Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/67dc4f9ffc533bd582fb816ae0b9193179a1d295.roa
File:                     67dc4f9ffc533bd582fb816ae0b9193179a1d295.roa (raw, json)
Hash identifier:          625hH3lALjylQf+Xmx16VDHnOA3ZZ2wpVSzzug4wnqA=
Subject key identifier:   6B:5A:4D:90:54:08:B9:F9:6E:0C:98:9B:B5:62:71:3B:D4:BE:ED:EA
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       246B1B
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/67dc4f9ffc533bd582fb816ae0b9193179a1d295.roa
Signing time:             Thu 28 Sep 2023 19:11:23 +0000
ROA not before:           Wed 27 Sep 2023 19:11:23 +0000
ROA not after:            Sun 28 Sep 2025 19:11:23 +0000
asID:                     52468
IP address blocks:        170.244.210.0/23 maxlen: 24
                          170.244.209.0/24 maxlen: 24
                          170.244.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386715 (0x246b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Sep 27 19:11:23 2023 GMT
            Not After : Sep 28 19:11:23 2025 GMT
        Subject: CN=67dc4f9ffc533bd582fb816ae0b9193179a1d295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:f4:17:48:62:8b:1a:52:f9:36:20:07:64:
                    b9:c1:64:e4:44:f0:75:8f:e8:03:95:5a:20:6a:48:
                    14:0e:5c:70:53:8c:31:a7:12:b7:df:54:68:37:88:
                    e6:e5:f1:36:ad:2a:51:6e:51:90:a4:54:ff:e6:8e:
                    a5:d8:5d:20:20:e7:e3:cd:a7:a8:00:c2:b7:77:61:
                    eb:93:e7:d5:b2:d5:5e:62:fe:7d:50:05:51:20:e7:
                    ac:e8:b6:f2:17:5c:61:38:77:22:36:ae:87:60:49:
                    81:e3:f9:9f:19:85:41:d2:da:48:16:43:0a:75:22:
                    ff:fa:48:1b:34:76:c0:c9:2a:66:63:b2:56:c9:ef:
                    b0:89:31:e7:2f:2b:8c:51:d5:62:b1:b4:4e:4c:98:
                    b5:df:90:91:b9:19:81:d9:14:cc:9b:30:c8:a4:eb:
                    c7:2d:9f:3a:bb:01:89:70:2a:ac:50:4d:6d:b8:f4:
                    b9:07:b3:ab:5c:4d:2e:6e:4a:38:e7:50:eb:a1:b7:
                    c2:6f:ed:3b:9e:b7:6e:84:de:a8:60:a6:e5:1c:aa:
                    62:a9:98:ec:4d:b3:07:f1:9b:01:a9:8e:7d:51:09:
                    eb:92:07:69:f0:67:55:c6:47:f0:3a:76:d4:ed:81:
                    93:77:0d:66:29:76:d9:b5:8c:20:22:14:f3:29:02:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:4D:90:54:08:B9:F9:6E:0C:98:9B:B5:62:71:3B:D4:BE:ED:EA
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/67dc4f9ffc533bd582fb816ae0b9193179a1d295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.209.0-170.244.211.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:26:b0:cd:40:8e:7c:e8:a1:a7:b6:77:d3:7f:bc:ef:ad:1d:
         05:79:56:26:2a:ff:86:ae:6c:8d:0d:ac:3b:ae:cd:47:74:9a:
         ae:a7:29:01:af:9d:90:86:07:98:a7:ee:d1:67:15:9d:69:f1:
         ba:b1:5e:60:d5:e7:fe:16:94:46:b5:d6:0b:7f:7f:b1:1f:fe:
         13:c4:bb:b8:07:2b:cf:60:5a:de:88:13:f5:da:71:23:48:8c:
         64:d6:75:d5:c8:ec:34:78:3c:6e:ff:73:06:3c:8b:a7:2c:fc:
         22:14:3b:31:4e:fa:3a:77:b4:da:63:ef:db:ee:34:b6:97:79:
         cb:03:f7:4e:9e:f4:59:3b:9a:5f:5b:a1:bb:6f:d1:a0:48:3e:
         35:c4:83:ff:1e:74:bb:7d:26:38:b6:07:a8:f8:a4:e1:ca:bb:
         49:24:d1:43:25:5c:b4:3b:96:0f:8b:e8:9d:36:b7:17:a6:11:
         34:06:f1:5d:8a:3d:ed:c4:e0:b8:d5:fe:c3:e5:e9:91:b5:0a:
         d4:ae:76:bb:16:b1:cb:3e:50:81:4e:12:bd:22:eb:5c:46:9f:
         96:32:34:9b:21:63:2c:90:a9:c4:93:f3:2c:44:b0:6d:62:2d:
         5e:b3:e1:6b:1f:bf:52:33:02:ac:a8:c9:33:d2:94:e7:7c:99:
         1f:b2:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org