Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/7af7ba228b6d7efe6bfed49854cd7e8fec5222e1.roa
File:                     7af7ba228b6d7efe6bfed49854cd7e8fec5222e1.roa (raw, json)
Hash identifier:          ZfHS/j02httweWzDivYtJeYNv+QlBjxDpP5XGl9hXIQ=
Subject key identifier:   4B:07:1E:57:74:07:DE:54:7B:CA:B5:BE:84:73:7D:6C:B4:0A:FB:1A
Certificate issuer:       /CN=f77ab90cbd16229b500c705ad494b563882e5d72
Certificate serial:       170F0B
Authority key identifier: 04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/7af7ba228b6d7efe6bfed49854cd7e8fec5222e1.roa
Signing time:             Mon 29 May 2023 19:38:11 +0000
ROA not before:           Sun 28 May 2023 19:38:11 +0000
ROA not after:            Thu 29 May 2025 19:38:11 +0000
asID:                     270089
IP address blocks:        170.80.92.0/24 maxlen: 24
                          170.80.93.0/24 maxlen: 24
                          170.80.94.0/24 maxlen: 24
                          170.80.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511179 (0x170f0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ab90cbd16229b500c705ad494b563882e5d72
        Validity
            Not Before: May 28 19:38:11 2023 GMT
            Not After : May 29 19:38:11 2025 GMT
        Subject: CN=7af7ba228b6d7efe6bfed49854cd7e8fec5222e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:15:b6:f5:85:37:4c:32:c5:62:57:b4:47:
                    d0:d2:df:e0:85:52:60:c5:68:ae:d7:0d:a4:5d:dd:
                    c6:0d:ef:be:76:cf:ca:6c:50:67:32:93:f5:e0:14:
                    9a:75:7e:55:d0:63:3f:81:bd:d7:23:e6:55:a8:ef:
                    73:a7:f4:f6:72:49:a9:2d:97:f7:5d:80:b5:05:e7:
                    e6:ad:24:e2:a2:b2:2b:75:69:f8:73:72:61:1b:4b:
                    6f:05:e2:b9:44:87:32:ea:78:5c:d4:2b:f3:1d:3d:
                    68:73:8f:23:25:bb:69:a4:64:23:f6:e9:5c:7f:18:
                    e3:c1:1f:3d:5b:96:6e:43:19:79:75:4f:4d:af:3f:
                    f9:bb:2c:45:21:3b:ca:35:77:60:94:3e:ce:f1:b3:
                    24:4b:f4:7c:c4:4b:90:af:1d:78:73:7c:2b:f1:58:
                    0d:b8:5f:23:b1:d1:58:e0:02:26:3e:38:f2:33:47:
                    2a:b7:ad:6d:8a:b3:97:c0:46:6b:aa:be:a2:dd:65:
                    f0:d7:17:d7:12:ea:71:56:68:bf:b1:d0:82:2d:f6:
                    b4:a7:c4:fd:1d:96:87:38:1a:5c:e1:59:bc:b7:e7:
                    be:7c:59:27:12:14:16:5f:09:ea:0a:ad:ac:80:b8:
                    4d:b1:7e:d2:f6:74:81:64:47:8c:c9:41:51:8b:68:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:07:1E:57:74:07:DE:54:7B:CA:B5:BE:84:73:7D:6C:B4:0A:FB:1A
            X509v3 Authority Key Identifier:
                keyid:04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/7af7ba228b6d7efe6bfed49854cd7e8fec5222e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/f77ab90cbd16229b500c705ad494b563882e5d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:d8:4a:f5:34:37:0b:a6:4b:02:51:f1:74:60:7e:5a:ac:
         d3:38:fc:9f:8e:fb:c7:0b:73:e0:ba:63:9d:bc:26:a8:37:d7:
         5c:6f:a8:5b:ed:50:c5:61:d6:db:63:9a:dd:60:0c:25:57:1d:
         c8:27:f0:89:5d:5d:cc:c3:d4:2b:90:7e:13:55:61:67:33:b6:
         33:89:d8:9e:4c:29:08:cc:cb:47:7d:c1:42:ed:33:68:a8:91:
         cb:f8:ed:5a:87:37:8b:b9:a8:44:fa:d0:e1:41:c3:a1:43:4f:
         6b:bb:36:37:44:43:79:b9:2b:7f:67:e5:d7:e8:57:1c:20:6f:
         75:70:4d:3a:25:b7:69:42:b6:4b:d2:18:a8:99:3e:66:5e:52:
         df:e8:23:6f:2c:3b:0d:6d:6e:8d:42:fd:0c:31:1e:49:0c:12:
         01:4a:a1:1f:0e:56:9f:87:41:96:f2:78:af:02:18:22:56:a3:
         e5:f9:ee:b3:9c:53:43:a4:ea:91:28:74:9c:4b:ce:17:12:a2:
         73:c2:98:c2:3d:4d:17:02:5a:fe:2b:49:13:39:7f:8b:eb:ca:
         90:a1:05:75:c3:03:27:24:da:93:16:06:66:6e:c8:a4:67:50:
         11:d5:49:aa:48:5c:75:72:66:e2:98:1d:b5:99:1b:b7:52:cd:
         89:92:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org