Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/e4a8a0cf5ec149f6e3095adf730d579979b86d0d.roa
File:                     e4a8a0cf5ec149f6e3095adf730d579979b86d0d.roa (raw, json)
Hash identifier:          q19FaTeq2CTEwxD8Ah7qcuASu6SgyNyKz7ro78JT474=
Subject key identifier:   1F:8C:F1:1B:1C:57:22:1D:46:22:BB:4A:38:BE:28:B1:34:2F:DD:4C
Certificate issuer:       /CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
Certificate serial:       280C7D
Authority key identifier: 1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/e4a8a0cf5ec149f6e3095adf730d579979b86d0d.roa
Signing time:             Fri 01 Mar 2024 19:35:34 +0000
ROA not before:           Fri 01 Mar 2024 19:35:30 +0000
ROA not after:            Sun 01 Mar 2026 19:35:30 +0000
asID:                     27756
IP address blocks:        170.84.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624637 (0x280c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
        Validity
            Not Before: Mar  1 19:35:30 2024 GMT
            Not After : Mar  1 19:35:30 2026 GMT
        Subject: CN=e4a8a0cf5ec149f6e3095adf730d579979b86d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:d4:29:e7:f2:1d:a5:d8:ba:18:90:2a:43:
                    cf:01:63:1d:b8:ed:90:2e:39:18:85:b0:93:5e:5f:
                    49:49:ba:cf:d9:eb:28:94:a6:a4:55:6b:5b:cf:70:
                    cc:ed:82:24:7e:93:95:6b:c1:d2:19:12:7d:55:e2:
                    03:a3:9a:da:af:2c:8a:d2:72:3c:77:24:e9:42:11:
                    91:cd:60:23:0b:65:0b:61:41:a6:91:47:6f:f4:d1:
                    f6:b7:45:77:6e:91:6c:cd:6d:a2:1f:3d:94:1a:fe:
                    43:18:09:7f:9b:11:f1:6c:b7:ef:0f:01:ae:ea:9d:
                    aa:72:8b:8c:f9:38:b0:d4:99:a4:38:0b:60:38:4a:
                    24:50:9c:34:b9:69:63:c5:25:68:cf:7f:e0:c0:3c:
                    16:2c:69:37:a6:96:e3:3d:f7:76:de:3e:4e:c1:25:
                    83:58:19:26:97:5f:eb:a2:5c:c5:5d:be:90:d8:ec:
                    20:38:12:ce:52:44:19:7b:cb:62:78:85:86:8b:16:
                    20:bf:44:d0:60:03:e4:08:a2:54:f0:46:c9:5f:ad:
                    9c:85:c7:22:ab:6a:9e:cd:f1:eb:1e:3e:9f:6a:50:
                    d4:ce:8c:dd:9c:1a:43:ff:20:68:88:68:c1:2a:62:
                    3d:54:9e:3d:8c:8a:f4:41:bf:df:f4:2f:54:1f:6e:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:F1:1B:1C:57:22:1D:46:22:BB:4A:38:BE:28:B1:34:2F:DD:4C
            X509v3 Authority Key Identifier:
                keyid:1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/e4a8a0cf5ec149f6e3095adf730d579979b86d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:2c:8b:88:a6:52:bd:9e:e6:91:78:68:e4:65:72:dc:41:
         82:ab:ff:41:9e:69:ff:41:42:9b:fa:d4:c2:98:18:9c:8f:3b:
         1d:4f:50:93:6e:39:35:c3:2b:21:bd:50:60:a9:c1:57:4c:43:
         fe:41:16:83:bc:b4:ac:eb:cb:50:75:b9:c3:e0:d2:6e:af:c9:
         dd:2c:69:3b:4d:1f:09:f0:d2:b1:9f:c5:cb:6d:bd:2c:62:6d:
         94:fb:0b:25:bb:e3:27:65:61:da:0c:75:0a:dc:48:0c:8e:b1:
         9a:50:95:f5:ca:22:cb:6e:41:e0:db:5d:37:cd:8f:f3:6f:1c:
         ca:dc:00:dc:52:19:7b:d3:b6:3d:f6:08:84:f1:4c:7b:d9:d9:
         a8:77:b9:52:af:c9:39:3e:4a:f2:92:af:b7:d8:53:df:fb:0b:
         12:fe:7b:11:0a:b2:53:53:f3:71:c1:17:2e:f2:8a:92:21:a3:
         5b:f9:82:a8:47:ca:57:fe:cc:69:33:6c:0c:73:95:3c:e0:e9:
         f8:e4:d5:5f:13:6a:b9:69:22:6d:c9:0b:4b:18:51:7f:06:82:
         95:94:98:f7:a5:78:e1:74:b6:a9:df:55:25:dd:88:71:c4:06:
         82:30:48:c8:08:48:3e:9b:48:a4:5a:b8:a2:e9:70:c0:b2:fe:
         52:dd:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org