Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/3c5caf86aca429d60b79a55554e7dc503003830d.roa
File:                     3c5caf86aca429d60b79a55554e7dc503003830d.roa (raw, json)
Hash identifier:          NLcGjJACS3D0RHOvkDbwcZHzZ/KEvRbhBMDaM276lDM=
Subject key identifier:   70:DB:98:17:28:51:D6:47:3E:C8:CE:62:57:51:54:18:BD:B6:1E:A2
Certificate issuer:       /CN=a9822324130ff130f6e927415dc987319696bc18
Certificate serial:       0A0D75
Authority key identifier: D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/3c5caf86aca429d60b79a55554e7dc503003830d.roa
Signing time:             Wed 24 Mar 2021 14:47:33 +0000
ROA not before:           Wed 24 Mar 2021 14:47:33 +0000
ROA not after:            Tue 24 Mar 2026 14:47:33 +0000
asID:                     61317
IP address blocks:        170.246.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658805 (0xa0d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9822324130ff130f6e927415dc987319696bc18
        Validity
            Not Before: Mar 24 14:47:33 2021 GMT
            Not After : Mar 24 14:47:33 2026 GMT
        Subject: CN=3c5caf86aca429d60b79a55554e7dc503003830d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:df:ef:b9:8c:db:48:5c:96:25:93:61:ce:
                    b0:92:4b:77:d2:9b:14:0a:46:30:84:6b:f9:76:d1:
                    32:4c:c4:d7:56:03:b4:56:5e:f2:e1:3f:42:5e:cf:
                    15:15:0d:eb:55:59:9e:bf:d3:d9:92:b1:b3:b3:5d:
                    b0:6f:5a:b3:1a:a4:a1:bb:a1:90:54:f9:c3:67:4a:
                    0b:a9:ac:c7:61:79:73:05:ad:ae:fa:77:78:77:f5:
                    b5:47:68:f7:c5:b3:ff:18:60:ea:45:58:fe:6f:af:
                    30:e2:20:aa:f4:66:0d:1c:4d:bc:27:40:16:2b:85:
                    92:59:25:13:11:c6:95:24:15:0a:0d:7d:09:49:02:
                    14:8d:c6:3c:b8:1d:3f:ca:72:d4:bd:d7:b1:57:3c:
                    8c:47:d3:5c:26:52:2b:e1:bb:83:c6:38:43:cc:c6:
                    d5:1f:d1:cd:6b:36:a3:83:b0:a9:85:4f:cb:4d:e2:
                    0e:b4:ad:d2:22:cc:4c:06:5f:0d:4d:30:a1:d0:42:
                    19:85:60:9b:ea:30:6f:fa:e7:ff:af:47:12:87:84:
                    95:5d:af:9a:1b:2b:9f:89:91:5b:67:4b:9c:71:fc:
                    f1:61:59:c4:20:c0:1c:8e:24:08:17:af:dc:e7:81:
                    74:1e:e4:95:96:ad:3b:a1:0b:1d:e3:1a:a5:70:91:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DB:98:17:28:51:D6:47:3E:C8:CE:62:57:51:54:18:BD:B6:1E:A2
            X509v3 Authority Key Identifier:
                keyid:D9:44:AF:05:55:5F:96:75:F1:82:C9:85:AA:38:02:41:02:AC:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9822324130ff130f6e927415dc987319696bc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/3c5caf86aca429d60b79a55554e7dc503003830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/033092e5-540a-4839-8e9a-c41afdb67e58/a9822324130ff130f6e927415dc987319696bc18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:22:4b:1d:6c:34:2e:10:f5:54:25:e4:d2:2b:f5:f1:12:e9:
         aa:9c:d4:ee:a8:31:0b:89:80:5a:64:31:55:d3:45:93:1d:2b:
         b2:2c:e2:bf:30:f6:1a:54:f2:fb:19:7a:04:20:b3:42:c8:18:
         93:6a:2f:3c:c3:42:e0:84:a8:0f:f5:a2:2e:0a:22:48:53:3a:
         75:da:f9:c1:01:19:81:4a:b6:78:74:67:08:47:1a:f0:cc:4e:
         ea:ab:30:5a:1e:06:ad:24:ff:e8:b8:3e:fa:14:45:a8:8c:c9:
         81:b8:00:da:45:75:d5:cb:d5:3f:aa:e8:65:8f:f2:15:91:7c:
         ac:6d:b9:99:53:8a:66:3a:95:69:e6:e6:ac:e0:38:8d:22:fa:
         2d:37:ba:5e:5e:78:0b:37:3e:e2:9f:0c:33:02:44:1b:88:00:
         cd:22:97:39:d4:57:83:f4:ee:32:0d:93:aa:58:80:6a:4a:da:
         f4:bd:a6:9b:e5:e7:2a:0c:78:d1:5a:b5:a9:21:66:83:67:46:
         bb:8d:c3:da:ca:3b:81:dd:2d:86:11:08:b2:99:c2:ff:d3:98:
         66:d7:4f:22:33:22:15:c4:66:25:81:80:52:ae:7b:f1:04:c9:
         75:cc:af:e3:1b:d6:ec:0b:b5:6a:5a:d8:5e:a4:38:b4:f7:e4:
         d5:21:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org