Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa
File:                     76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa (raw, json)
Hash identifier:          z0HfT0J/eY2PmiYcRdnmBKfCx2hvMLU3ZdOZ4L/6agI=
Subject key identifier:   CD:05:1E:C8:FC:40:44:5E:65:D0:E8:1D:9E:4F:3C:CA:53:AD:8C:F4
Certificate issuer:       /CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
Certificate serial:       0DC966
Authority key identifier: 1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa
Signing time:             Wed 24 Mar 2021 14:31:47 +0000
ROA not before:           Wed 24 Mar 2021 14:31:47 +0000
ROA not after:            Tue 24 Mar 2026 14:31:47 +0000
asID:                     27756
IP address blocks:        170.84.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903526 (0xdc966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
        Validity
            Not Before: Mar 24 14:31:47 2021 GMT
            Not After : Mar 24 14:31:47 2026 GMT
        Subject: CN=76571c8a3950be27e99cbfd1f6c0981c45f29a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:c9:a2:4e:09:e0:a4:4f:cb:d1:d8:95:80:
                    0e:e1:c4:49:f9:a1:5e:2f:6a:de:f1:d0:6d:9d:91:
                    9f:27:04:d2:56:78:d6:6b:2d:d7:78:2e:f1:87:c5:
                    d3:7c:a6:e0:e4:a5:9e:22:7f:7e:f7:bf:fd:49:58:
                    d2:54:55:a7:1d:d8:ce:8c:27:41:9b:0a:7f:f4:e5:
                    ce:fd:ac:d0:de:78:e2:32:73:3c:8e:4b:ea:ba:24:
                    b7:ac:cc:99:a2:2b:eb:62:b3:4b:e6:46:50:82:90:
                    1e:11:8e:ab:6f:16:a1:77:b7:ac:8d:70:51:ee:30:
                    a4:c6:46:e4:da:c5:84:05:f4:1e:0f:3b:20:64:ee:
                    41:06:62:3a:ee:f4:08:de:59:02:c6:70:f9:c3:bb:
                    8a:73:dc:bf:a4:2d:d7:9f:c7:c3:98:16:b7:34:0c:
                    0d:2f:46:4b:d5:79:d0:10:23:b8:fd:d1:fd:a7:d2:
                    4a:55:f4:16:51:e0:60:4a:63:38:e4:e6:c9:41:d9:
                    0c:3b:a6:21:04:5d:6f:d2:ef:61:fb:2a:3b:94:5f:
                    38:5d:28:6b:85:ed:1e:28:8b:a2:d7:bc:84:6c:9a:
                    3f:0b:79:dd:1c:b3:95:2a:de:13:ee:f7:61:55:ff:
                    30:2d:7a:5e:37:c7:07:0b:df:8b:85:0f:4a:f5:a2:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:05:1E:C8:FC:40:44:5E:65:D0:E8:1D:9E:4F:3C:CA:53:AD:8C:F4
            X509v3 Authority Key Identifier:
                keyid:1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/76571c8a3950be27e99cbfd1f6c0981c45f29a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:1a:92:94:06:df:14:71:ce:19:b1:7f:d2:e3:f3:76:f0:
         5c:81:06:b4:f1:9a:c4:5c:f6:0c:90:e7:2c:f4:b6:04:73:7d:
         7a:8a:22:e3:10:63:e0:00:a3:7d:69:60:63:55:a3:f5:01:3a:
         c6:fe:0c:ca:36:1b:91:e9:41:8f:72:ab:0e:42:85:84:22:33:
         1a:6c:7b:11:50:13:12:bf:1e:e5:0c:7b:ea:62:5f:c6:fb:a5:
         b2:98:20:f0:cd:34:0d:3d:99:c5:11:28:9a:63:39:79:fb:3c:
         6d:95:de:bb:3e:c4:e1:e5:6b:83:ac:d7:58:64:e2:7c:d2:c5:
         7b:95:cc:5e:c8:c0:23:2f:9c:43:2a:e1:9b:c5:b5:8c:4a:3b:
         aa:07:4e:d0:90:7a:a0:05:c3:fe:00:c1:dc:b1:1c:bd:14:8c:
         c2:5b:84:b5:00:40:bc:33:a8:a8:34:3e:92:61:48:c0:96:ea:
         ad:cf:bc:8f:19:b0:8d:da:a5:dc:fa:13:a0:2e:5a:84:99:cf:
         2b:cc:bd:ca:a2:ee:7a:c6:76:50:ce:39:f5:29:22:6e:6b:81:
         ef:a7:29:99:9a:5b:4f:37:b7:16:e2:88:54:73:2f:b8:06:8d:
         0b:40:9d:98:43:c5:8a:47:71:dd:57:2b:4a:f9:0e:63:39:74:
         84:83:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org