Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/761b6281d0649b8655e8024b27c665bc215129ef.roa
File:                     761b6281d0649b8655e8024b27c665bc215129ef.roa (raw, json)
Hash identifier:          BgZUkQb83BeIuleekK3QVnHJxoLVNtlD14L+8k0zx0M=
Subject key identifier:   2F:25:FF:BF:18:08:C2:C0:29:00:B9:6B:75:3D:90:E2:09:84:08:65
Certificate issuer:       /CN=9c7da47e32403057dfd314b092451260ac87e53f
Certificate serial:       23BA61
Authority key identifier: EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/761b6281d0649b8655e8024b27c665bc215129ef.roa
Signing time:             Fri 06 Oct 2023 18:56:55 +0000
ROA not before:           Thu 05 Oct 2023 18:56:55 +0000
ROA not after:            Mon 06 Oct 2025 18:56:55 +0000
asID:                     264858
IP address blocks:        170.82.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341473 (0x23ba61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7da47e32403057dfd314b092451260ac87e53f
        Validity
            Not Before: Oct  5 18:56:55 2023 GMT
            Not After : Oct  6 18:56:55 2025 GMT
        Subject: CN=761b6281d0649b8655e8024b27c665bc215129ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:92:ca:70:29:9f:52:a1:3c:7a:1a:d2:19:a3:
                    fd:49:2f:6f:8b:b7:64:18:fb:d1:4e:ec:6c:06:86:
                    9b:33:63:80:94:12:c2:0c:0f:85:6c:07:c5:67:a3:
                    e3:0d:30:6e:e4:7e:98:66:9a:f5:23:2a:7f:e2:d4:
                    e8:09:84:73:9e:de:ba:1d:c8:f1:9c:0c:2c:04:f3:
                    a3:95:8b:93:08:5b:6e:38:1e:6b:83:f8:0e:cd:1f:
                    f7:84:70:b7:52:af:48:61:5e:83:ec:05:d4:21:be:
                    da:5b:f0:24:8a:9d:cd:dc:67:51:09:3a:9a:d3:51:
                    ae:22:01:ec:75:de:76:46:d3:a2:7a:b5:5b:c3:b8:
                    06:1e:20:80:2d:3b:a3:af:9e:7d:8d:dd:6e:4c:37:
                    14:a7:66:d9:97:3c:a5:54:1e:a0:12:ad:2f:7c:2a:
                    16:d2:13:14:d6:41:26:02:50:7e:24:65:5c:6e:52:
                    1f:d6:ef:e7:49:89:4e:0f:65:22:73:c1:d0:5e:ef:
                    33:1f:4e:d9:da:1f:a7:1e:8a:44:f6:7b:12:a2:be:
                    9d:92:9c:80:6c:5b:8e:df:ad:f7:81:b6:8f:fe:dd:
                    56:7d:ef:6a:85:5c:8e:4b:96:34:dd:94:43:b3:7d:
                    e9:aa:f8:b9:9c:af:9b:6d:16:f5:f1:6e:96:e1:26:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:FF:BF:18:08:C2:C0:29:00:B9:6B:75:3D:90:E2:09:84:08:65
            X509v3 Authority Key Identifier:
                keyid:EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/761b6281d0649b8655e8024b27c665bc215129ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/9c7da47e32403057dfd314b092451260ac87e53f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:f2:85:ab:9d:dc:2c:62:b4:4d:9a:dd:42:46:1e:29:7e:
         e6:94:af:7a:a5:dc:fd:93:8c:5d:97:09:03:bd:0b:68:19:45:
         db:49:cf:0c:e6:d2:95:c5:81:85:16:a2:76:15:19:a6:36:95:
         d4:26:6a:e3:e5:62:fb:e9:37:95:f3:c8:2f:6d:f6:64:5f:96:
         f4:14:dc:f7:51:ac:65:49:3b:95:d3:c0:10:5b:9c:c1:45:0b:
         50:39:c3:1f:a8:57:15:d1:0a:c7:df:e9:2f:f4:8e:36:36:15:
         39:c9:91:2f:03:d0:1d:ae:5f:f5:81:06:6a:1e:fa:fa:e6:7d:
         da:4d:db:77:62:38:10:04:69:e9:19:38:38:42:6a:3d:e5:7e:
         46:cc:9e:4f:db:20:39:70:48:81:b2:7b:39:ca:e2:b3:fc:fc:
         d2:19:e3:de:97:ab:36:80:27:b7:59:4e:c2:d9:12:46:c6:bb:
         de:2f:b2:9e:3e:1f:27:05:5d:cd:4a:b8:87:cb:20:96:ff:f6:
         c7:f6:de:cf:50:23:f4:b4:48:14:96:de:91:e0:50:f9:f4:5c:
         5c:8a:2f:ea:0f:1e:02:d4:dd:1c:98:9e:98:ba:82:f9:e3:29:
         8e:8e:9c:a6:32:59:ee:6a:c1:8a:9d:23:c6:35:6a:ef:a6:3d:
         5c:dc:74:54
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7phMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
N2RhNDdlMzI0MDMwNTdkZmQzMTRiMDkyNDUxMjYwYWM4N2U1M2YwHhcNMjMxMDA1
MTg1NjU1WhcNMjUxMDA2MTg1NjU1WjAzMTEwLwYDVQQDEyg3NjFiNjI4MWQwNjQ5
Yjg2NTVlODAyNGIyN2M2NjViYzIxNTEyOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhZLKcCmfUqE8ehrSGaP9SS9vi7dkGPvRTuxsBoabM2OAlBLC
DA+FbAfFZ6PjDTBu5H6YZpr1Iyp/4tToCYRznt66HcjxnAwsBPOjlYuTCFtuOB5r
g/gOzR/3hHC3Uq9IYV6D7AXUIb7aW/Akip3N3GdRCTqa01GuIgHsdd52RtOierVb
w7gGHiCALTujr559jd1uTDcUp2bZlzylVB6gEq0vfCoW0hMU1kEmAlB+JGVcblIf
1u/nSYlOD2Uic8HQXu8zH07Z2h+nHopE9nsSor6dkpyAbFuO3633gbaP/t1Wfe9q
hVyOS5Y03ZRDs33pqvi5nK+bbRb18W6W4SYu4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC8l/78YCMLAKQC5a3U9kOIJhAhlMB8GA1UdIwQYMBaAFO+ywAL5FIeeDonO
zSF/D8xH9PVCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWM3ZGE0
N2UzMjQwMzA1N2RmZDMxNGIwOTI0NTEyNjBhYzg3ZTUzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDUyZWJmNzMtMjI4YS00NjNlLTg0NDQtY2VlOWVh
ZDFkYTQwLzc2MWI2MjgxZDA2NDliODY1NWU4MDI0YjI3YzY2NWJjMjE1MTI5ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NTJlYmY3My0yMjhhLTQ2M2UtODQ0NC1jZWU5
ZWFkMWRhNDAvOWM3ZGE0N2UzMjQwMzA1N2RmZDMxNGIwOTI0NTEyNjBhYzg3ZTUz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpS9TANBgkqhkiG9w0BAQsFAAOCAQEAc9fyhaud3CxitE2a
3UJGHil+5pSveqXc/ZOMXZcJA70LaBlF20nPDObSlcWBhRaidhUZpjaV1CZq4+Vi
++k3lfPIL232ZF+W9BTc91GsZUk7ldPAEFucwUULUDnDH6hXFdEKx9/pL/SONjYV
OcmRLwPQHa5f9YEGah76+uZ92k3bd2I4EARp6Rk4OEJqPeV+RsyeT9sgOXBIgbJ7
Ocris/z80hnj3perNoAnt1lOwtkSRsa73i+ynj4fJwVdzUq4h8sglv/2x/bez1Aj
9LRIFJbekeBQ+fRcXIov6g8eAtTdHJiemLqC+eMpjo6cpjJZ7mrBip0jxjVq76Y9
XNx0VA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org