Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa
File:                     e6fed5464661771e17aa2509607fd41c31684814.roa (raw, json)
Hash identifier:          xuReJhCLXA+ikESxHSUB33+upHz7UTpne/XElZO2mvc=
Subject key identifier:   C2:FC:91:10:FC:DE:35:5D:11:39:BE:00:74:F7:E0:A6:13:4C:0C:8A
Certificate issuer:       /CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
Certificate serial:       1BEFE9
Authority key identifier: D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa
Signing time:             Wed 10 Jan 2024 14:35:22 +0000
ROA not before:           Wed 10 Jan 2024 14:35:22 +0000
ROA not after:            Sat 10 Jan 2026 14:35:22 +0000
asID:                     267832
IP address blocks:        170.245.158.0/23 maxlen: 23
                          170.245.158.0/24 maxlen: 24
                          170.245.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830889 (0x1befe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
        Validity
            Not Before: Jan 10 14:35:22 2024 GMT
            Not After : Jan 10 14:35:22 2026 GMT
        Subject: CN=e6fed5464661771e17aa2509607fd41c31684814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:a4:6c:65:c5:65:75:11:ba:ca:c2:24:5a:
                    c2:9f:cb:7e:91:d3:df:4a:2a:c0:60:c3:4c:ed:c1:
                    8f:62:07:9f:ab:01:ce:86:e8:7f:68:ee:17:5b:12:
                    ce:e9:7a:dc:5c:1e:3b:48:4a:21:62:63:90:b4:13:
                    80:d5:07:4e:a3:a7:eb:50:c8:d4:66:0a:9e:ff:dc:
                    97:e9:89:8f:86:41:50:26:64:8a:d1:74:05:3e:f6:
                    00:f8:ca:20:1e:82:b8:3a:33:cc:67:82:4e:39:fe:
                    74:96:9c:05:f6:a0:d6:4f:34:cb:fb:93:e1:32:55:
                    24:5c:dd:35:c4:75:1d:b2:ff:5d:45:64:9a:40:ac:
                    15:83:44:92:fe:71:cc:47:72:cb:f2:c7:7c:bc:77:
                    81:21:83:f9:43:d6:e8:1c:63:96:9d:c8:2a:56:4a:
                    07:77:b5:1c:5e:51:d5:0f:fe:bb:f5:6b:6b:6f:76:
                    bb:9e:81:c2:12:70:cd:19:c1:c6:d2:8b:2d:91:7c:
                    85:ea:bc:03:31:ec:95:fb:59:bf:aa:f5:5a:a4:88:
                    bf:9f:85:2c:b6:56:2b:09:67:b8:b5:b6:dd:52:42:
                    40:4d:84:8e:39:7a:69:fe:ea:e7:4a:8a:00:e9:48:
                    e1:35:2a:b1:ed:b3:11:7d:21:f5:72:43:13:fd:9b:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:91:10:FC:DE:35:5D:11:39:BE:00:74:F7:E0:A6:13:4C:0C:8A
            X509v3 Authority Key Identifier:
                keyid:D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:78:b8:42:e0:fa:15:92:ec:8a:ad:00:09:3d:cd:2b:86:3d:
         09:0b:7c:a0:b9:37:93:a4:df:77:1f:e9:a4:65:9c:a6:bc:29:
         c2:8b:d7:5e:66:5b:b4:b1:93:4a:45:05:2e:3f:5b:31:6e:0a:
         26:e6:0f:97:8f:f3:91:fb:e4:21:38:8e:56:9e:a5:66:10:b6:
         f3:0a:97:9e:a6:e4:5e:c8:e5:da:a6:1f:aa:f5:6f:8f:4d:6a:
         2a:63:62:9b:b8:bb:11:c5:58:f6:52:bd:10:3e:69:1b:ee:d3:
         d3:a3:8c:ed:26:8a:b0:10:7b:d6:d6:11:95:46:e1:dd:aa:b8:
         fb:b5:52:bd:db:b0:22:e5:fe:e8:3f:85:d9:36:5f:a1:6d:fa:
         78:ea:62:0f:5b:ec:a1:d1:29:50:85:42:64:9b:1f:77:77:41:
         d0:6e:21:58:96:27:a6:89:c6:97:ca:5f:a7:2c:92:e6:d0:2c:
         72:a0:83:3c:b6:82:54:30:23:17:df:42:e4:a5:be:fb:8a:73:
         24:44:95:bb:6b:c0:2c:3a:bb:a4:fd:78:31:28:14:79:79:cc:
         a6:79:14:86:f0:66:a5:ec:f6:bf:67:29:02:65:ba:64:58:66:
         31:57:2c:b2:e5:94:3f:c4:49:b8:0f:1f:cd:3b:fd:eb:8f:97:
         bf:e0:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org