Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/f9f94797a687af4e017380d1e6995ac2d58b755f.roa
File:                     f9f94797a687af4e017380d1e6995ac2d58b755f.roa (raw, json)
Hash identifier:          1KRUehi45iwn/H5Mi8GOSyxQzixiOhOHT+5aD1twSng=
Subject key identifier:   DE:AD:6E:28:C3:E2:7E:56:35:CF:31:F7:A7:38:1A:CA:F3:BF:60:F4
Certificate issuer:       /CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
Certificate serial:       0F8E3D
Authority key identifier: 21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/f9f94797a687af4e017380d1e6995ac2d58b755f.roa
Signing time:             Sat 19 Jun 2021 05:15:45 +0000
ROA not before:           Sat 19 Jun 2021 03:00:00 +0000
ROA not after:            Fri 19 Jun 2026 03:00:00 +0000
asID:                     198949
IP address blocks:        170.238.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019453 (0xf8e3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
        Validity
            Not Before: Jun 19 03:00:00 2021 GMT
            Not After : Jun 19 03:00:00 2026 GMT
        Subject: CN=f9f94797a687af4e017380d1e6995ac2d58b755f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:cb:61:0f:20:2f:a8:83:ee:b8:92:e5:f8:
                    be:7b:b6:a6:04:19:fd:1a:6c:84:71:ed:02:47:79:
                    43:31:cc:7b:97:8d:6b:18:32:7f:2d:b0:46:c4:7f:
                    bb:b6:8c:8b:b0:98:4d:3d:f1:49:7b:09:c9:47:fe:
                    b9:59:f2:29:c9:a0:79:72:8f:b7:da:18:cd:bd:f4:
                    61:7e:61:51:cb:a0:16:bc:f0:85:ef:b6:aa:90:65:
                    39:7c:4e:36:76:70:9d:83:dc:39:f0:07:59:0c:e4:
                    f6:2e:1f:48:f8:a3:c8:61:42:ba:02:e6:0f:06:7d:
                    6f:ee:9f:93:a0:1e:8e:5e:25:5a:44:aa:c0:fc:db:
                    8e:9d:9d:b1:a1:b8:fa:a1:12:5f:87:25:31:ab:d5:
                    45:a5:63:fd:87:50:91:23:7b:3d:3d:4d:39:53:b1:
                    a2:be:e3:c3:90:c1:60:be:01:ca:6d:64:13:96:c4:
                    24:97:84:0a:de:89:8a:57:e1:2c:02:85:c6:b7:0b:
                    c7:f7:58:43:04:d7:db:b1:d1:4f:aa:e5:e1:9f:9d:
                    25:a3:67:9f:f9:ea:ae:2f:1a:5e:80:59:e3:2d:d0:
                    8e:33:96:de:13:cb:6e:7b:23:54:e5:64:92:83:05:
                    37:1e:10:72:4b:d4:7b:61:29:b4:5b:55:c4:a4:ec:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AD:6E:28:C3:E2:7E:56:35:CF:31:F7:A7:38:1A:CA:F3:BF:60:F4
            X509v3 Authority Key Identifier:
                keyid:21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/f9f94797a687af4e017380d1e6995ac2d58b755f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:db:62:60:9f:96:6a:b0:5b:31:38:48:fc:33:02:b4:c6:50:
         42:c0:63:e8:cf:00:8a:3f:f3:90:b2:7d:80:3e:88:71:8b:6e:
         a5:de:e2:19:c1:c8:e9:60:1f:ea:8f:92:54:e5:94:48:c1:29:
         1b:43:ee:a8:70:61:3c:cd:d6:7d:df:42:ee:ec:c9:31:87:49:
         ef:20:cf:d9:76:0e:4d:74:5f:92:18:bf:3f:33:c2:86:91:d6:
         d0:ba:a5:04:18:61:2d:d0:f7:01:af:26:f8:01:e7:90:dc:06:
         0d:b3:91:70:22:70:23:6a:23:bc:a1:a1:7c:ba:35:00:94:58:
         65:32:42:47:61:9f:49:97:76:08:37:40:6f:11:b8:db:01:ff:
         47:2a:d7:ab:21:89:91:f0:7f:4c:3a:9f:08:35:a0:80:98:25:
         40:f5:77:dc:f5:c7:71:4a:60:17:2f:96:8f:c5:74:ca:7c:44:
         fe:c1:18:01:3e:78:78:a2:1d:16:81:e7:c4:9b:3d:80:b2:4b:
         c7:e9:1a:33:91:06:72:cb:2f:86:1a:11:f4:66:3a:0c:3d:5f:
         01:17:0b:84:63:11:45:eb:25:b8:2b:c4:dd:43:47:ab:72:c5:
         04:22:33:71:e2:0d:45:c9:24:a6:8f:2d:75:a2:67:8f:49:24:
         90:dd:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org