Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/de2e3cd1fcdb9f032735d64461903da0005e8178.roa
File:                     de2e3cd1fcdb9f032735d64461903da0005e8178.roa (raw, json)
Hash identifier:          gWf2/hBGEF6R6XYkqkTk+Ngk+OYYqGhqKqw8sCY3+PI=
Subject key identifier:   AF:13:01:38:3C:C8:BB:B5:2E:A5:9E:5E:E8:D1:F7:43:48:AD:25:81
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       2473AC
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/de2e3cd1fcdb9f032735d64461903da0005e8178.roa
Signing time:             Thu 28 Sep 2023 19:11:25 +0000
ROA not before:           Wed 27 Sep 2023 19:11:23 +0000
ROA not after:            Sun 28 Sep 2025 19:11:23 +0000
asID:                     271882
IP address blocks:        170.244.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388908 (0x2473ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Sep 27 19:11:23 2023 GMT
            Not After : Sep 28 19:11:23 2025 GMT
        Subject: CN=de2e3cd1fcdb9f032735d64461903da0005e8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:2e:87:10:1a:50:3b:ec:98:d2:23:46:b8:
                    3c:3a:15:a3:28:13:55:c7:1c:8f:61:9a:89:f1:15:
                    e5:dd:f0:ad:12:ef:96:20:0d:4c:f7:ae:14:f7:35:
                    03:9b:02:22:2d:8d:7a:58:d1:80:7d:a4:cd:d2:5c:
                    66:f1:a7:fb:dd:fa:fb:a6:ab:f2:68:70:78:f8:b6:
                    c3:c7:c8:86:64:19:20:f6:91:4d:f6:62:7b:9d:ab:
                    3b:b6:0a:0a:33:19:cc:65:ed:ad:3b:17:be:73:bf:
                    2c:99:de:68:4f:55:05:7d:b7:58:14:c2:8d:51:e1:
                    27:f1:27:ce:81:e6:e4:42:19:db:f2:48:2d:36:cd:
                    df:f0:5a:68:c3:c3:88:e1:f8:5f:d9:b0:7c:c4:e8:
                    2f:84:e7:90:5f:50:de:57:4f:00:6e:2f:8d:13:22:
                    1b:4d:da:57:c6:60:19:ed:e2:f5:dd:d6:68:7b:d0:
                    78:1a:cb:aa:15:d4:eb:5d:be:38:6a:d3:3f:fb:f2:
                    eb:8a:4e:b5:b7:40:01:04:c2:1f:98:a6:33:96:f6:
                    80:2b:13:84:c3:a2:5a:dd:54:b2:18:c7:c9:d2:ab:
                    cb:e5:e6:81:da:96:41:9b:25:62:bd:7e:e0:22:02:
                    b9:b7:28:af:b6:83:f6:3c:ef:33:46:2e:97:29:c2:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:01:38:3C:C8:BB:B5:2E:A5:9E:5E:E8:D1:F7:43:48:AD:25:81
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/de2e3cd1fcdb9f032735d64461903da0005e8178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:cc:44:35:c6:90:93:53:15:3c:be:34:bb:ba:9d:d8:7a:
         07:35:b8:67:06:9a:82:eb:af:e8:aa:62:80:c2:89:d9:b2:97:
         25:24:09:ba:2a:b8:0c:2a:9c:31:bb:bb:e2:ca:27:e5:7c:a7:
         10:c0:1b:db:d3:70:6d:0d:55:62:ae:e6:fc:4c:ef:da:6e:06:
         5b:31:9c:9e:87:17:22:43:8b:a5:27:9c:87:a5:c6:14:aa:42:
         14:ea:b5:99:4f:2a:9b:cf:2f:ca:f1:87:d1:e5:a1:f1:63:56:
         c1:dd:71:0c:b9:6b:92:2c:3c:5c:d2:05:8b:40:4a:55:aa:0f:
         29:77:d5:5b:d2:18:8a:55:b8:1d:a4:5e:07:8c:64:28:34:92:
         67:0a:0d:82:6a:48:3e:7e:bd:79:a4:fc:77:53:78:d3:b1:08:
         2b:2f:c2:c9:2a:60:33:4f:e0:19:67:bd:ee:57:66:74:b9:65:
         9d:7a:82:af:89:2e:a7:0c:5e:42:bf:df:9a:1e:7f:26:dd:41:
         4a:93:3d:ac:5a:7e:28:93:16:fc:f6:62:63:2d:64:cd:3a:93:
         3b:8b:3f:e4:cb:a0:a4:36:54:a8:23:70:47:fe:11:27:bc:34:
         91:42:18:7c:da:f6:2e:d9:6a:d8:a0:e3:69:7c:45:08:db:d0:
         c8:ab:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org