Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6909bc2f2e4d205e22caa62b3ae9fc5cfe8dfb4f.roa
File:                     6909bc2f2e4d205e22caa62b3ae9fc5cfe8dfb4f.roa (raw, json)
Hash identifier:          hwN+dUXMVKDYWKM93HDvvIdaZVE8AvL8IRLhX5L6p7A=
Subject key identifier:   22:F8:CD:EE:78:3A:AC:7F:1C:81:5A:07:49:9B:99:50:68:E5:29:48
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       21F370
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6909bc2f2e4d205e22caa62b3ae9fc5cfe8dfb4f.roa
Signing time:             Tue 27 Jun 2023 02:43:15 +0000
ROA not before:           Mon 26 Jun 2023 02:43:14 +0000
ROA not after:            Fri 27 Jun 2025 02:43:14 +0000
asID:                     266841
IP address blocks:        170.83.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225008 (0x21f370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Jun 26 02:43:14 2023 GMT
            Not After : Jun 27 02:43:14 2025 GMT
        Subject: CN=6909bc2f2e4d205e22caa62b3ae9fc5cfe8dfb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:0e:a3:e0:cf:87:01:65:fa:4f:8e:fc:36:
                    33:6c:c6:be:c2:56:f3:66:37:8b:34:4f:f7:a2:11:
                    86:ab:c2:da:dc:af:13:e8:6d:cb:c1:c4:c1:6d:35:
                    15:0c:87:63:a3:78:70:40:8a:4d:37:5d:d7:cf:84:
                    c7:0d:e4:39:41:04:97:ce:f8:ef:5c:f2:8a:e0:65:
                    f6:65:30:ea:fe:52:10:b5:45:8b:0a:69:a7:42:30:
                    3d:09:74:a6:c3:44:63:e2:15:03:ed:82:aa:33:94:
                    ea:dd:8d:2e:06:70:bd:c5:fa:2c:f8:a4:8b:02:c1:
                    a1:7b:ee:f2:16:84:62:8e:59:ad:89:ba:a6:f4:2d:
                    fb:1d:f7:00:33:7d:9d:c1:c4:31:c9:9a:0a:7f:cb:
                    d8:03:53:dd:fc:bd:2c:e5:7d:97:0b:e7:88:4b:21:
                    a5:6e:d2:6e:5d:13:b4:d1:c1:5a:73:4b:69:60:b3:
                    e7:28:3e:42:0e:f2:aa:9d:2c:47:67:60:c9:1a:90:
                    43:37:fa:aa:95:ae:c6:82:60:45:c1:9e:98:35:df:
                    a0:36:3b:33:c0:ec:54:34:82:53:74:ee:e8:3a:28:
                    8d:54:d5:96:19:28:e9:ae:87:2b:26:18:46:c5:06:
                    15:63:00:69:76:ff:fb:94:29:54:ed:be:ce:ed:cb:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:CD:EE:78:3A:AC:7F:1C:81:5A:07:49:9B:99:50:68:E5:29:48
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/6909bc2f2e4d205e22caa62b3ae9fc5cfe8dfb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:45:28:c2:76:18:33:1a:d1:1e:52:60:69:a8:ba:9a:d1:
         54:c4:8d:f6:f8:d5:39:d0:28:be:cf:50:bf:2e:c4:33:a6:81:
         1f:f6:c0:d6:82:dd:bf:58:54:e2:b5:fa:d5:2c:21:fb:0c:d3:
         10:17:de:e4:a2:96:53:f0:34:c2:7c:b9:6a:8e:ab:7f:c9:47:
         a9:30:24:fb:08:95:91:b3:9b:e2:bf:05:81:d6:cb:81:7b:9e:
         c1:91:ed:4e:76:77:6b:dd:56:38:b5:13:4e:41:4b:74:dc:e1:
         c8:a9:91:f5:0c:4c:08:d0:52:a4:6f:ed:7e:9c:36:ff:c9:eb:
         cb:c9:71:2b:7d:05:96:01:b1:38:b7:0d:f5:5d:39:ac:93:1e:
         07:e9:9e:8d:86:50:39:a4:8a:bb:7a:4f:ba:a3:de:31:6f:1c:
         aa:54:1f:1c:80:fb:75:07:0d:da:02:53:b9:af:77:9f:50:e3:
         e9:be:90:ae:73:e1:5d:d8:ce:ad:e0:72:90:14:c1:c6:de:0b:
         53:16:e7:dd:af:d1:ac:53:88:81:d9:68:0a:c5:2a:f8:d5:e7:
         ce:dd:dd:a3:28:be:a1:cf:db:3b:d2:4d:61:fc:86:61:91:43:
         6b:39:59:6e:29:b3:77:8d:7f:05:5d:5a:d7:69:35:4b:1a:51:
         c0:f2:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org