Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/33559c0d065a2b407b8330904f98bf09a6c9bbc6.roa
File:                     33559c0d065a2b407b8330904f98bf09a6c9bbc6.roa (raw, json)
Hash identifier:          IlPsDD8VWDOZG3x1Sjx4hFwB2x7lKTh/3oCDX2BuDBM=
Subject key identifier:   48:8E:E7:2F:93:C4:E1:2D:1E:6B:2A:D8:D8:49:88:C8:3C:0B:7E:95
Certificate issuer:       /CN=8cecba4d06719b0701405567ea7739bad8040b51
Certificate serial:       107DB4
Authority key identifier: 80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/33559c0d065a2b407b8330904f98bf09a6c9bbc6.roa
Signing time:             Wed 18 Aug 2021 11:20:11 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     267788
IP address blocks:        170.247.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080756 (0x107db4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecba4d06719b0701405567ea7739bad8040b51
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=33559c0d065a2b407b8330904f98bf09a6c9bbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:d5:6a:0e:d9:75:c3:3e:be:4b:34:94:c8:
                    69:db:11:8f:02:ef:6f:4e:93:37:4f:f4:41:1c:f7:
                    69:dd:eb:02:ad:65:d9:81:c2:1f:54:54:2c:4a:1e:
                    6a:f7:4f:f0:e8:dc:2b:a3:e3:50:20:a4:7f:62:fd:
                    86:7a:5d:a5:69:73:1e:55:68:45:0a:ee:17:c2:f8:
                    d9:f2:5d:ed:be:e3:51:80:59:58:1b:c1:c0:a9:0f:
                    b1:2e:db:6f:59:20:69:e5:1d:62:5d:97:53:28:88:
                    97:1a:50:21:89:e5:aa:13:5b:e3:fc:23:c8:d2:05:
                    26:b6:12:5e:2f:26:29:e9:60:bb:ea:a3:98:d6:df:
                    91:89:7e:ca:55:45:7d:2f:76:ab:52:80:0b:ce:6c:
                    68:42:14:af:51:44:de:65:14:ed:4f:6e:30:88:f6:
                    e4:ed:c3:b1:f1:8f:eb:5f:17:2c:d3:03:d8:dc:3b:
                    79:9f:92:de:c6:a4:6a:24:fa:e2:bc:ec:f7:12:86:
                    d3:e2:f2:01:53:43:a0:e1:7c:62:b5:f3:ae:29:e7:
                    27:f0:05:14:ec:0b:aa:af:36:eb:1f:2e:fb:d9:a2:
                    74:f3:d4:31:13:ad:52:3b:b0:e6:fd:b1:24:e0:75:
                    b3:d4:08:e3:af:0f:99:20:fa:47:13:b1:fb:9c:ca:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8E:E7:2F:93:C4:E1:2D:1E:6B:2A:D8:D8:49:88:C8:3C:0B:7E:95
            X509v3 Authority Key Identifier:
                keyid:80:CB:5A:5C:56:CC:08:65:09:95:00:14:30:A2:11:C1:AE:DF:A4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cecba4d06719b0701405567ea7739bad8040b51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/33559c0d065a2b407b8330904f98bf09a6c9bbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228a9cc6-02be-4e3b-81c4-9b936602390a/8cecba4d06719b0701405567ea7739bad8040b51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:81:bc:d7:3d:d9:da:7d:a6:55:d7:d4:0c:29:8f:b5:17:
         68:7f:01:1b:0c:df:1d:29:26:84:91:ff:7e:03:45:f0:2c:d3:
         9e:e7:29:0d:ff:e0:1e:c0:45:f9:45:8d:0d:39:95:74:dd:a0:
         34:42:36:c1:a6:b0:18:cf:3c:90:09:1c:96:6e:bd:fc:c5:db:
         2f:70:20:fd:12:b7:b7:b3:c1:77:72:6e:e1:56:26:64:61:16:
         2c:0b:80:cd:e2:5a:86:5e:27:c8:45:91:39:16:01:66:79:93:
         c4:4e:ab:b1:e3:c2:d0:ff:f0:73:b4:42:c5:d8:c0:09:91:51:
         70:1b:f1:b2:22:e9:c3:c0:a1:3c:df:65:96:42:16:13:ae:7f:
         40:b2:50:88:a6:e2:b9:68:e2:b5:88:3c:75:a4:cc:a8:7a:e3:
         68:7a:73:76:96:92:63:a9:b0:4c:24:0c:b9:01:b8:eb:52:42:
         08:21:35:99:88:4c:f4:55:9d:23:37:0c:7a:60:71:8b:aa:8f:
         b5:6e:8b:6d:78:79:a8:d1:b0:d9:a3:46:07:af:a8:4c:f4:c7:
         a1:e4:7c:ce:f2:05:40:57:0f:36:1c:55:92:87:25:e8:c3:74:
         bc:7f:ea:f0:81:01:fd:f3:a0:ca:c3:8a:1f:f5:dd:45:69:d4:
         ff:09:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org