Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa
File:                     e170ffb4a95e1dce684735ba480c174a106bf031.roa (raw, json)
Hash identifier:          4bXnValm+3OCrBkF3bekLeiRTvdkJwuqpFuGA++Y2Qw=
Subject key identifier:   9C:BD:72:AD:E5:84:32:5C:5F:38:9F:E3:C8:AF:99:B0:0B:83:1C:87
Certificate issuer:       /CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
Certificate serial:       14F74A
Authority key identifier: B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa
Signing time:             Mon 30 Jan 2023 19:28:33 +0000
ROA not before:           Tue 23 Mar 2021 14:44:32 +0000
ROA not after:            Tue 24 Mar 2026 14:44:32 +0000
asID:                     2708
IP address blocks:        148.214.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374026 (0x14f74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
        Validity
            Not Before: Mar 23 14:44:32 2021 GMT
            Not After : Mar 24 14:44:32 2026 GMT
        Subject: CN=e170ffb4a95e1dce684735ba480c174a106bf031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:30:0f:af:7c:f6:6e:bb:45:af:ef:fc:fa:
                    7c:71:40:73:ca:92:cb:b4:36:79:d8:3b:62:63:ae:
                    42:2e:8b:3b:dc:1d:fa:11:2f:b0:92:f8:74:b5:b8:
                    89:bf:dc:1c:1a:71:7d:08:12:6f:2f:e1:3e:f6:0b:
                    aa:3b:dc:06:1f:e5:f1:53:2b:ae:49:8f:59:5e:11:
                    0c:69:a3:1a:08:6b:92:b0:04:b9:da:42:5b:88:f1:
                    40:31:d5:39:dc:9e:8d:50:12:e0:3f:84:15:bf:05:
                    a7:93:1e:9c:af:1c:2e:90:69:00:88:d9:87:16:0c:
                    cd:29:6c:eb:2a:58:5d:c2:4d:9b:4c:8a:52:c3:af:
                    65:af:51:7b:03:88:55:70:f5:e2:43:4b:44:78:95:
                    bc:62:5a:aa:d7:f8:e4:1c:6d:89:e6:21:7b:56:1e:
                    16:04:fd:c3:e3:33:81:43:71:43:8c:9f:49:7b:47:
                    6b:b3:5a:d1:d2:fe:50:6f:bd:f2:bc:eb:8c:ca:cd:
                    98:67:6a:80:a2:9f:eb:bf:f9:b0:d8:20:20:f1:b0:
                    d1:10:90:5c:a3:11:c8:16:31:61:5c:5e:28:2c:41:
                    cc:76:cd:0d:a6:7b:4a:0f:e2:58:6b:2a:d6:8c:ae:
                    c7:68:35:6a:ac:9b:05:25:96:d9:28:73:a6:ab:bf:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BD:72:AD:E5:84:32:5C:5F:38:9F:E3:C8:AF:99:B0:0B:83:1C:87
            X509v3 Authority Key Identifier:
                keyid:B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:42:7b:00:9f:94:bf:59:4b:c5:73:68:51:59:b3:7c:67:
         1a:7f:87:09:c5:0c:20:df:74:33:70:75:51:5c:dc:40:84:39:
         4b:3c:34:17:28:b3:a5:dc:60:87:4b:d7:eb:91:29:10:55:69:
         52:ca:4f:9b:25:8f:fd:99:4f:3e:4a:82:a9:5e:e2:a7:2b:cc:
         b1:66:62:78:39:be:40:c7:5e:f3:b2:64:85:6d:b1:ba:ec:72:
         29:fc:bc:41:ac:e2:b0:45:46:b0:ab:b5:3e:cc:86:d4:01:40:
         4c:01:36:a6:43:2d:c2:a0:23:38:0f:6b:97:6a:08:3d:74:ff:
         35:98:62:f1:d1:ba:e3:7a:c8:40:72:1b:52:97:51:7c:9e:09:
         84:be:f1:90:fa:bb:9b:3d:9c:66:96:d8:63:2c:4e:c3:d6:58:
         24:ee:e5:3a:92:39:e6:8e:c6:25:d9:57:c9:64:2f:d5:4c:b1:
         b6:28:17:a7:fd:65:6e:57:86:35:f1:cd:8f:ab:ac:3f:2a:08:
         4d:34:79:c0:5d:59:9e:83:da:bc:11:25:de:a2:79:c6:1b:96:
         48:24:e7:62:5a:03:94:ad:26:9d:f1:65:78:83:66:d3:19:54:
         8b:01:5e:f0:da:67:32:4f:63:3f:3b:9c:4f:92:b0:b5:99:a5:
         16:9b:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org