:71:51:78:4f:6a:ba:32:b8:e6:1a:
                    83:10:89:b0:c5:92:45:68:3e:2f:ec:41:42:01:50:
                    42:a0:a8:ca:29:c0:fe:f5:8d:cd:61:f0:e5:f3:f7:
                    37:8e:8e:3e:41:3e:ff:bb:f3:db:a1:62:31:b2:eb:
                    cd:2f:bf:f3:61:60:09:d9:4b:f6:93:55:a4:aa:b4:
                    f3:28:de:5d:84:54:85:47:ad:12:ee:fd:bf:cd:49:
                    b3:52:40:26:cf:36:5f:6b:cd:fb:2e:1e:7b:2a:32:
                    fe:47:ad:35:c4:d4:b0:94:47:21:c1:7d:6a:a1:ce:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:99:75:27:15:8D:BE:2E:A9:46:75:06:5E:EF:7A:E5:EC:DD:86
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/4d2fa380c654b61d3bdfa9da19f3080c3a02fb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:15:8f:32:d0:22:9a:df:fc:3c:00:79:e2:2c:d0:5d:d2:f9:
         c0:5c:6e:7b:63:3c:d7:c0:f3:d1:e6:bd:d5:2d:5f:9d:65:d9:
         4c:9f:86:b8:39:79:4b:34:c3:38:da:f8:0a:87:10:07:08:ad:
         40:96:ef:2b:fc:11:27:71:b9:8f:1e:50:4f:4f:3c:cc:68:46:
         1f:42:24:d2:ad:71:34:d8:18:2f:47:48:18:36:11:91:0b:f7:
         cb:85:a3:59:1c:57:83:ca:41:e9:c8:10:25:d6:c9:44:b8:94:
         7f:56:b8:97:7d:a8:ff:a8:28:87:9d:64:03:06:f5:0c:62:c6:
         f6:2a:26:56:4b:2d:9c:2a:68:7a:f9:e2:d1:f7:8f:ef:65:bc:
         6c:0a:dd:eb:55:78:3f:96:35:1d:19:3a:33:7d:a6:ba:12:a0:
         44:39:7f:a7:68:88:22:24:0b:fc:86:71:45:03:29:34:35:c4:
         b7:76:a3:3b:c3:d6:e2:90:bd:f1:54:89:48:cd:fe:98:8c:b2:
         85:aa:d1:e5:6a:0c:24:96:fe:29:b1:5d:f1:f4:ba:25:da:2a:
         93:94:7c:ea:ba:a8:bf:af:b4:89:4a:cf:97:c9:62:83:32:5a:
         e0:33:fa:66:94:15:c3:fe:d7:e7:8b:4f:fb:d2:54:c5:a6:30:
         d8:bd:a5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org