Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa
File:                     5d2dd3f50ddb565f07a795426c432e885395d0de.roa (raw, json)
Hash identifier:          kma31Tg9USDnRoNeSLqFoVjC15lAv3v6V2BEbBgfGmU=
Subject key identifier:   4A:CC:3A:90:96:F2:7E:AF:5D:40:3F:0F:16:D0:69:20:72:9B:F9:3A
Certificate issuer:       /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial:       0DBB43
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa
Signing time:             Wed 24 Mar 2021 14:29:57 +0000
ROA not before:           Wed 24 Mar 2021 14:29:57 +0000
ROA not after:            Tue 24 Mar 2026 14:29:57 +0000
asID:                     12150
IP address blocks:        143.0.244.0/22 maxlen: 22
                          170.84.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899907 (0xdbb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
        Validity
            Not Before: Mar 24 14:29:57 2021 GMT
            Not After : Mar 24 14:29:57 2026 GMT
        Subject: CN=5d2dd3f50ddb565f07a795426c432e885395d0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:4d:69:1a:b4:5b:34:56:fa:50:cd:32:4d:
                    7b:75:d6:49:94:63:7c:f1:c5:51:30:1e:7a:ab:e5:
                    4b:f0:4f:a2:da:4e:62:2f:d9:54:61:a6:0f:92:5c:
                    60:31:1d:2c:e7:87:64:f4:d8:5b:54:4c:4e:64:ee:
                    eb:a5:a9:7b:07:3a:30:71:2a:ad:d6:d2:c2:88:86:
                    c3:b5:a7:63:39:d7:45:1c:02:a7:9a:52:fa:df:ae:
                    89:d0:52:89:55:ff:ef:a9:76:9e:cf:0c:dd:c1:45:
                    c3:e8:3a:eb:18:12:ae:1b:dd:1c:2a:c8:6f:78:40:
                    f3:55:0d:8c:6c:f0:3b:a3:11:a1:61:37:0b:94:1e:
                    fb:b1:12:cc:a1:c4:41:79:cf:c6:af:a2:6d:df:15:
                    82:ae:10:c6:22:65:5c:68:00:d4:f8:26:f0:1b:09:
                    a7:df:31:68:88:c3:2e:04:e3:cb:ac:cd:42:d6:31:
                    5e:9a:b7:92:07:43:57:77:74:0c:ca:15:28:e3:c1:
                    43:ee:5a:14:f9:62:db:aa:0b:bb:55:68:15:7e:73:
                    64:b9:a3:9a:78:c9:6e:9e:33:69:75:89:56:77:ae:
                    33:33:81:cd:ca:36:03:df:ee:21:e1:2b:fc:29:64:
                    1a:bb:79:c9:f2:9b:93:90:16:96:70:73:76:28:49:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:3A:90:96:F2:7E:AF:5D:40:3F:0F:16:D0:69:20:72:9B:F9:3A
            X509v3 Authority Key Identifier:
                keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.244.0/22
                  170.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:4e:03:81:81:47:ef:7c:3a:8e:2b:90:c2:7d:69:3a:52:
         06:d7:e8:e1:c3:e9:43:89:44:c7:ee:b5:e4:f8:09:25:aa:7e:
         77:ad:06:62:8f:00:ad:36:34:88:cf:d4:22:82:65:9c:34:20:
         17:78:1a:40:27:9d:b8:e7:ef:36:07:e1:5e:33:60:2c:27:77:
         58:e0:f4:da:71:6f:ab:2d:a4:86:23:9b:60:b9:44:6f:40:70:
         c3:24:aa:aa:38:00:30:f8:a5:5d:6a:36:1c:70:67:d4:d4:43:
         2c:df:08:89:60:d3:51:1e:e9:c9:42:8b:f7:cc:ab:4a:3f:64:
         e4:fb:15:21:c4:06:68:51:0a:0c:31:81:4e:8e:03:a3:96:cc:
         91:e7:91:da:0f:7d:58:c3:1e:35:c5:42:2d:f0:12:fb:2c:ae:
         46:17:8a:b1:92:d4:00:43:f2:7f:40:9c:59:5d:38:54:40:8b:
         77:91:79:48:ea:b7:1f:71:c7:ee:30:64:9d:9c:f4:ac:23:ed:
         7e:4d:32:e7:10:16:69:3a:8d:53:15:96:d8:8d:ea:23:54:0b:
         1e:f9:fa:3d:ad:3c:9c:6b:84:44:9e:93:c1:7c:19:7c:1f:9d:
         a8:94:52:c8:c4:19:97:bd:8f:07:ec:f1:9c:a6:ef:d3:dc:d4:
         6e:b7:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org