Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/9e32cffa36627253940efcc41640893337f6cec2.roa
File:                     9e32cffa36627253940efcc41640893337f6cec2.roa (raw, json)
Hash identifier:          8nRIGrlmRjKFpjtkmIH/j7Q6I6UdyPgbE9ZotwT4oEY=
Subject key identifier:   6C:78:76:0A:A7:F5:D5:13:B1:FE:55:38:1C:28:5B:F2:BC:52:9F:FD
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       0D9A1C
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/9e32cffa36627253940efcc41640893337f6cec2.roa
Signing time:             Thu 15 Apr 2021 15:21:52 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891420 (0xd9a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=9e32cffa36627253940efcc41640893337f6cec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:ef:93:42:a3:ce:c5:a8:0e:8c:67:fb:ff:
                    d1:1b:82:3a:ae:d7:01:b7:f9:89:51:20:2d:e3:e7:
                    84:47:43:f7:86:04:b6:08:8e:ba:10:69:87:b9:20:
                    6b:31:ce:d4:44:9b:aa:36:c0:ef:1a:2e:94:e9:49:
                    25:ef:59:13:84:cf:e6:95:f4:83:47:95:a9:1e:97:
                    c2:55:24:20:e1:d4:46:17:4f:d0:08:e7:57:e0:63:
                    7e:b6:5c:5b:f8:cd:76:d8:69:a6:22:5b:2b:48:58:
                    c1:f2:b2:bb:9f:08:de:6b:3b:72:d9:d3:70:04:81:
                    34:70:02:fe:c5:86:96:92:99:b4:42:6f:59:da:a6:
                    7d:8d:ab:2f:e6:59:bf:da:04:6d:88:61:19:42:fb:
                    b3:94:42:af:85:0c:33:a3:6b:de:a6:ad:65:33:ed:
                    d8:09:f7:c2:52:ad:76:d6:f7:ef:5b:60:2b:b5:ca:
                    4f:11:45:2c:f0:0f:cf:2a:f0:d0:4a:9c:89:8b:02:
                    d2:34:96:78:69:af:db:b9:28:d2:b9:54:cf:8b:ed:
                    23:b0:d3:a8:9b:14:20:d2:c5:89:6b:45:fe:a0:05:
                    c1:7c:97:64:51:d3:4b:4a:e4:b3:0e:36:3c:ed:95:
                    60:9b:5f:66:48:e3:4f:f8:8c:e8:f0:7a:18:6b:d3:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:76:0A:A7:F5:D5:13:B1:FE:55:38:1C:28:5B:F2:BC:52:9F:FD
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/9e32cffa36627253940efcc41640893337f6cec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:82:87:4b:21:5a:f0:84:5f:5c:88:8e:02:3c:3d:91:91:fd:
         56:3e:b0:47:cb:83:4b:19:0c:cf:2b:99:d9:1c:bd:96:35:85:
         58:93:f1:3a:4b:97:93:a1:f1:a2:ea:ee:76:86:27:ec:3e:a8:
         f2:05:df:39:54:80:89:b5:1d:62:a3:02:78:49:0a:f3:bc:1a:
         67:75:9e:3b:5c:d1:16:02:78:2d:54:38:2a:ea:50:a9:bd:82:
         75:d3:ca:89:59:e3:4a:df:6f:0f:fc:18:3e:5a:7e:5e:ed:a8:
         06:2e:f8:21:a4:58:9e:fa:2d:03:0c:db:54:66:3a:e8:dd:22:
         31:8d:0c:af:fa:ff:fe:30:4c:57:30:0b:c6:05:8d:7a:fc:ed:
         63:70:09:5f:15:ba:ed:d7:74:96:33:18:22:57:96:b1:c0:27:
         77:7e:d9:5f:be:c4:26:9c:74:72:a1:36:2e:76:85:3f:e2:77:
         d7:93:59:7c:91:c6:3d:ba:ae:d1:ae:f4:f4:61:4f:6b:0d:f9:
         99:af:65:29:0c:bb:57:12:53:fb:02:1f:78:3d:87:73:d2:12:
         88:e9:64:ef:af:01:86:fd:9f:d8:6e:42:2e:cc:bd:ac:51:5c:
         61:a4:25:1b:d6:db:ed:c9:08:4c:0f:29:75:e3:03:af:8c:9a:
         73:e3:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org