Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/c67ed1ae36ebc2943ad963e55bb64db2db7fdd44.roa
File:                     c67ed1ae36ebc2943ad963e55bb64db2db7fdd44.roa (raw, json)
Hash identifier:          j6egTYD4q5pHCoDaLzdMZOUW2UMv7Qm6c3dVwG4GXgA=
Subject key identifier:   B5:94:B8:12:24:1E:A9:9D:A3:06:F4:1D:C0:4F:6F:89:C6:7F:55:7D
Certificate issuer:       /CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
Certificate serial:       0D032E
Authority key identifier: DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/c67ed1ae36ebc2943ad963e55bb64db2db7fdd44.roa
Signing time:             Wed 24 Mar 2021 14:48:19 +0000
ROA not before:           Wed 24 Mar 2021 14:48:18 +0000
ROA not after:            Tue 24 Mar 2026 14:48:18 +0000
asID:                     264844
IP address blocks:        170.244.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852782 (0xd032e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca
        Validity
            Not Before: Mar 24 14:48:18 2021 GMT
            Not After : Mar 24 14:48:18 2026 GMT
        Subject: CN=c67ed1ae36ebc2943ad963e55bb64db2db7fdd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:93:d7:50:8b:28:a6:62:7e:3c:03:47:ba:
                    0c:0c:f8:d5:a0:96:c6:fd:c6:7a:c1:fd:0f:c9:0e:
                    4b:a2:16:87:47:06:10:1a:be:a0:95:97:4e:9f:d7:
                    be:05:a0:79:ad:49:d5:ac:c1:9b:d6:93:33:64:58:
                    7a:70:06:58:e1:87:9e:2d:97:d7:a8:ca:68:fa:2f:
                    bc:fd:ff:84:e6:75:28:c1:5a:92:87:55:7c:1a:fe:
                    2c:0f:24:1d:75:77:f6:91:3e:5f:dc:86:c3:f2:5e:
                    5c:18:91:93:3f:38:9e:ee:01:0a:77:bd:14:8d:59:
                    5b:68:ee:94:83:29:19:68:5c:5e:34:62:66:ab:be:
                    3b:d7:ca:6e:98:be:72:0a:8b:38:c0:c3:56:7d:cf:
                    01:d1:53:ca:6d:e6:38:eb:63:94:29:3d:b5:76:80:
                    a2:a3:19:a2:59:ac:2c:f0:44:21:06:f1:cc:4e:5b:
                    b2:bf:97:85:6e:07:8a:b4:c8:82:ba:13:19:d9:33:
                    86:24:ea:e1:8b:a1:19:2e:77:e5:f2:0b:1b:ab:c6:
                    2a:d7:1b:e8:e3:d1:ce:35:c8:32:53:a2:4c:06:78:
                    9b:d1:bc:05:74:82:ba:52:1d:2e:8f:57:7d:67:9c:
                    c6:4c:3b:8c:67:4e:d2:ad:14:1e:d6:bf:de:da:28:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:94:B8:12:24:1E:A9:9D:A3:06:F4:1D:C0:4F:6F:89:C6:7F:55:7D
            X509v3 Authority Key Identifier:
                keyid:DE:56:3B:D7:B0:E9:E0:F5:75:A3:7D:21:16:ED:95:50:08:AF:46:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/c67ed1ae36ebc2943ad963e55bb64db2db7fdd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/072e8847-5027-4da7-b9aa-ec1bf604f415/22167afa3d1c5c0ae606cc964ba5e8c386a2f4ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:42:3a:5a:12:5e:a2:18:c6:a1:ba:79:f0:7a:91:0f:a1:06:
         c5:d9:38:42:ac:d9:da:18:77:94:39:d0:16:7d:22:af:fc:0d:
         4c:a9:38:3c:56:ca:c2:b8:d5:93:65:02:21:d4:57:8f:7d:1b:
         4f:2f:22:2f:e5:4f:18:b0:a7:02:c4:c0:85:af:68:d1:f6:33:
         6a:45:df:fd:2a:4d:42:a9:71:fb:a5:96:c5:d7:70:f8:a2:76:
         50:c5:ba:db:de:db:c8:63:f1:c5:c7:c9:5d:48:3f:ef:40:a4:
         68:8b:38:29:ee:d4:c4:49:ab:1f:ef:bc:43:ee:64:31:36:bf:
         d8:ee:dd:d0:16:cc:54:3a:30:db:ae:83:94:f2:53:77:e1:50:
         28:f1:c6:eb:8e:1c:0a:08:2e:b1:4e:22:1e:71:26:6d:d0:16:
         30:64:33:7d:84:42:f3:bc:eb:5c:09:c7:de:ec:f6:a2:f6:d1:
         62:6f:97:90:3f:24:90:31:10:b1:ec:9c:f2:f5:87:62:3a:57:
         50:cf:d3:69:2d:69:89:40:24:8e:7c:a4:8a:a3:a6:73:fb:80:
         9f:39:4e:b6:31:d0:0d:68:dc:e4:8b:ec:be:10:7c:d6:d6:0a:
         53:a8:b7:33:b8:77:f4:c3:44:ef:de:5d:93:17:ae:49:e7:87:
         bc:09:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org