Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/a6e01409a9f3968f4f595e8f576030581bda95ed.roa
File:                     a6e01409a9f3968f4f595e8f576030581bda95ed.roa (raw, json)
Hash identifier:          cQCbeJ3RO3EhFQ9bo6gR3L99tXzpl1b5t5zd3uS5PPA=
Subject key identifier:   6B:5F:27:38:1F:0D:7B:9C:AD:8B:BF:07:C9:AE:C2:3E:98:BA:59:C6
Certificate issuer:       /CN=6693e93c486e730f1cfef8fe615bcbd143f57d5b
Certificate serial:       27062F
Authority key identifier: 49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/a6e01409a9f3968f4f595e8f576030581bda95ed.roa
Signing time:             Wed 21 Feb 2024 14:04:33 +0000
ROA not before:           Wed 21 Feb 2024 14:04:32 +0000
ROA not after:            Sat 21 Feb 2026 14:04:32 +0000
asID:                     264800
IP address blocks:        170.79.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2557487 (0x27062f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6693e93c486e730f1cfef8fe615bcbd143f57d5b
        Validity
            Not Before: Feb 21 14:04:32 2024 GMT
            Not After : Feb 21 14:04:32 2026 GMT
        Subject: CN=a6e01409a9f3968f4f595e8f576030581bda95ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:53:38:fb:5e:54:b0:34:4c:02:a7:0e:03:
                    71:84:8b:18:d1:07:0d:22:74:3c:d4:e8:3b:66:8d:
                    15:9e:ca:f7:9d:8d:73:35:90:2c:99:b9:e6:bf:fd:
                    09:f1:95:88:71:08:b8:3e:35:57:dc:ac:c5:b8:33:
                    a4:71:b2:0f:04:70:90:3c:c2:53:0d:fb:f2:53:2f:
                    90:b0:0e:e4:01:a5:d6:db:50:cf:b1:f6:49:22:d5:
                    96:88:05:65:0e:e1:c3:06:86:ad:4f:bc:11:3e:ed:
                    30:42:5e:c6:5a:ea:c5:96:1a:fe:d8:ae:ae:83:59:
                    26:59:a7:f4:24:5a:79:14:db:f8:01:23:f0:26:f4:
                    0c:11:5f:27:ff:7f:85:54:74:04:bd:0b:f4:12:fe:
                    3e:2c:8b:3e:17:01:6d:46:51:19:b7:4c:20:cf:11:
                    b6:f2:03:ad:58:19:8c:ec:d3:19:6b:89:a1:bb:bc:
                    4e:fd:da:d3:22:aa:5e:93:8d:8c:bb:c9:a4:10:66:
                    65:43:b0:4c:1f:6b:54:4e:a9:52:49:c4:16:46:7e:
                    f5:e4:ff:7e:7e:38:eb:d8:14:9c:0b:d6:21:e6:3e:
                    57:69:cf:1e:cc:a1:bd:2c:c0:fb:b9:eb:90:3a:78:
                    da:d4:9c:3f:4d:66:e1:3c:48:8d:fa:fd:e1:54:46:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5F:27:38:1F:0D:7B:9C:AD:8B:BF:07:C9:AE:C2:3E:98:BA:59:C6
            X509v3 Authority Key Identifier:
                keyid:49:62:A9:0E:30:8E:BE:64:FF:3D:3E:20:BE:19:38:A4:2D:D1:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6693e93c486e730f1cfef8fe615bcbd143f57d5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/a6e01409a9f3968f4f595e8f576030581bda95ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdd615fd-99a9-4841-9e63-c1b50e160365/6693e93c486e730f1cfef8fe615bcbd143f57d5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:e6:2b:cb:24:c6:ee:11:35:c0:ab:32:e7:60:27:e0:33:
         87:8d:87:6d:16:1e:8b:b0:85:34:8f:78:6f:53:e3:ae:b7:36:
         f9:39:1a:0c:08:64:9a:05:69:42:06:e5:a2:f1:1f:ca:69:fb:
         cc:e2:b2:5d:10:ce:ca:64:82:e3:2a:4c:27:4f:76:0c:55:ff:
         f6:6e:c2:f8:6b:48:1b:1c:7d:49:a9:94:37:5c:cd:aa:f0:19:
         02:59:ec:34:ac:80:32:51:0a:8f:ae:3d:91:f1:00:82:d6:9f:
         02:af:d0:18:43:33:89:11:94:9e:bc:9e:45:d5:a6:4c:5a:59:
         b0:4e:df:fa:05:38:01:65:49:36:9d:0d:c9:ee:df:39:d5:6a:
         4a:ff:67:f5:ff:3f:2b:17:76:87:be:63:ed:3c:00:45:a0:90:
         c1:16:a9:64:48:86:06:be:c9:5b:d9:96:50:d5:73:fb:11:9a:
         34:6f:9a:b4:f2:b3:49:87:5d:86:e5:6e:bc:18:ca:9a:dd:0c:
         c6:20:98:79:81:fa:db:dd:7d:b1:37:7e:a4:6b:9d:e4:d7:fc:
         27:0c:5d:5b:2d:0c:a1:e9:f9:c9:56:44:17:c1:d6:64:f9:63:
         54:fb:99:19:f7:9f:a2:34:bb:8e:e2:6c:04:72:86:e5:65:8a:
         e3:85:d3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org