Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa
File:                     a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa (raw, json)
Hash identifier:          GdvSS7/sftriYTzznEx39x9JCtvxh4athILDwXzMV6Q=
Subject key identifier:   34:45:EE:44:BA:01:A2:B8:4A:34:8D:32:FC:6B:F4:8F:C4:AF:1A:3A
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       22261C
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa
Signing time:             Wed 05 Jul 2023 01:51:31 +0000
ROA not before:           Tue 04 Jul 2023 01:51:31 +0000
ROA not after:            Sat 05 Jul 2025 01:51:31 +0000
asID:                     52468
IP address blocks:        170.244.209.0/24 maxlen: 24
                          170.244.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237980 (0x22261c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Jul  4 01:51:31 2023 GMT
            Not After : Jul  5 01:51:31 2025 GMT
        Subject: CN=a17e9a17af6aed9ad99ae0eb88ea0f40917757ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:bf:46:f2:35:82:d6:96:30:f2:ac:97:7f:
                    13:ea:ee:b4:53:4e:ac:d4:c9:73:be:d3:23:79:77:
                    f4:4c:21:9c:79:a8:92:b2:0c:69:da:0a:48:85:b8:
                    36:ab:85:68:27:7d:f8:a7:31:31:8d:21:7c:b8:82:
                    20:4d:4f:2d:50:44:93:46:4c:0e:2f:0c:36:eb:fb:
                    6e:05:92:c0:75:c9:17:a2:b9:ee:16:7b:65:bd:95:
                    e3:5b:e1:d6:8d:54:41:3a:2a:b8:b2:ea:7b:d2:63:
                    b0:e9:df:8d:bb:52:a7:0b:b2:43:95:25:f8:4b:cf:
                    55:78:fb:b8:7f:d1:33:00:25:1b:d8:ea:79:73:21:
                    14:fd:a1:21:34:99:7e:4f:cf:0b:20:63:a1:3d:55:
                    c2:cb:75:83:f7:27:e8:08:4c:14:4a:02:fe:01:47:
                    8a:f2:f4:bb:6c:46:f5:73:58:da:6e:7d:23:82:06:
                    7e:5e:45:11:88:31:02:6e:a7:f0:8e:d8:b4:08:ba:
                    77:90:46:70:4e:46:14:e0:32:4d:65:93:50:63:40:
                    05:e3:cf:4c:5b:f6:8c:9f:4b:ff:35:e1:f4:4f:30:
                    c5:dc:a4:de:5e:88:fc:5c:e1:73:0a:a1:e5:d8:cf:
                    6f:b5:b8:0d:16:9b:b4:24:e4:15:7d:3d:cf:96:c2:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:EE:44:BA:01:A2:B8:4A:34:8D:32:FC:6B:F4:8F:C4:AF:1A:3A
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.209.0-170.244.211.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:ba:16:2b:2b:4b:49:68:93:9f:65:d0:c6:c1:b4:e0:d4:
         cb:c5:b6:c4:11:bc:1e:49:f2:9f:c2:c6:63:f0:9c:93:77:ed:
         bc:fb:6b:95:d7:aa:9f:1e:d2:ae:bd:55:11:b7:9a:9c:03:3c:
         b1:cc:b4:54:de:2f:ab:58:ed:b0:ea:48:70:e1:5a:da:7a:dc:
         c9:63:ed:46:5d:83:45:de:3c:06:17:72:f2:3e:28:b1:39:ac:
         83:8b:f4:2d:43:c7:d6:9b:01:fe:d8:e3:b3:74:7b:8c:2c:57:
         96:a5:61:c0:3b:da:c1:c7:02:2b:e7:d0:0c:8c:32:9e:03:05:
         95:66:69:88:39:d9:83:00:e4:7d:f6:1d:d1:47:73:e1:de:bf:
         f2:12:24:f0:42:16:09:d0:d3:bf:e6:e0:1d:e2:03:04:d7:10:
         19:ec:16:16:d0:50:2c:88:07:75:ef:59:86:4e:dd:b6:e7:80:
         58:4f:fe:70:55:2c:c0:14:d1:34:da:75:d6:30:0e:56:e1:e5:
         00:6c:b0:b5:91:5d:a3:5d:76:a2:5e:04:7b:a3:40:80:73:cc:
         a3:78:b5:ec:f5:2a:2e:ca:1f:27:e3:9b:04:dd:fd:60:5e:6d:
         f3:97:fd:0a:f0:16:12:83:18:fb:a8:08:83:90:c1:6e:14:47:
         87:55:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org