Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/50578f2aea2af4cb9ac64a0549a81a1838ea8cb8.roa
File:                     50578f2aea2af4cb9ac64a0549a81a1838ea8cb8.roa (raw, json)
Hash identifier:          qtWesP/r6og4tn7i/+G6v7e8GYlfSTzhwzZCZQ7FoJ4=
Subject key identifier:   22:EF:83:50:88:88:40:89:70:63:2E:2D:79:9B:48:C9:4B:07:B7:A1
Certificate issuer:       /CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
Certificate serial:       1251A0
Authority key identifier: CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/50578f2aea2af4cb9ac64a0549a81a1838ea8cb8.roa
Signing time:             Mon 18 Oct 2021 15:54:39 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     14259
IP address blocks:        170.150.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200544 (0x1251a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e676b8ddc3fa11ce4b5bb1513584be10d9033c41
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=50578f2aea2af4cb9ac64a0549a81a1838ea8cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:d8:e9:2a:2c:b5:ca:e4:39:e0:8c:b5:39:
                    81:0c:ad:27:49:a8:85:a0:9e:93:e2:48:f9:a4:8c:
                    f5:60:12:5a:9b:f0:5d:1e:3f:93:75:f2:fc:10:73:
                    3d:c5:00:74:45:34:77:dc:ff:68:e0:55:0e:23:d0:
                    36:03:a0:31:b8:50:25:c1:f1:57:8c:98:0a:fc:ca:
                    e6:2a:54:11:d3:f1:5d:a2:52:23:ad:dd:5e:c5:0a:
                    68:b4:67:41:69:e4:6c:cd:14:ad:ca:46:2e:08:c2:
                    28:08:91:2f:f0:5e:fa:89:78:9b:14:e2:47:63:24:
                    49:6c:43:98:07:e1:dc:31:97:31:de:d4:63:e5:39:
                    fb:9b:d8:8d:02:14:d8:55:4f:e5:20:cd:1a:ba:32:
                    d6:38:d2:78:b1:99:73:15:3a:82:7a:6d:fc:cc:65:
                    12:74:b8:3d:d0:8b:59:f4:13:8a:47:05:2a:b3:1d:
                    3c:3d:e5:9b:72:6e:f8:09:d0:5b:3f:e2:91:ab:f5:
                    76:c9:98:83:73:ba:f5:bc:1f:cd:e4:29:bd:de:45:
                    a5:77:93:f4:64:21:1b:f6:e9:bc:ae:ab:2c:0b:51:
                    35:00:c2:b1:4d:e7:c2:7a:5f:ac:e2:9d:e1:37:95:
                    34:28:ef:b0:77:3c:cc:d3:a8:a3:2c:97:df:d0:24:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EF:83:50:88:88:40:89:70:63:2E:2D:79:9B:48:C9:4B:07:B7:A1
            X509v3 Authority Key Identifier:
                keyid:CB:58:61:19:F8:B0:A1:1C:E7:AB:9E:E1:7A:57:B5:2F:CE:5B:3E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/50578f2aea2af4cb9ac64a0549a81a1838ea8cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3259ecc0-da3f-4b95-810a-d3774e7dca64/e676b8ddc3fa11ce4b5bb1513584be10d9033c41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:bd:3b:12:5c:dd:51:93:5c:0c:c8:be:80:62:31:47:5f:
         7e:bb:f2:59:73:2d:6d:d1:fd:33:91:e7:91:66:14:a6:7d:55:
         39:e4:26:c3:28:f7:b2:2c:a9:90:72:30:aa:58:69:90:21:8b:
         09:7f:05:6c:9f:d2:74:35:b6:52:99:94:05:7a:e4:dc:88:02:
         a5:8a:23:da:e1:01:d9:fa:4d:96:9d:18:17:f6:18:45:c6:02:
         68:fa:20:8b:b8:70:00:b0:c5:9e:ab:7e:f8:b3:9b:cd:92:16:
         07:f0:2e:e3:5d:4d:e5:58:c3:b0:65:d4:dc:63:9c:86:9d:dd:
         6f:ff:a3:a6:74:1f:df:41:b1:1e:78:2f:45:bc:13:46:50:62:
         e5:8e:22:89:77:0e:be:b5:c3:47:4e:cc:43:f6:2f:19:d2:0a:
         ca:3a:6c:be:c0:16:7a:b6:55:5f:3e:89:ea:61:8f:b8:74:73:
         44:26:34:fb:30:d3:4a:b4:21:e9:70:90:03:ff:3e:c6:f6:4d:
         dd:69:7e:b3:11:fc:ec:7c:f6:2e:e4:ec:0d:e0:5b:1f:7f:00:
         b8:95:52:6a:e2:aa:ab:bb:c1:39:af:81:dc:e3:e2:d1:f8:e0:
         0a:cc:b3:01:9d:8e:a8:69:5c:db:39:03:21:08:b6:86:5b:c3:
         fd:c0:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org