Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/ec90d185e69d185140e769ef5ff8309cf7140a63.roa
File:                     ec90d185e69d185140e769ef5ff8309cf7140a63.roa (raw, json)
Hash identifier:          l+mEEIESrf26s62JvhtyGJOeExsqqofjXSEsCQoDnuw=
Subject key identifier:   AF:C6:1C:94:8C:65:BF:67:EE:21:81:5D:CD:DE:34:5F:64:C7:5B:37
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       2595F5
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/ec90d185e69d185140e769ef5ff8309cf7140a63.roa
Signing time:             Sun 10 Dec 2023 07:30:04 +0000
ROA not before:           Sun 10 Dec 2023 07:30:04 +0000
ROA not after:            Tue 09 Dec 2025 07:30:04 +0000
asID:                     266776
IP address blocks:        170.78.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463221 (0x2595f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 10 07:30:04 2023 GMT
            Not After : Dec  9 07:30:04 2025 GMT
        Subject: CN=ec90d185e69d185140e769ef5ff8309cf7140a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:40:92:70:4d:d8:66:6f:88:93:38:f8:7c:
                    fd:db:c1:ee:a0:c5:76:e5:13:33:72:3d:7d:0b:4d:
                    b9:df:17:59:23:d4:2c:cb:26:4d:93:44:95:77:9f:
                    a2:5c:bf:06:d9:46:8f:5a:d9:41:d2:d9:57:72:98:
                    20:85:36:e0:7f:dd:46:ac:5e:07:2a:85:01:f1:c8:
                    06:ae:18:fe:69:32:53:45:a2:98:da:5e:39:f4:fb:
                    f6:24:08:19:58:6e:b2:d3:58:4b:0c:09:39:da:d5:
                    6b:dc:f0:7f:3b:4e:1e:9d:1f:8d:e2:6d:61:e3:11:
                    89:58:3e:ed:70:df:1f:e3:cd:0d:4a:9d:3e:28:71:
                    e1:89:a1:ca:85:6c:f4:08:6d:ca:a3:74:59:a3:32:
                    af:3c:90:9b:df:1a:ab:5f:89:8a:6a:a4:2c:c1:57:
                    d1:a4:28:86:d8:27:22:24:21:20:0e:95:6e:cd:e4:
                    03:49:8d:d3:bb:8c:3d:5b:78:c6:ac:17:f2:38:1c:
                    e4:13:76:48:55:cf:f8:fc:e9:ef:f8:4b:4b:20:42:
                    ec:f2:2b:27:09:15:91:de:0d:a4:43:b2:e2:c1:e9:
                    16:b2:df:d6:fe:4a:2e:67:bb:06:e4:b9:6a:8f:ea:
                    42:6b:8a:9d:0f:27:6c:61:2c:c7:25:58:dd:2f:13:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C6:1C:94:8C:65:BF:67:EE:21:81:5D:CD:DE:34:5F:64:C7:5B:37
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/ec90d185e69d185140e769ef5ff8309cf7140a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:a5:36:e4:03:4c:65:4e:75:32:a9:d2:2b:e6:6b:5f:cb:
         d1:9f:2d:7a:1e:6c:6d:d2:5d:a8:51:12:ca:bc:b0:1a:7b:46:
         96:5e:d6:a5:1f:60:d6:be:ba:b8:5a:49:e2:b7:bf:a9:db:cc:
         f6:05:87:42:2f:e5:5b:6a:ec:d9:5e:06:96:eb:92:88:79:75:
         f2:21:81:e5:0f:ae:32:50:b2:66:46:8c:60:1f:3d:f4:07:6e:
         f4:2b:5e:ac:fa:09:50:4f:31:a4:f3:61:4a:bb:ab:44:f1:09:
         41:05:f4:f0:1d:4d:32:3d:c7:05:1c:75:a5:48:76:98:d9:14:
         43:e5:18:3b:2a:aa:f3:dd:65:fd:93:60:eb:33:24:de:e1:d3:
         18:f0:da:2f:41:e5:a4:53:4b:c5:22:cf:fb:ee:19:b6:38:04:
         17:79:19:14:ef:ba:cf:0a:1f:70:28:fc:57:c4:ea:58:1e:38:
         08:67:cb:06:aa:04:22:30:3e:d7:20:83:bf:34:69:ac:36:73:
         cc:57:d2:cb:b5:2d:c7:13:93:30:16:1f:ff:c7:84:96:79:85:
         b6:ca:a9:3c:b7:a5:7f:4d:1e:1e:07:56:59:86:f2:48:56:6d:
         57:9f:9b:4b:44:3a:01:e9:25:0e:b1:34:6c:92:28:e4:bc:06:
         31:3f:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org