Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/0eece0481c5c03fc1273c850a35fac9b202ca095.roa
File:                     0eece0481c5c03fc1273c850a35fac9b202ca095.roa (raw, json)
Hash identifier:          vpXRJwNMLjf+4T1g5syZc24RhJeWsrQ5dA6lvp95v1U=
Subject key identifier:   C3:DD:31:CB:03:3C:95:68:12:D4:9D:81:DA:25:D5:D9:F9:1B:5F:02
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       224EA8
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/0eece0481c5c03fc1273c850a35fac9b202ca095.roa
Signing time:             Fri 14 Jul 2023 20:39:29 +0000
ROA not before:           Thu 13 Jul 2023 20:39:21 +0000
ROA not after:            Mon 14 Jul 2025 20:39:21 +0000
asID:                     266904
IP address blocks:        66.231.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248360 (0x224ea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Jul 13 20:39:21 2023 GMT
            Not After : Jul 14 20:39:21 2025 GMT
        Subject: CN=0eece0481c5c03fc1273c850a35fac9b202ca095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:5d:77:05:90:ee:7f:a8:74:0c:d1:24:66:
                    cb:30:0a:d1:04:03:66:cc:9d:a7:88:40:c1:0e:a2:
                    f0:76:a0:6f:9c:63:44:5d:c4:ec:57:40:5e:8b:b2:
                    66:ef:04:d9:0a:d0:16:71:22:c7:d0:25:6e:d0:fe:
                    46:2f:35:56:f5:6f:42:41:72:08:9f:87:b8:54:e1:
                    db:15:4f:35:3d:d3:9e:0c:f6:fc:de:ce:79:33:df:
                    43:65:bc:f3:f4:71:a8:b3:5b:f4:40:0d:31:9d:2a:
                    55:1d:26:70:be:8f:68:1e:4d:c6:d2:b6:9e:9a:23:
                    ad:6a:12:02:28:ef:e3:5a:88:a4:3c:a4:0b:aa:cd:
                    3f:a4:3d:20:3f:04:0a:9b:4a:e7:eb:c1:54:cd:d6:
                    22:97:cc:f4:dc:ba:f5:bd:5a:98:93:47:b0:9a:a0:
                    ec:d9:6f:e4:1b:41:d5:1b:6e:8c:55:f5:64:b4:bc:
                    b1:d0:df:c2:89:01:32:65:8e:08:e5:4f:0d:43:7d:
                    3e:c5:c2:61:0d:17:2e:fe:5b:56:17:9c:b2:c1:36:
                    b2:3a:b9:08:89:58:5d:6d:48:ae:ae:bb:33:fa:46:
                    ee:45:89:ca:27:bd:b7:d1:be:d1:66:f1:dc:f5:c8:
                    60:f3:07:6b:15:97:1b:ae:93:b2:db:85:25:e1:b5:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DD:31:CB:03:3C:95:68:12:D4:9D:81:DA:25:D5:D9:F9:1B:5F:02
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/0eece0481c5c03fc1273c850a35fac9b202ca095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:dc:27:d8:2a:6a:5b:2f:fe:e9:9d:6e:82:06:93:9a:bd:
         4e:3e:a2:11:d4:91:3a:bd:db:ee:9f:e7:fe:76:f7:54:6f:15:
         85:28:21:3f:1f:41:38:ad:ac:30:48:08:51:05:a5:8e:87:9a:
         37:05:14:f3:37:9f:b1:e6:9d:0f:ae:ef:84:1f:55:9b:bc:05:
         5d:60:43:78:f7:9a:c8:43:40:dd:ca:da:68:55:09:22:65:ce:
         5d:4f:d9:8d:5e:60:a4:6d:8b:c8:3f:3c:79:a0:48:d1:f2:61:
         a3:1b:33:8b:02:6b:79:7f:14:9d:57:b2:1d:00:2d:5d:34:c5:
         da:7f:b8:e6:91:96:c2:6f:09:de:82:42:b9:97:4d:92:78:c3:
         73:a2:66:fe:10:79:63:74:dc:8c:8b:5e:22:d5:f6:9f:f9:d6:
         a8:18:53:26:9d:d8:d5:50:52:6b:70:cb:68:1c:03:94:4e:a0:
         12:b6:7f:e8:54:2a:fa:4a:f9:bf:6e:3c:cb:70:15:a6:bb:18:
         d3:18:06:28:17:40:6c:70:e5:24:5b:35:ac:ee:d4:20:4b:3b:
         18:a6:72:ea:d1:0c:5e:a5:5b:79:56:41:d8:05:e0:d2:47:26:
         4e:78:75:50:a8:f5:55:5f:90:b0:12:b5:c0:a5:9a:3f:52:8e:
         a9:e6:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org