Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/f511517427e23ed0a7c5db20d9a0b240e190461e.roa
File:                     f511517427e23ed0a7c5db20d9a0b240e190461e.roa (raw, json)
Hash identifier:          bcO4YAeO2prQrNRQDtgmbR8NxM2AAgRjoYagnhsfrbU=
Subject key identifier:   B1:2C:75:16:3F:C0:C3:C3:C1:15:4C:A9:EC:4E:D7:8A:6F:D1:FC:C9
Certificate issuer:       /CN=12dfd461905739d978bc525fec493be1faf96bbc
Certificate serial:       224147
Authority key identifier: 9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/f511517427e23ed0a7c5db20d9a0b240e190461e.roa
Signing time:             Thu 06 Jul 2023 04:41:09 +0000
ROA not before:           Wed 05 Jul 2023 04:41:09 +0000
ROA not after:            Sun 06 Jul 2025 04:41:09 +0000
asID:                     52468
IP address blocks:        170.82.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244935 (0x224147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dfd461905739d978bc525fec493be1faf96bbc
        Validity
            Not Before: Jul  5 04:41:09 2023 GMT
            Not After : Jul  6 04:41:09 2025 GMT
        Subject: CN=f511517427e23ed0a7c5db20d9a0b240e190461e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:45:67:80:10:53:c5:8a:df:14:42:87:61:
                    21:fc:3a:e1:17:04:a3:8b:0b:b7:dd:6f:5b:2d:af:
                    45:37:54:43:9f:ee:32:a0:56:bf:b7:33:0d:68:1e:
                    61:86:b6:f3:4f:11:87:72:12:d7:52:7a:36:75:a2:
                    50:9f:0f:5d:a8:28:c2:36:fe:5c:cf:84:90:9d:03:
                    83:0a:7b:88:56:c0:52:75:99:90:d1:63:86:6b:d6:
                    f1:7c:52:59:8f:eb:3a:65:66:5b:4b:f1:55:ca:e0:
                    d5:ce:e7:d2:29:03:10:c2:e9:28:ec:b1:77:8c:81:
                    42:d6:34:a2:92:d0:93:9e:51:63:8b:2b:1f:a4:41:
                    fa:42:f9:40:07:70:51:93:79:26:5f:80:e8:17:68:
                    ae:f0:fa:5e:d0:6b:22:20:6b:27:c5:aa:6d:8b:9b:
                    5a:43:f0:2e:70:68:08:d4:13:e5:3d:c5:e5:c1:1c:
                    b6:d4:ad:85:ca:a9:ec:79:9a:d8:e7:47:c7:34:b1:
                    1b:6b:f8:55:43:a6:6c:7c:4e:04:3b:a7:20:fe:1e:
                    13:9c:48:b9:db:c1:06:a2:4f:87:19:36:1a:d9:d0:
                    ed:82:22:64:fc:ae:a4:bc:29:8e:ff:b0:63:f8:05:
                    7b:ed:e7:52:59:ed:e2:49:69:c8:47:13:48:b4:b8:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:75:16:3F:C0:C3:C3:C1:15:4C:A9:EC:4E:D7:8A:6F:D1:FC:C9
            X509v3 Authority Key Identifier:
                keyid:9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/f511517427e23ed0a7c5db20d9a0b240e190461e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/12dfd461905739d978bc525fec493be1faf96bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:5d:85:be:2b:29:25:e9:08:0d:42:a0:d5:52:2e:16:63:
         8e:e4:4d:49:ca:b1:43:33:8d:02:92:08:c5:75:18:53:75:81:
         df:c3:09:14:8c:97:c4:9f:ed:1a:59:d7:99:1e:d6:d8:7a:0b:
         2f:a3:2b:6f:82:c2:e2:dc:4d:42:4f:20:7d:95:94:4d:ba:11:
         cb:ae:55:2d:21:76:17:3f:79:11:69:08:e9:55:e2:2c:63:c0:
         e0:dc:92:75:f4:8e:6d:48:f3:9b:1e:61:39:72:73:d4:a4:84:
         12:f2:e6:bc:c7:0d:49:0f:ad:7a:c9:6b:32:f1:23:90:cb:18:
         59:16:2c:79:11:c7:3f:53:2f:57:42:0d:cc:76:ec:e6:cd:67:
         f3:ef:a1:23:67:10:73:26:99:60:59:7c:0e:80:16:e3:d8:c8:
         62:51:91:49:83:b5:aa:41:ab:b3:9a:a1:8c:22:84:47:68:18:
         4f:c0:ce:7f:27:41:3c:9b:d9:0e:40:55:07:46:90:92:05:2a:
         7f:e5:12:89:b5:f2:08:9c:4f:bc:97:5c:76:36:17:16:b7:fe:
         a7:b3:8a:d0:80:ef:10:35:ee:96:5e:c8:10:f5:eb:c2:e0:c3:
         15:33:f9:ad:64:3b:8b:8d:dd:b3:07:0a:f1:0a:ad:7f:4d:cf:
         12:f1:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org