Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/c7a7d4067511f6601d7c196d3a612970cadcd68d.roa
File:                     c7a7d4067511f6601d7c196d3a612970cadcd68d.roa (raw, json)
Hash identifier:          /x1Jtf5TUNxLRT9NF3ytG7wf6Z8X4TfAB3AvQcylmaM=
Subject key identifier:   7C:70:7F:13:4A:26:3C:2A:CD:FB:86:C5:4F:2E:C0:12:74:98:EB:2A
Certificate issuer:       /CN=5fea161e2c66e493ae97ef08f4b440569dd42244
Certificate serial:       0D5465
Authority key identifier: A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/c7a7d4067511f6601d7c196d3a612970cadcd68d.roa
Signing time:             Wed 24 Mar 2021 14:33:48 +0000
ROA not before:           Wed 24 Mar 2021 14:33:48 +0000
ROA not after:            Tue 24 Mar 2026 14:33:48 +0000
asID:                     27
IP address blocks:        170.239.188.0/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873573 (0xd5465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fea161e2c66e493ae97ef08f4b440569dd42244
        Validity
            Not Before: Mar 24 14:33:48 2021 GMT
            Not After : Mar 24 14:33:48 2026 GMT
        Subject: CN=c7a7d4067511f6601d7c196d3a612970cadcd68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:7b:85:17:a4:54:65:f9:cd:10:d3:bc:aa:
                    f9:08:ba:6e:d4:24:ce:d8:57:55:70:cf:19:5c:8b:
                    28:60:7c:09:f3:98:e6:74:ca:47:ab:31:cb:61:79:
                    85:ad:65:af:c0:f4:06:12:85:f0:09:25:87:16:bb:
                    89:8a:fc:51:62:14:f4:48:09:4b:fd:89:1e:94:49:
                    1d:53:6b:d4:e6:55:f6:fd:bc:dc:a9:80:3b:0e:c9:
                    d5:63:23:91:93:0d:9a:b0:cd:3d:ed:49:71:cf:f8:
                    71:f0:a0:fb:01:65:e5:04:c7:37:a3:e6:70:2d:76:
                    f3:b9:8c:8a:90:be:7e:39:0f:c7:fe:50:83:56:70:
                    88:c5:06:94:f5:a7:ad:74:af:ca:2b:38:c4:0f:49:
                    1c:95:1b:38:f4:33:00:a1:2f:6a:28:91:a0:a8:8c:
                    00:bf:e3:e5:6f:a3:92:00:f9:91:21:87:72:49:7a:
                    1f:ca:22:f7:ac:36:47:53:d8:f3:81:7e:7e:bd:0c:
                    51:fb:25:cd:b0:a5:75:ba:c7:ed:37:ee:3f:08:1d:
                    ae:f2:6c:b6:cb:9e:41:9f:64:5e:42:4e:b7:ea:af:
                    d2:66:c0:a3:6e:1c:7c:bd:80:42:a4:76:5b:21:1c:
                    47:f0:0e:45:83:51:e0:59:a7:33:da:b0:a6:b1:e8:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:70:7F:13:4A:26:3C:2A:CD:FB:86:C5:4F:2E:C0:12:74:98:EB:2A
            X509v3 Authority Key Identifier:
                keyid:A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/c7a7d4067511f6601d7c196d3a612970cadcd68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/5fea161e2c66e493ae97ef08f4b440569dd42244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.188.0/27

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:6a:ff:91:82:20:ea:50:89:8c:be:9c:d5:05:b7:49:12:
         9a:49:09:45:5d:7e:05:45:23:7c:d5:66:7e:e4:f4:2a:06:4c:
         07:07:0a:40:77:83:da:3a:f8:34:98:f5:47:22:e0:a9:3c:bf:
         1e:3d:2f:28:29:79:67:88:80:d8:a4:e1:24:6c:52:48:b6:44:
         44:19:c0:a7:6b:0c:c4:6c:33:3e:19:55:37:57:eb:a6:a5:ae:
         90:cb:7a:9f:78:02:8b:b2:33:43:1a:0c:45:9a:c4:77:5b:9e:
         b5:ab:dc:3d:c7:cd:b3:e9:15:25:90:a5:8d:57:b7:89:b1:7c:
         2a:a0:35:c5:e3:83:ea:1c:95:a2:20:06:e3:3d:f0:54:c4:75:
         d9:b4:aa:88:5a:ec:ca:6d:1d:b3:38:42:24:40:ce:02:72:b1:
         22:8c:19:a7:04:c1:39:e9:05:d7:6a:20:5e:61:1a:e5:88:8b:
         06:d4:3a:1b:a8:5e:a1:6e:8e:79:27:7e:2a:76:a1:4b:62:93:
         13:94:4f:23:c9:4f:9e:28:1d:01:a0:1a:02:eb:f8:8a:68:a3:
         dd:a3:38:4d:5a:eb:e0:ae:f1:8d:af:92:25:1e:75:14:b0:aa:
         bf:cd:b0:92:48:05:16:90:93:01:a4:57:db:35:0c:8d:d8:66:
         a9:a8:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org