Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa
File:                     3137302e38342e3230382e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          qwTKboDuEsbOh687fJ24o00k/iYMxyQfTEK3UHFeHH4=
Subject key identifier:   9E:F5:07:BF:44:31:E1:DA:DC:49:DB:06:A8:3C:AF:98:EB:48:87:39
Certificate issuer:       /CN=C85208E92C6DEC6EEB00944C4AB78F0624FA32E4
Certificate serial:       0E7A95A714A1CA8DD8C343C2DBACF73AEBE394A7
Authority key identifier: C8:52:08:E9:2C:6D:EC:6E:EB:00:94:4C:4A:B7:8F:06:24:FA:32:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:43:27 +0000
ROA not before:           Tue 05 Mar 2024 17:38:27 +0000
ROA not after:            Tue 04 Mar 2025 17:43:27 +0000
asID:                     16629
IP address blocks:        170.84.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:95:a7:14:a1:ca:8d:d8:c3:43:c2:db:ac:f7:3a:eb:e3:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C85208E92C6DEC6EEB00944C4AB78F0624FA32E4
        Validity
            Not Before: Mar  5 17:38:27 2024 GMT
            Not After : Mar  4 17:43:27 2025 GMT
        Subject: CN=9EF507BF4431E1DADC49DB06A83CAF98EB488739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:9d:4e:42:42:2b:f8:96:ea:4f:30:43:18:
                    e2:83:a1:e1:92:df:a7:b1:29:c2:d8:f4:63:79:0d:
                    6b:a1:0e:1e:0a:8b:7a:97:06:c0:da:4c:7f:7e:cd:
                    0f:85:44:db:72:76:92:3f:83:f0:d9:54:49:75:7a:
                    18:31:69:71:54:f6:3d:dd:e8:4c:7e:9c:07:af:50:
                    1d:b9:0e:aa:c3:8c:56:38:ea:d9:a8:fe:06:b2:e3:
                    aa:4d:37:26:09:bd:f7:f6:86:c3:c3:00:53:06:21:
                    5a:cc:4a:11:1c:cf:2e:8f:fb:cc:6e:9c:e3:d4:c4:
                    4d:ab:d1:0f:ab:2a:22:ce:63:cc:a4:c3:19:d8:3c:
                    98:57:35:99:94:1f:99:a3:41:e5:a6:0f:6c:f6:9d:
                    cd:a8:0d:40:94:21:5f:10:7d:c6:e9:7b:f7:81:31:
                    ab:bf:a5:18:99:73:a2:53:71:1b:04:03:03:5a:0e:
                    e7:d9:c6:f8:28:b1:69:cb:80:82:75:b7:86:fa:d1:
                    a6:69:ea:f9:b1:1c:33:2e:32:00:21:9b:80:d9:74:
                    9c:bd:ef:ea:12:a6:8f:7b:06:82:14:a6:08:7c:de:
                    71:25:9d:bf:a4:da:70:f2:6a:c4:8e:8d:e2:92:9d:
                    c3:fa:a8:81:15:05:62:b8:66:25:6c:c1:c3:c2:6e:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:07:BF:44:31:E1:DA:DC:49:DB:06:A8:3C:AF:98:EB:48:87:39
            X509v3 Authority Key Identifier:
                keyid:C8:52:08:E9:2C:6D:EC:6E:EB:00:94:4C:4A:B7:8F:06:24:FA:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C85208E92C6DEC6EEB00944C4AB78F0624FA32E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A80BB5335C6243E0BC003449105493416FFE580845B9248E36FE7032DD4818B7/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:b8:ca:88:59:0f:77:46:0e:2a:fb:49:1e:d0:58:4e:f3:
         e3:0a:c7:88:6f:73:ff:dd:c4:00:dd:09:80:48:45:c3:5b:dc:
         6b:32:49:29:8d:b1:8c:2c:b6:91:81:71:45:09:63:b9:94:be:
         7a:dd:78:1f:9d:c4:a1:8e:79:b9:22:75:52:94:d0:80:19:d7:
         83:51:78:66:f3:a6:e9:ac:2b:4e:7f:14:ba:cb:21:35:cf:3c:
         66:39:29:ac:ba:24:67:bd:9b:a1:1c:e8:2a:77:20:a6:cf:3b:
         00:3d:e9:9e:d1:c8:bc:56:c8:07:b1:21:df:8f:d0:bc:fb:0b:
         9c:96:c5:e2:6c:2b:5d:1f:ff:f3:b2:ab:6b:0b:f9:fb:4b:33:
         2a:ff:45:2f:2d:72:b3:fe:c9:6b:c9:a8:a6:4f:57:b7:28:a8:
         59:99:ba:77:df:94:a6:b3:53:59:0e:b8:90:7e:33:23:4d:54:
         b2:e2:15:07:cf:32:1f:55:b5:4d:e5:dc:95:6e:ae:97:67:ac:
         4b:97:d0:8d:04:fa:13:27:1a:da:aa:ec:b0:8f:dd:70:be:77:
         c8:ff:18:a3:47:86:b0:c0:89:fb:f2:80:ea:76:65:87:14:bd:
         9a:08:31:bf:e2:1f:79:91:cc:34:34:5f:ca:99:c0:ff:3a:63:
         a0:ac:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org