Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/9792720b1b6e0fd19bc124c17d445e5932581aaf.roa
File:                     9792720b1b6e0fd19bc124c17d445e5932581aaf.roa (raw, json)
Hash identifier:          SlivQLfak8LABRiUxPvV6VylzjbHd7lL/S83Zlfz7c0=
Subject key identifier:   FD:47:8E:B3:56:59:62:A8:D2:69:77:44:30:8F:53:FD:23:B2:A8:EC
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       258849
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/9792720b1b6e0fd19bc124c17d445e5932581aaf.roa
Signing time:             Sun 10 Dec 2023 07:30:00 +0000
ROA not before:           Sun 10 Dec 2023 07:30:00 +0000
ROA not after:            Tue 09 Dec 2025 07:30:00 +0000
asID:                     266776
IP address blocks:        170.78.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459721 (0x258849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 10 07:30:00 2023 GMT
            Not After : Dec  9 07:30:00 2025 GMT
        Subject: CN=9792720b1b6e0fd19bc124c17d445e5932581aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:1d:6d:4c:ae:01:17:39:17:3d:3d:e6:7f:
                    37:ec:4f:48:8f:79:50:13:52:79:9a:fb:18:8d:57:
                    5b:09:ca:29:91:66:95:e3:bd:28:4f:71:2b:7b:16:
                    2f:38:68:74:c3:be:fb:ac:05:94:76:68:8a:84:56:
                    96:8b:6e:1d:30:03:d6:5e:a4:87:46:ee:81:23:3c:
                    a1:76:cb:02:85:28:7c:49:1f:9d:c7:d4:4d:6a:4e:
                    99:c5:c5:0f:3e:a3:97:20:43:9b:93:ab:2d:14:e0:
                    fb:d6:2c:2c:f4:1d:aa:80:ba:9a:7e:1f:d7:46:33:
                    b4:ab:25:89:55:0a:a9:f0:d6:03:9d:25:e9:5d:7c:
                    07:cf:e0:6a:24:b3:16:63:78:51:da:75:d5:84:9d:
                    78:c8:92:a8:bb:7e:33:34:ae:52:94:ef:6c:a8:ad:
                    cc:98:a4:eb:96:af:ee:c4:7f:6d:f0:03:a4:89:73:
                    ea:84:43:73:f7:82:5b:cc:23:9a:0d:8b:94:03:92:
                    11:63:48:4d:9a:ab:dd:85:90:0e:11:b3:fa:58:e8:
                    6b:7e:a8:27:2c:c8:62:13:94:01:98:55:db:8f:52:
                    d3:11:62:30:b5:f2:eb:a7:11:58:72:fa:10:d2:cf:
                    e4:75:1e:8a:59:0e:4d:91:9c:98:c6:2e:b1:83:47:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:47:8E:B3:56:59:62:A8:D2:69:77:44:30:8F:53:FD:23:B2:A8:EC
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/9792720b1b6e0fd19bc124c17d445e5932581aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:76:52:be:13:80:00:9b:5d:51:f6:d1:89:4e:48:34:f6:
         11:40:4a:62:59:6e:04:fe:f1:a7:f0:ab:fd:94:5e:65:79:20:
         53:42:a4:aa:e2:9c:9c:5a:d4:2c:0f:63:b3:5c:fb:80:c8:6c:
         51:4b:8b:0b:c6:1e:5f:f9:90:68:ac:11:ec:69:0b:c8:af:b5:
         97:d6:22:da:2a:6d:58:cc:1c:2a:08:e7:25:b7:1b:34:33:d9:
         de:af:86:3b:97:4a:c7:21:22:c0:39:c4:4d:e4:63:ed:ad:54:
         14:95:f9:c3:ba:1a:73:00:83:30:8f:45:78:20:6b:f9:12:ca:
         29:3e:9d:3c:75:0d:65:80:0f:32:c6:02:71:4c:8f:f0:51:f1:
         46:1a:b4:f8:d2:99:8d:38:17:11:e1:2c:b6:b1:44:e9:fa:8b:
         c0:52:7a:92:0b:cc:b5:a1:eb:b6:89:26:aa:33:cd:bf:89:20:
         b7:16:47:63:b3:a7:f3:7b:7e:68:f0:57:63:3b:6d:0a:ba:26:
         0f:aa:f9:65:dc:c0:cf:4e:d8:b7:76:8a:41:77:5d:37:b5:83:
         36:27:83:f6:4e:75:df:4e:32:6d:96:be:1c:5a:02:92:c0:50:
         8b:56:72:dc:2c:c0:5e:a6:56:11:62:7a:75:4e:1a:0d:86:a2:
         51:c7:6d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org