Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/a07325cb70478295ba8d89b3a41f287e2414925d.roa
File:                     a07325cb70478295ba8d89b3a41f287e2414925d.roa (raw, json)
Hash identifier:          9nEF0cjrzgUHy8UIgewSdeWODs5+wXIRMinRilSAvxk=
Subject key identifier:   D0:94:5D:58:3E:2D:61:7F:7B:9C:6F:B0:C8:92:2F:1F:A4:E9:EF:C4
Certificate issuer:       /CN=9c7da47e32403057dfd314b092451260ac87e53f
Certificate serial:       23B917
Authority key identifier: EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/a07325cb70478295ba8d89b3a41f287e2414925d.roa
Signing time:             Fri 06 Oct 2023 18:56:13 +0000
ROA not before:           Thu 05 Oct 2023 18:56:13 +0000
ROA not after:            Mon 06 Oct 2025 18:56:13 +0000
asID:                     264858
IP address blocks:        170.82.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341143 (0x23b917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7da47e32403057dfd314b092451260ac87e53f
        Validity
            Not Before: Oct  5 18:56:13 2023 GMT
            Not After : Oct  6 18:56:13 2025 GMT
        Subject: CN=a07325cb70478295ba8d89b3a41f287e2414925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:df:8e:61:e9:b1:f5:82:01:e9:f7:86:1f:
                    17:05:15:d8:54:69:11:3e:78:d8:8d:89:fc:99:37:
                    83:2c:cf:32:f0:63:83:43:e4:4a:7d:ff:f3:ec:da:
                    fe:d5:4f:e4:63:aa:27:67:e1:52:1b:e4:fd:bc:62:
                    63:53:e4:71:ef:5c:da:d9:c7:6b:69:60:73:1d:14:
                    e0:08:16:e6:b5:1b:d4:92:f2:82:27:52:08:3b:08:
                    8d:a7:5e:2d:7a:88:d1:93:1c:b8:e3:fb:c0:29:20:
                    c6:82:f1:94:02:00:31:16:82:da:a8:cb:8c:5b:92:
                    c6:ab:29:58:c3:67:d8:f9:10:c6:d5:61:4e:8d:93:
                    15:ae:c6:31:12:87:11:cd:00:a4:45:e4:ea:62:2c:
                    44:16:77:19:30:60:a1:48:58:01:9a:a0:89:4b:90:
                    07:8e:2f:0f:84:21:bf:48:fa:66:a8:fe:bd:6b:e8:
                    b9:98:1c:e7:74:b9:35:d0:a1:38:be:be:6e:50:b5:
                    66:67:54:a5:b1:6f:41:5c:ee:06:51:b2:91:81:7a:
                    fe:e7:7b:d8:0b:a1:b4:e6:98:a5:54:60:17:10:a8:
                    6b:9e:f4:4a:92:43:2f:af:69:5b:4f:f5:4c:f2:2c:
                    88:6b:bc:62:47:93:77:f3:19:4b:7d:a1:34:98:03:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:5D:58:3E:2D:61:7F:7B:9C:6F:B0:C8:92:2F:1F:A4:E9:EF:C4
            X509v3 Authority Key Identifier:
                keyid:EF:B2:C0:02:F9:14:87:9E:0E:89:CE:CD:21:7F:0F:CC:47:F4:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c7da47e32403057dfd314b092451260ac87e53f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/a07325cb70478295ba8d89b3a41f287e2414925d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/452ebf73-228a-463e-8444-cee9ead1da40/9c7da47e32403057dfd314b092451260ac87e53f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a4:65:5f:ae:fa:5d:a2:98:c4:ad:e7:32:2f:20:e0:84:0a:
         77:d6:71:ec:a5:a0:92:4c:c7:1a:9d:8a:ba:11:b8:48:4d:f2:
         b2:6e:e2:c2:4c:b8:bb:a3:48:96:3b:e4:50:8d:7c:69:fc:bd:
         4b:9e:35:8d:73:cd:9b:dd:21:6c:9d:ef:f7:08:3f:51:33:21:
         3e:c2:cd:eb:ec:8c:7c:30:e3:96:65:1d:92:c3:d1:44:78:59:
         16:cd:d7:44:c7:1b:b2:b6:13:79:ee:db:4d:14:39:8a:a2:50:
         a6:b2:d7:71:38:5e:d9:09:6e:f3:7a:19:91:1b:47:7c:67:b4:
         ae:33:be:76:4c:97:b2:e6:c0:fc:bc:13:5f:04:96:04:60:d2:
         d9:21:75:3c:e1:14:f0:b7:16:11:f0:78:eb:f9:89:f0:89:ab:
         ef:94:1c:11:b5:c1:da:af:b1:0e:02:7b:81:ba:44:bf:97:56:
         42:66:ed:c4:0c:bd:78:57:89:6e:62:e3:3b:97:b8:3c:18:c3:
         64:b3:f8:a3:87:94:6d:2d:9c:5b:7a:89:e6:e1:6c:36:e4:66:
         d9:d3:3e:f0:92:db:21:e1:0d:34:35:b0:87:67:29:89:1e:67:
         54:98:b8:53:51:a1:6a:61:86:78:ff:27:e4:0c:ab:27:91:ad:
         ed:a3:ea:f7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI7kXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
N2RhNDdlMzI0MDMwNTdkZmQzMTRiMDkyNDUxMjYwYWM4N2U1M2YwHhcNMjMxMDA1
MTg1NjEzWhcNMjUxMDA2MTg1NjEzWjAzMTEwLwYDVQQDEyhhMDczMjVjYjcwNDc4
Mjk1YmE4ZDg5YjNhNDFmMjg3ZTI0MTQ5MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsWPfjmHpsfWCAen3hh8XBRXYVGkRPnjYjYn8mTeDLM8y8GOD
Q+RKff/z7Nr+1U/kY6onZ+FSG+T9vGJjU+Rx71za2cdraWBzHRTgCBbmtRvUkvKC
J1IIOwiNp14teojRkxy44/vAKSDGgvGUAgAxFoLaqMuMW5LGqylYw2fY+RDG1WFO
jZMVrsYxEocRzQCkReTqYixEFncZMGChSFgBmqCJS5AHji8PhCG/SPpmqP69a+i5
mBzndLk10KE4vr5uULVmZ1SlsW9BXO4GUbKRgXr+53vYC6G05pilVGAXEKhrnvRK
kkMvr2lbT/VM8iyIa7xiR5N38xlLfaE0mAPC0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNCUXVg+LWF/e5xvsMiSLx+k6e/EMB8GA1UdIwQYMBaAFO+ywAL5FIeeDonO
zSF/D8xH9PVCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWM3ZGE0
N2UzMjQwMzA1N2RmZDMxNGIwOTI0NTEyNjBhYzg3ZTUzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDUyZWJmNzMtMjI4YS00NjNlLTg0NDQtY2VlOWVh
ZDFkYTQwL2EwNzMyNWNiNzA0NzgyOTViYThkODliM2E0MWYyODdlMjQxNDkyNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NTJlYmY3My0yMjhhLTQ2M2UtODQ0NC1jZWU5
ZWFkMWRhNDAvOWM3ZGE0N2UzMjQwMzA1N2RmZDMxNGIwOTI0NTEyNjBhYzg3ZTUz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpS9DANBgkqhkiG9w0BAQsFAAOCAQEAEqRlX676XaKYxK3n
Mi8g4IQKd9Zx7KWgkkzHGp2KuhG4SE3ysm7iwky4u6NIljvkUI18afy9S541jXPN
m90hbJ3v9wg/UTMhPsLN6+yMfDDjlmUdksPRRHhZFs3XRMcbsrYTee7bTRQ5iqJQ
prLXcThe2Qlu83oZkRtHfGe0rjO+dkyXsubA/LwTXwSWBGDS2SF1POEU8LcWEfB4
6/mJ8Imr75QcEbXB2q+xDgJ7gbpEv5dWQmbtxAy9eFeJbmLjO5e4PBjDZLP4o4eU
bS2cW3qJ5uFsNuRm2dM+8JLbIeENNDWwh2cpiR5nVJi4U1GhamGGeP8n5AyrJ5Gt
7aPq9w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org