Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/b7074ca6e4b52300544abc4ab7f4b45753c3a670.roa
File:                     b7074ca6e4b52300544abc4ab7f4b45753c3a670.roa (raw, json)
Hash identifier:          yNuH3/LnO4USq4Oow7KWws/uxjxB2ywLGSQYt0Wo2DI=
Subject key identifier:   3F:67:FB:69:3C:41:1E:98:7C:CB:3D:5A:B2:ED:96:71:65:9C:82:27
Certificate issuer:       /CN=5dcb01bde4e84f9294668f40efb6ad53fedf909a
Certificate serial:       0563
Authority key identifier: 63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/b7074ca6e4b52300544abc4ab7f4b45753c3a670.roa
Signing time:             Thu 23 Mar 2023 18:44:01 +0000
ROA not before:           Wed 22 Mar 2023 18:41:22 +0000
ROA not after:            Sun 23 Mar 2025 18:41:22 +0000
asID:                     265636
IP address blocks:        170.245.240.0/22 maxlen: 24
                          190.2.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcb01bde4e84f9294668f40efb6ad53fedf909a
        Validity
            Not Before: Mar 22 18:41:22 2023 GMT
            Not After : Mar 23 18:41:22 2025 GMT
        Subject: CN=b7074ca6e4b52300544abc4ab7f4b45753c3a670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:36:75:44:19:19:69:65:26:4a:71:8d:6a:
                    ee:66:d1:e0:99:55:3e:d4:9a:d4:55:84:33:40:c5:
                    f0:fd:f8:03:5e:92:04:c8:da:86:27:28:8f:02:f6:
                    da:6c:0b:ca:ba:8b:f6:19:f4:8b:75:a0:6d:04:97:
                    03:2d:d5:85:fd:42:3c:11:6d:c9:48:7a:52:7f:b0:
                    57:ed:d1:d3:55:c4:79:1b:05:f1:55:13:69:5a:fd:
                    df:94:f0:7b:66:8d:71:9e:2e:03:d0:34:dc:e5:b4:
                    2e:03:76:ff:c9:ac:19:31:19:ea:31:8a:c3:ae:4e:
                    e1:58:6b:d9:b5:ed:41:bd:bc:a2:e8:f8:66:57:9c:
                    ca:a7:11:3d:7e:5d:30:38:ca:d2:ad:88:e2:54:a1:
                    8d:e2:a8:36:f0:e2:8d:b5:39:4f:81:40:55:0e:94:
                    4b:e9:61:67:ec:01:c8:f5:c1:55:7c:ae:53:0f:c8:
                    86:18:09:04:e4:92:ea:d4:1a:86:75:c7:a7:41:98:
                    a0:c3:42:29:c1:94:c0:0f:33:fb:10:32:fc:60:2d:
                    e8:b3:38:a5:fc:6f:79:21:23:31:44:e0:7d:2f:71:
                    dd:48:c4:41:12:52:36:54:e1:55:7e:1c:32:20:1a:
                    8d:8b:97:0c:6b:ab:35:11:9d:3c:04:99:da:87:e9:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:FB:69:3C:41:1E:98:7C:CB:3D:5A:B2:ED:96:71:65:9C:82:27
            X509v3 Authority Key Identifier:
                keyid:63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/b7074ca6e4b52300544abc4ab7f4b45753c3a670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/5dcb01bde4e84f9294668f40efb6ad53fedf909a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.240.0/22
                  190.2.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:9d:1b:e5:b1:a4:49:53:dc:df:48:d2:09:28:88:db:c4:
         37:4b:e9:09:35:b8:7e:00:77:ec:20:26:b2:55:e3:81:97:72:
         42:34:0a:72:31:94:0d:02:2e:fb:87:d2:37:d5:0c:92:9e:c6:
         e4:b0:80:13:90:55:2d:8b:7c:3a:e9:83:ed:9b:8c:9a:b5:a5:
         6a:1a:12:29:23:dc:42:03:67:f9:4e:f4:f4:1f:93:bf:56:de:
         73:8c:f9:a9:6c:e4:b4:c3:36:96:af:30:74:49:58:bc:95:dc:
         27:73:e8:d1:d0:d7:c0:95:a8:11:82:16:31:6f:9d:62:11:fa:
         71:b7:d2:e4:a5:b0:6d:cd:56:f9:8d:a9:32:19:73:88:4f:7d:
         12:d0:fa:98:42:34:c7:59:bc:32:99:24:c2:05:c4:77:af:3a:
         d7:cf:1a:92:fb:0d:c0:31:7d:36:bf:99:f7:46:09:46:80:47:
         cc:11:23:41:8b:80:35:58:5b:e7:0e:29:a0:f4:fc:aa:b5:8d:
         b4:a5:98:de:da:54:b8:b7:7d:aa:d2:c6:f1:ff:34:60:85:2f:
         c1:5a:9e:e3:b3:a4:5d:70:11:cb:89:3d:cb:ee:c7:f8:08:27:
         3d:ab:bf:f6:8a:20:44:e1:d6:3b:0b:1a:54:e7:6c:63:70:51:
         18:bb:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org