Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/27c8b8d56de39578f4785f2ddb638a0f9929cd38.roa
File:                     27c8b8d56de39578f4785f2ddb638a0f9929cd38.roa (raw, json)
Hash identifier:          mzvaoAKxvZXuyKqr+iGtiOuzDm4dRpul/YB3E5qTCsQ=
Subject key identifier:   A0:55:72:D2:60:B3:82:3C:A6:75:29:4F:C2:14:AE:62:F2:C3:ED:25
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       1C10EA
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/27c8b8d56de39578f4785f2ddb638a0f9929cd38.roa
Signing time:             Thu 10 Aug 2023 00:55:19 +0000
ROA not before:           Wed 09 Aug 2023 00:55:18 +0000
ROA not after:            Sun 10 Aug 2025 00:55:18 +0000
asID:                     264637
IP address blocks:        170.80.20.0/22 maxlen: 24
                          190.113.88.0/22 maxlen: 24
                          2803:5300::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839338 (0x1c10ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Aug  9 00:55:18 2023 GMT
            Not After : Aug 10 00:55:18 2025 GMT
        Subject: CN=27c8b8d56de39578f4785f2ddb638a0f9929cd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:e4:f3:6d:ec:18:30:b8:5c:e4:d9:a8:77:
                    ec:8d:a1:cd:02:5f:2e:df:01:20:3b:03:04:22:8b:
                    25:e3:e6:21:71:d4:97:33:3b:f1:61:83:69:02:e6:
                    66:f2:00:a9:d1:07:55:70:aa:4c:30:c0:72:03:80:
                    2d:d5:58:27:8b:2a:eb:a5:c1:0f:1d:3d:c2:34:64:
                    dc:14:fe:13:25:ba:8e:bf:1a:de:5a:c6:33:6f:9e:
                    39:26:80:89:68:74:e5:4d:01:7e:a4:6c:93:89:6d:
                    33:d7:91:b1:86:46:65:04:8c:89:9f:4d:69:6c:92:
                    29:2e:bb:03:24:ae:68:cd:c5:f8:b7:a2:f0:55:9b:
                    77:1f:5a:b6:6a:9f:73:93:88:1c:96:1a:ea:e2:b9:
                    26:9f:5e:a1:74:a0:d9:eb:28:3c:03:d0:3d:58:86:
                    02:f4:09:e3:82:e3:64:2a:5b:66:3e:70:ec:d5:6d:
                    d1:18:01:a2:45:c7:ea:90:ee:c4:3f:e1:6d:75:0f:
                    6b:4e:32:02:18:ff:51:ec:9a:68:52:c4:5e:1c:b8:
                    3c:46:44:48:20:63:25:3c:aa:e5:69:24:86:69:2c:
                    5b:aa:3f:3d:75:db:46:7b:06:de:dc:83:f1:2f:89:
                    25:9d:ad:d5:ad:50:db:b3:00:c6:d2:40:ea:32:82:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:55:72:D2:60:B3:82:3C:A6:75:29:4F:C2:14:AE:62:F2:C3:ED:25
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/27c8b8d56de39578f4785f2ddb638a0f9929cd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.20.0/22
                  190.113.88.0/22
                IPv6:
                  2803:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:61:05:ee:ea:ff:40:e6:2e:30:71:3d:94:0e:dd:cc:49:13:
         45:27:a0:a4:40:4a:24:84:bb:21:9c:61:d3:7d:f4:58:37:85:
         9e:ba:04:b5:d9:22:de:1c:70:b9:3f:eb:34:e8:19:3c:07:56:
         c4:eb:cd:42:50:94:68:90:03:7b:ea:be:b2:a8:6f:12:c8:50:
         ca:3d:bf:45:c8:3c:79:9f:36:38:1d:3f:f5:8c:3e:b1:be:47:
         95:fe:bf:6b:22:57:c5:c3:2b:7b:c9:e2:a4:3f:10:0f:0c:52:
         54:04:cc:4d:65:2b:a4:b3:2d:bd:0d:ac:64:d9:00:59:46:dc:
         f0:7e:de:a7:0f:b0:92:de:24:d8:bd:c1:ee:a7:d5:5a:26:04:
         48:2b:1a:d1:d3:28:00:dd:46:88:f0:54:40:85:09:76:9d:71:
         32:83:f9:e9:44:15:71:54:a7:f1:96:26:92:4f:0a:f6:cc:21:
         8c:72:f0:01:48:bb:da:71:8d:d1:8f:cd:89:53:a2:3b:0b:a4:
         bb:c7:a4:e4:42:01:fd:30:99:3c:b4:f4:43:c5:b4:33:1a:58:
         bc:56:ac:be:89:66:39:20:a8:23:8c:86:e4:27:da:2f:2b:fe:
         a1:0d:65:e7:58:b1:bd:cb:f7:a6:39:3f:5b:36:d1:39:f0:2d:
         54:87:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org