Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa
File:                     e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa (raw, json)
Hash identifier:          lBxImeG2kvT6FqMIJkILl8KaXjdyJxSvWZbGS934jvY=
Subject key identifier:   F6:DE:CA:94:2E:4D:48:ED:13:1E:12:6A:7E:09:9F:8B:23:26:74:97
Certificate issuer:       /CN=292568a9684cf9b94c1f106aeb0a9f2fddb0967d
Certificate serial:       0163
Authority key identifier: CB:5F:1A:40:0B:83:D0:D0:A8:5C:2D:DF:7A:56:53:97:AB:64:C4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa
Signing time:             Mon 04 Oct 2021 19:52:22 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     264703
IP address blocks:        170.0.4.0/22 maxlen: 22
                          170.81.124.0/22 maxlen: 22
                          2803:8b40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292568a9684cf9b94c1f106aeb0a9f2fddb0967d
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=e98c01a24c25a9765cbfb0c9d125163d8efc8e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:f8:94:c1:c3:85:df:ea:eb:73:53:ab:c3:
                    2e:19:59:57:df:5c:6a:8e:4f:60:6d:24:a1:15:72:
                    51:c6:07:92:5a:d7:bf:dc:b5:b5:10:e3:52:65:ab:
                    c2:2c:11:e0:46:fa:4c:54:a1:88:e2:ad:1f:67:4d:
                    a3:99:b4:0a:b3:31:f3:4f:f4:20:9d:6c:d5:d2:8b:
                    bf:a0:ae:d4:b8:8c:4a:91:fe:7c:59:3c:88:81:69:
                    54:cd:45:bc:3e:43:d2:de:c7:ce:b0:70:91:a8:b2:
                    c8:7d:96:5d:ec:85:64:bd:79:37:d4:6d:be:e5:34:
                    20:0a:31:d9:82:b9:07:ec:2f:16:96:b4:d0:5f:32:
                    5e:7d:91:7a:28:23:ee:b2:50:70:57:85:4b:7d:6f:
                    16:17:ff:6e:5e:6a:5f:87:41:ac:2c:73:81:60:85:
                    d0:a9:f6:eb:91:e4:64:a2:3b:06:17:67:08:af:89:
                    83:8e:87:e1:1b:f2:9e:26:9e:2d:d3:1a:9d:bc:26:
                    56:ac:cd:c9:87:21:b1:d7:92:b2:9b:2f:fa:6a:06:
                    34:5b:c6:d5:13:fa:0f:69:27:4d:e7:6e:bf:dc:75:
                    44:54:38:90:a0:e9:d4:56:8c:8d:b7:02:03:1d:a4:
                    23:43:69:5b:6e:38:28:1b:cf:8e:22:3a:43:23:29:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DE:CA:94:2E:4D:48:ED:13:1E:12:6A:7E:09:9F:8B:23:26:74:97
            X509v3 Authority Key Identifier:
                keyid:CB:5F:1A:40:0B:83:D0:D0:A8:5C:2D:DF:7A:56:53:97:AB:64:C4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.4.0/22
                  170.81.124.0/22
                IPv6:
                  2803:8b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:5f:fe:60:f0:48:a4:e8:ae:dd:2c:66:55:d4:d4:db:49:
         59:99:d6:88:e6:0d:ec:60:c4:b5:45:d0:ca:92:fb:dc:80:83:
         5b:b8:fc:00:7e:f7:3a:04:a8:c3:94:b8:80:5c:94:ae:f8:a1:
         db:20:d7:12:aa:e7:0e:62:30:bd:d6:58:c5:cf:c4:dd:06:7e:
         80:ca:ec:3c:e9:15:92:bd:88:e1:18:2f:c7:e1:c7:84:c2:eb:
         26:06:9b:bc:cd:0d:1e:d7:0f:8e:1c:5c:05:44:bb:90:ec:1f:
         90:79:a4:5e:5b:33:39:c9:33:72:de:fa:02:45:5f:9b:b2:2e:
         c6:7c:90:e0:72:e9:c2:49:a1:25:08:26:b4:53:ee:6c:a4:a5:
         ad:89:76:69:b4:bc:1e:97:ea:24:0e:1f:fa:64:1e:a4:a5:49:
         f6:f7:19:a1:ee:67:00:b5:80:64:27:6d:7a:f9:71:a9:28:2c:
         a1:e2:76:d1:da:90:6e:c8:81:91:e4:2a:72:f9:32:3b:f3:60:
         33:0c:b0:90:36:3a:ed:ad:6f:c2:8f:02:c5:03:19:36:41:64:
         d8:a7:89:bd:a7:c5:5c:b6:fb:28:d4:d5:c0:19:e0:85:f3:d2:
         34:ba:a3:e5:a8:7a:a2:93:8b:3c:ab:f6:80:d0:7f:f1:3f:6b:
         d7:65:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org