Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/e205e4c548df000ebef2f220688d2492acff5f02.roa
File:                     e205e4c548df000ebef2f220688d2492acff5f02.roa (raw, json)
Hash identifier:          p/uYzpPj2VZvfgsUcP4jFc5zn6tWzTSnDq6FNqaSigo=
Subject key identifier:   BE:8B:08:8F:4A:50:EC:59:D0:B2:2D:0D:C0:30:E2:E8:D1:A3:A7:6D
Certificate issuer:       /CN=12dfd461905739d978bc525fec493be1faf96bbc
Certificate serial:       223A6C
Authority key identifier: 9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/e205e4c548df000ebef2f220688d2492acff5f02.roa
Signing time:             Wed 05 Jul 2023 13:27:36 +0000
ROA not before:           Tue 04 Jul 2023 13:27:36 +0000
ROA not after:            Sat 05 Jul 2025 13:27:36 +0000
asID:                     52468
IP address blocks:        170.82.156.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243180 (0x223a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dfd461905739d978bc525fec493be1faf96bbc
        Validity
            Not Before: Jul  4 13:27:36 2023 GMT
            Not After : Jul  5 13:27:36 2025 GMT
        Subject: CN=e205e4c548df000ebef2f220688d2492acff5f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:17:2f:76:c7:48:3b:8d:45:10:fb:85:d6:
                    7f:b7:24:e3:02:e3:61:f1:4f:40:0f:00:ac:f3:60:
                    3b:d6:88:fa:d2:27:03:12:d6:48:df:01:0a:79:de:
                    87:bc:84:ee:e4:93:d9:34:3e:53:45:ed:f1:c0:58:
                    2a:eb:8f:51:c2:9b:80:b3:16:71:e9:2d:99:16:3d:
                    7c:d4:24:4f:51:76:00:8c:ce:89:0f:99:4b:ea:62:
                    70:c4:ce:70:bc:49:53:c1:08:6a:63:a5:10:67:ec:
                    91:2b:67:b2:f8:7a:e7:85:d0:26:1e:a7:6c:5f:ab:
                    12:2d:50:da:94:82:28:98:c1:ee:98:d4:09:e9:a4:
                    0e:5f:50:e1:a2:18:2e:8e:78:78:30:3b:33:e5:fc:
                    71:7d:9a:e5:f7:84:11:21:45:c6:72:85:fa:fb:a7:
                    77:9e:34:dd:6f:47:94:87:89:c7:55:88:c2:89:08:
                    46:b4:73:c0:e7:aa:d1:5c:9a:ed:b6:14:0c:8f:0d:
                    8b:ab:cc:5e:4f:49:73:39:e5:03:78:cf:6b:aa:37:
                    e3:54:46:bb:2b:31:f4:c1:12:6e:2d:50:06:74:7c:
                    ea:e7:ae:27:ca:77:65:dd:97:4b:d9:3d:b9:7d:cd:
                    2a:1d:ed:76:d7:60:93:d2:c8:a0:a6:cd:b2:d0:94:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:08:8F:4A:50:EC:59:D0:B2:2D:0D:C0:30:E2:E8:D1:A3:A7:6D
            X509v3 Authority Key Identifier:
                keyid:9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/e205e4c548df000ebef2f220688d2492acff5f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/12dfd461905739d978bc525fec493be1faf96bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:ac:69:5f:54:87:c0:38:27:8d:8f:63:e2:c4:c3:64:54:
         27:fe:ce:b3:06:8d:75:62:1c:1d:10:48:86:b4:d2:2c:35:da:
         ea:19:59:d0:79:fb:71:66:01:4b:df:6d:5e:51:0b:c1:f9:34:
         c7:51:a5:ae:cc:5c:66:29:7b:98:69:fa:70:b7:29:f6:ac:c8:
         ac:38:6f:2a:dc:0d:5c:41:3c:d8:70:5b:15:b0:64:f3:39:40:
         9b:eb:6f:be:cd:9b:c6:8e:88:6a:f9:4a:a9:44:8f:76:a9:f5:
         be:fd:01:7e:26:75:73:2b:c8:12:4b:e4:bc:8f:70:99:27:d3:
         28:e0:bf:bf:d7:0f:76:86:a1:2b:76:4e:b8:64:4e:c1:e5:64:
         1b:72:29:3d:4d:b4:e8:f2:a9:71:f2:f2:63:ba:59:e1:46:2d:
         77:f5:42:0e:b9:87:a4:8b:15:f4:e4:46:e1:35:94:93:d9:64:
         3e:3f:53:94:d3:28:fa:ff:29:b8:0e:c7:92:c5:47:69:e9:db:
         6f:78:86:64:43:d5:8e:3a:3c:3b:fe:e6:e4:c3:9e:c8:cb:23:
         44:c9:22:3f:07:39:7a:5e:e7:c4:34:6a:39:79:6a:f3:8e:9a:
         ad:40:98:52:3e:4a:a4:c5:05:52:a0:88:4e:18:13:42:2a:f0:
         18:e2:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org