Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/b7013ee09e588b4503c55e0329de0114f174cc48.roa
File:                     b7013ee09e588b4503c55e0329de0114f174cc48.roa (raw, json)
Hash identifier:          +0lL2bfaKwHjqz86cDH7sFj3H4EsK01L/TzzxjvarKM=
Subject key identifier:   C1:B7:68:22:D6:BD:28:11:E7:21:BD:49:AD:8F:1C:DB:D4:7E:4B:F8
Certificate issuer:       /CN=f77ab90cbd16229b500c705ad494b563882e5d72
Certificate serial:       0396F3
Authority key identifier: 04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/b7013ee09e588b4503c55e0329de0114f174cc48.roa
Signing time:             Wed 24 Mar 2021 14:30:35 +0000
ROA not before:           Wed 24 Mar 2021 14:30:35 +0000
ROA not after:            Tue 24 Mar 2026 14:30:35 +0000
asID:                     270089
IP address blocks:        170.80.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235251 (0x396f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77ab90cbd16229b500c705ad494b563882e5d72
        Validity
            Not Before: Mar 24 14:30:35 2021 GMT
            Not After : Mar 24 14:30:35 2026 GMT
        Subject: CN=b7013ee09e588b4503c55e0329de0114f174cc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:64:d3:05:ee:1b:38:4a:10:2b:c0:00:8f:
                    0a:84:d2:7f:4e:20:50:f5:a8:55:24:37:b1:71:a3:
                    f8:2c:51:7f:69:55:cc:c2:9c:ad:21:e4:12:01:ed:
                    db:38:29:48:48:55:a2:49:82:8a:33:10:aa:e9:42:
                    30:32:2a:7a:a2:a4:27:90:7e:f3:70:3e:aa:92:b8:
                    ea:6b:7e:a6:ff:1e:ec:28:ca:24:c3:ca:74:11:04:
                    b2:b6:85:33:da:13:dc:ed:02:ee:e5:f8:c4:4b:94:
                    ee:1f:66:d7:3c:76:93:58:5a:ae:53:b5:06:d7:b3:
                    22:20:0e:ae:78:f0:e0:76:cf:d2:fa:c1:05:98:29:
                    b5:fc:39:9f:16:bb:32:12:04:8b:ad:09:e8:a8:d1:
                    ba:77:50:43:0e:15:a1:e1:41:46:05:94:90:59:a7:
                    fe:b0:81:bd:45:40:5f:f7:ac:37:c0:61:6a:d4:c5:
                    3e:cc:99:be:6f:c2:fc:02:51:74:c1:52:a7:7a:0d:
                    fb:d9:a7:4b:9b:65:cf:4d:43:e9:21:ce:82:e8:7b:
                    9e:94:12:bb:cc:52:50:a7:82:e7:a3:05:b7:90:6a:
                    2c:90:49:3f:5a:e1:84:a9:bc:7a:9e:6f:2f:8a:66:
                    e3:1d:83:26:9f:0b:f4:8b:a4:1c:2d:63:a7:4a:86:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:68:22:D6:BD:28:11:E7:21:BD:49:AD:8F:1C:DB:D4:7E:4B:F8
            X509v3 Authority Key Identifier:
                keyid:04:E7:DD:2C:10:0C:C6:FF:46:03:3D:6E:BF:1D:72:DF:79:BA:1B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f77ab90cbd16229b500c705ad494b563882e5d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/b7013ee09e588b4503c55e0329de0114f174cc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3767bb87-667f-4c64-a536-fb85599994f7/f77ab90cbd16229b500c705ad494b563882e5d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:3e:2b:a7:a8:5d:6b:3b:6a:81:b6:8f:6d:13:ab:f2:69:
         07:bc:85:1b:10:56:a0:c0:e0:7d:04:fc:07:45:7e:80:ff:e7:
         81:62:27:35:b7:06:12:e5:1a:17:37:12:3d:74:50:fe:15:2a:
         56:36:0c:a5:9b:8b:8a:09:86:ca:c9:58:21:76:ec:98:3f:fb:
         d5:f1:97:1f:a9:d7:b0:72:ad:20:a0:a3:20:0e:cd:d8:e5:70:
         39:46:6b:ac:90:b7:7b:a4:c0:c8:c8:1d:6d:cc:76:71:ef:1c:
         0a:5a:7d:b4:00:2c:9b:15:a6:3c:b2:54:f7:ab:0a:27:44:d2:
         5b:ba:60:89:e4:3c:6a:02:ad:49:96:66:78:07:12:c9:46:ab:
         4e:71:95:70:b7:16:4b:e4:2e:9c:16:ef:b5:5e:68:00:08:7a:
         68:fa:36:1c:b0:1b:2a:e1:9c:81:eb:c9:20:69:c3:35:96:c4:
         01:ac:62:18:92:30:71:9c:b6:51:58:d5:b3:f0:21:29:ff:c2:
         89:29:d1:24:cc:4e:36:4e:9c:2b:8c:4a:af:45:8b:fd:7b:84:
         de:9e:80:c6:81:29:0d:b4:c0:3d:cd:eb:92:63:0e:6f:02:14:
         1c:1f:b8:66:aa:2f:01:84:50:12:ff:87:c9:32:db:c7:1c:72:
         6c:f3:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org