Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/9f81722244d30c8d48a210eadaf246da2f6a15f6.roa
File:                     9f81722244d30c8d48a210eadaf246da2f6a15f6.roa (raw, json)
Hash identifier:          9DXl+716mWXIHk6aMpWXlULp/ahoMqXuXTF7Gd9Ugd8=
Subject key identifier:   D7:BC:DD:A2:21:FF:96:9F:D9:95:B5:07:F5:A0:6D:7F:9D:7A:55:44
Certificate issuer:       /CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Certificate serial:       0D0115
Authority key identifier: DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/9f81722244d30c8d48a210eadaf246da2f6a15f6.roa
Signing time:             Wed 24 Mar 2021 14:48:19 +0000
ROA not before:           Wed 24 Mar 2021 14:48:18 +0000
ROA not after:            Tue 24 Mar 2026 14:48:18 +0000
asID:                     264844
IP address blocks:        170.244.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852245 (0xd0115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Validity
            Not Before: Mar 24 14:48:18 2021 GMT
            Not After : Mar 24 14:48:18 2026 GMT
        Subject: CN=9f81722244d30c8d48a210eadaf246da2f6a15f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:f2:0c:3e:83:5c:78:dd:f5:45:5f:b5:3b:
                    3f:62:7c:77:f6:75:66:f3:77:a4:d6:cb:ca:e6:23:
                    f0:38:41:c6:f4:dc:7e:8b:7e:e7:9f:25:99:6d:33:
                    d3:b4:3f:2e:c1:54:38:46:e0:ad:af:d6:12:91:4f:
                    16:ea:c4:90:b7:ed:07:2b:29:68:66:a7:51:cc:b2:
                    7b:d5:b7:aa:fe:5a:04:12:77:1e:d2:22:8e:88:d5:
                    da:88:45:c6:51:27:e4:65:6a:87:4a:4c:f7:23:7d:
                    1a:e0:45:e3:dd:b6:4c:1b:10:c0:2f:0b:ef:d1:91:
                    55:74:90:32:c5:22:e7:7f:5a:7f:c1:e6:9e:f0:fd:
                    c4:53:29:66:47:53:f0:ff:27:45:dd:96:c9:db:e9:
                    46:e7:d5:52:74:73:2d:09:c6:17:a3:5d:e2:20:fa:
                    e6:ba:81:e2:02:ef:1c:2b:f5:e2:2e:ef:86:32:37:
                    23:7f:55:3e:6f:3f:8e:b0:d3:a0:f6:7a:be:56:56:
                    5b:5b:00:74:0b:0a:33:67:1c:1f:1b:89:c6:3a:25:
                    ca:e6:65:ec:ce:6b:a4:86:69:9f:5b:e2:88:d0:83:
                    de:e5:f1:16:9e:94:2a:dc:95:9f:4a:9d:95:6a:3b:
                    f4:ee:a4:29:be:56:45:68:ba:51:01:f8:8d:22:66:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:DD:A2:21:FF:96:9F:D9:95:B5:07:F5:A0:6D:7F:9D:7A:55:44
            X509v3 Authority Key Identifier:
                keyid:DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/9f81722244d30c8d48a210eadaf246da2f6a15f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:82:62:9c:7d:46:15:8a:03:a1:6d:88:ab:64:63:82:26:30:
         d5:03:b4:a3:0e:85:86:3b:7a:e8:96:1f:e7:33:e3:0d:ed:1e:
         53:da:5a:cd:09:d6:69:b8:31:ca:8f:b7:b4:9b:7c:43:2d:53:
         0b:e5:45:22:70:69:88:55:0f:4a:7b:c0:67:b8:de:2a:c6:d6:
         8c:3e:ce:ef:c5:b4:b4:db:d1:a0:00:c3:76:20:49:6a:c2:45:
         ab:db:ae:94:d9:7f:56:4b:6c:42:d7:89:63:1b:d7:cf:88:52:
         9b:52:09:63:85:77:23:3f:80:8e:05:0f:6e:24:47:2c:ee:31:
         3d:12:11:9a:9c:7d:7d:a9:59:84:83:03:ab:aa:7b:a3:63:fd:
         08:b5:e7:62:2f:37:f7:b1:14:c8:11:4e:1a:b6:9d:60:f3:5e:
         ce:ec:19:fa:69:01:53:11:bd:55:b0:80:84:d6:d8:ba:5e:77:
         d0:3e:a3:b4:d0:58:77:ab:22:38:95:8e:ed:81:00:fb:82:18:
         70:f1:f6:d6:82:06:0e:56:ad:2e:7a:43:9a:46:fa:e3:4f:28:
         a6:4f:1b:4a:a7:45:12:82:c0:94:f0:70:8a:9e:0f:65:2e:ec:
         bb:32:1b:b2:35:8e:cb:e7:93:42:68:2e:67:e4:dd:6d:f1:08:
         9a:1a:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org