Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa
File:                     3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa (raw, json)
Hash identifier:          B1yugwJOy+2YM/CKbFaehlHS1N5Aybm9jToG3pMvheI=
Subject key identifier:   4C:51:9D:ED:B3:5D:22:40:3F:48:76:0D:80:BD:0F:AC:D7:6F:BA:34
Certificate issuer:       /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial:       0E0289
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa
Signing time:             Sat 24 Sep 2022 02:23:27 +0000
ROA not before:           Tue 06 Sep 2022 01:52:16 +0000
ROA not after:            Fri 06 Sep 2024 01:52:16 +0000
asID:                     64139
IP address blocks:        207.248.0.0/22 maxlen: 24
                          207.248.0.0/24 maxlen: 24
                          207.248.1.0/24 maxlen: 24
                          207.248.0.0/23 maxlen: 24
                          207.248.2.0/24 maxlen: 24
                          207.248.3.0/24 maxlen: 24
                          207.248.2.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918153 (0xe0289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
        Validity
            Not Before: Sep  6 01:52:16 2022 GMT
            Not After : Sep  6 01:52:16 2024 GMT
        Subject: CN=3170e64a127bf589ddb1b6bb21d33e5dc532d639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:6d:ba:39:0f:2f:eb:88:1e:0f:11:81:c8:
                    ba:4f:d1:90:48:ff:e7:1b:98:1e:03:fe:b0:e4:a9:
                    cd:12:9f:9e:49:fb:9b:4f:da:72:bd:c3:1c:5f:49:
                    0b:6e:f3:24:3e:3a:d2:b1:cf:c6:00:f1:b9:b4:13:
                    0b:35:e0:35:4c:f5:91:fc:36:e1:43:79:67:ea:8d:
                    89:7c:3f:af:5f:12:32:a2:a8:fb:1d:9d:a2:c1:02:
                    f5:49:3f:de:1c:fe:55:fd:af:bb:ab:58:84:28:9b:
                    62:17:2c:fa:e7:dd:01:08:6e:13:fd:1e:69:87:e5:
                    db:ef:0e:23:88:84:24:c1:84:bb:4e:7f:e9:4e:b4:
                    92:dd:6b:af:67:a2:21:6e:4d:d0:d1:b7:1b:87:69:
                    dc:66:be:4d:cf:66:da:e4:0f:97:fa:c3:b1:3c:9b:
                    11:56:6e:29:55:f6:a0:66:a9:ba:06:c1:15:6f:7d:
                    df:45:cd:f5:1d:98:ee:e6:c3:ae:13:bc:61:6a:b3:
                    cb:0e:44:37:18:83:e9:6c:85:68:76:df:de:be:f9:
                    6a:65:d5:b5:33:23:6e:17:76:72:3a:c6:f6:e2:5d:
                    a3:11:03:14:e5:bf:34:8b:bc:b1:be:76:2a:0f:11:
                    26:62:40:c5:8e:3a:0e:a3:34:0a:c2:2a:ed:29:e5:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:9D:ED:B3:5D:22:40:3F:48:76:0D:80:BD:0F:AC:D7:6F:BA:34
            X509v3 Authority Key Identifier:
                keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:f7:e0:14:14:37:fa:b4:74:b5:9a:82:27:a8:b3:47:73:
         02:6d:db:4e:7e:cf:32:61:e1:a6:8a:aa:33:7d:78:fb:f8:e8:
         ef:a1:f9:b3:58:8c:56:f1:70:7d:29:78:e1:77:ab:4d:05:65:
         dd:ab:49:33:66:08:a7:a9:47:db:9f:e7:11:ec:12:e8:0c:b5:
         cc:b6:f4:0e:90:26:07:3a:6b:d0:88:b6:b3:7c:f1:16:50:72:
         4b:e1:d0:24:67:54:88:b4:5a:2f:dd:34:b8:ec:1d:fa:9e:51:
         ac:26:e5:e5:5c:7d:b6:ff:f7:92:a2:b9:26:0b:18:94:23:fd:
         20:e4:d6:82:61:d9:7d:0b:06:e7:22:88:ad:dd:34:48:65:4c:
         d3:cd:b6:13:ab:05:8c:b1:47:3e:ba:8a:4e:56:66:b1:ea:b1:
         10:2b:94:e5:a2:d6:2e:70:e8:bc:52:02:4f:37:0d:dd:ff:c1:
         35:54:6c:c8:9f:4e:18:62:fc:b0:bc:09:ce:15:30:76:50:92:
         71:22:e3:40:13:1e:a4:7d:ce:b5:90:71:88:12:93:c3:96:cc:
         e6:b2:31:47:07:01:14:43:65:bf:f7:81:5b:e3:45:52:8d:fa:
         96:53:25:1d:da:fb:e7:1b:7f:6b:7f:81:f0:82:68:fe:4b:6a:
         8e:60:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org