Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/10da99410376ca4becf268b198e3f8d8b74eb6bb.roa
File:                     10da99410376ca4becf268b198e3f8d8b74eb6bb.roa (raw, json)
Hash identifier:          6gIOzeH4zvkPUZ5zmqbMQi+GmQnqPs69mdQjuSU1cdE=
Subject key identifier:   16:8C:FC:01:FC:0E:1C:B2:CE:84:B8:38:56:D3:A7:26:06:CB:FF:CB
Certificate issuer:       /CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Certificate serial:       0D0A6D
Authority key identifier: DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/10da99410376ca4becf268b198e3f8d8b74eb6bb.roa
Signing time:             Wed 24 Mar 2021 14:48:19 +0000
ROA not before:           Wed 24 Mar 2021 14:48:18 +0000
ROA not after:            Tue 24 Mar 2026 14:48:18 +0000
asID:                     264844
IP address blocks:        170.244.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854637 (0xd0a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Validity
            Not Before: Mar 24 14:48:18 2021 GMT
            Not After : Mar 24 14:48:18 2026 GMT
        Subject: CN=10da99410376ca4becf268b198e3f8d8b74eb6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:63:6f:b2:fb:6d:46:86:8a:04:29:0c:9a:
                    e7:f1:7f:10:e2:98:c8:10:8e:bc:8e:72:d5:e3:68:
                    45:43:83:ab:b3:b4:c4:a0:b3:63:66:dd:11:ef:c4:
                    10:45:28:cd:af:ef:24:88:9f:40:6e:0c:bc:00:22:
                    44:85:5b:ff:cb:4c:1f:56:8c:1a:86:bd:f5:a0:bc:
                    8b:60:52:05:b2:d7:c9:0d:d0:c4:2b:67:14:b1:d4:
                    af:bb:de:0f:77:d0:07:39:74:f1:09:16:62:e5:3a:
                    91:fd:89:dc:a1:54:78:6b:9f:64:3b:c0:d5:8b:ee:
                    4a:b8:56:3a:9a:be:fc:05:8a:64:84:1e:73:2a:72:
                    f7:8f:10:f9:d7:2d:32:f9:6d:65:e4:a4:8a:95:ec:
                    55:b9:4f:e3:80:4a:49:bc:b0:af:fa:9b:de:14:62:
                    79:b5:f4:a2:9e:20:56:ca:a9:e6:fc:85:db:3a:83:
                    f8:60:3f:56:40:01:4b:72:97:19:83:15:6d:3c:6b:
                    13:54:f4:a0:ba:22:f1:3a:c4:73:28:f6:6f:8c:25:
                    e9:38:73:c8:29:b3:4a:e0:63:06:3b:43:0d:a2:f9:
                    bd:b1:e8:d9:93:51:46:27:5a:23:eb:88:3a:63:89:
                    5f:56:b4:3c:b8:47:90:be:b8:6e:8f:23:2f:0e:39:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:FC:01:FC:0E:1C:B2:CE:84:B8:38:56:D3:A7:26:06:CB:FF:CB
            X509v3 Authority Key Identifier:
                keyid:DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/10da99410376ca4becf268b198e3f8d8b74eb6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:97:da:01:97:8c:e2:40:1d:87:ac:2d:a9:a0:d9:40:40:c7:
         22:81:c6:a4:df:9f:71:ae:34:47:d0:71:65:9b:20:05:05:ed:
         8a:37:0c:68:6c:06:d4:35:5f:b5:cb:b5:7d:07:12:9b:10:96:
         07:f3:93:cc:e1:de:7d:ef:62:e7:17:28:bc:e9:cd:58:38:52:
         9d:c4:f4:95:9d:93:59:00:04:a9:d1:a5:ad:68:69:dd:65:43:
         3d:28:71:ac:0e:96:6a:0e:bd:38:46:23:22:a3:c4:39:94:96:
         d8:ac:2b:9e:56:97:aa:12:6a:db:7a:bf:f6:10:ea:bb:5c:6f:
         33:1c:ba:95:78:f6:ef:23:ed:81:39:00:0f:57:e4:8e:e7:7f:
         48:c6:34:b9:68:b3:c1:2f:e5:e5:8f:df:63:3f:ed:db:12:5f:
         e5:ef:8e:d8:cf:ba:f8:7c:58:17:d2:f9:d7:06:f5:9a:6b:9e:
         d9:f5:8b:3e:ae:26:08:0a:88:b0:41:44:6c:4f:b6:a2:f0:38:
         9c:17:c1:c6:19:90:b4:40:90:5d:b6:d6:b4:ea:e4:74:ed:df:
         d3:34:13:ef:60:1b:20:23:12:0f:72:04:7b:6d:46:ef:d1:c8:
         23:e4:2c:8a:a4:8f:33:92:b1:21:d1:95:a4:ab:dd:24:14:df:
         0e:ec:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org