Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/f94187e08459437b0a94bc3d85604f0a5f0cd67a.roa
File:                     f94187e08459437b0a94bc3d85604f0a5f0cd67a.roa (raw, json)
Hash identifier:          A4ZxeSCa988KpybW8wEB2zlHo2aIAKvPUhedH0OPSVw=
Subject key identifier:   F2:F8:E3:97:D4:C2:F0:53:3B:2F:F6:85:CE:95:F1:BF:C7:13:3C:98
Certificate issuer:       /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial:       06D920
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/f94187e08459437b0a94bc3d85604f0a5f0cd67a.roa
Signing time:             Wed 24 Mar 2021 14:41:40 +0000
ROA not before:           Wed 24 Mar 2021 14:41:38 +0000
ROA not after:            Tue 24 Mar 2026 14:41:38 +0000
asID:                     264637
IP address blocks:        170.80.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448800 (0x6d920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
        Validity
            Not Before: Mar 24 14:41:38 2021 GMT
            Not After : Mar 24 14:41:38 2026 GMT
        Subject: CN=f94187e08459437b0a94bc3d85604f0a5f0cd67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:da:ac:5b:8c:7a:2d:f7:ba:fc:6e:d8:01:
                    2e:12:81:17:10:85:6b:92:44:9a:ae:c5:67:28:c4:
                    68:9f:ef:e7:73:88:bc:63:34:fd:eb:1e:bb:a1:14:
                    cc:79:82:f0:bd:ec:11:d5:ba:ad:29:6e:8f:18:b2:
                    21:7c:18:f4:3b:0c:99:eb:17:dc:bc:f8:c2:5a:50:
                    0a:18:77:44:66:c2:10:72:ef:b3:87:a3:23:b6:07:
                    ee:f3:04:89:0b:cf:41:df:93:f8:92:02:8a:8b:a9:
                    1c:0e:d5:79:7c:bb:2a:db:f5:21:0d:22:e5:8b:5e:
                    30:11:e2:9a:de:3d:b7:69:4b:a7:27:55:57:7a:ce:
                    3a:77:c7:3c:e4:ee:f7:da:57:73:9e:9b:41:58:7f:
                    8c:9e:bb:5c:ac:be:8d:22:75:18:2a:4f:3d:6d:19:
                    91:0b:1d:ed:9b:ff:76:c2:5c:5e:e6:74:fa:8f:59:
                    d0:0b:75:84:3e:c4:80:81:c9:03:28:2b:8e:03:6b:
                    e0:02:24:be:fa:4b:dd:dc:8f:bf:61:fe:86:dd:e9:
                    5c:d2:11:2d:3b:63:b4:0c:66:62:16:8a:c6:20:3f:
                    f0:3b:e0:b2:6a:72:30:7a:69:88:6c:75:23:09:5d:
                    49:9a:d4:4a:f4:31:cd:2c:9c:14:a7:7a:67:dd:41:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F8:E3:97:D4:C2:F0:53:3B:2F:F6:85:CE:95:F1:BF:C7:13:3C:98
            X509v3 Authority Key Identifier:
                keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/f94187e08459437b0a94bc3d85604f0a5f0cd67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:5d:73:64:53:f5:81:f9:dd:81:ca:f4:5e:4a:99:8b:0c:
         ef:17:a4:73:2d:2b:16:ff:e5:ed:5f:f8:72:57:89:07:27:a2:
         35:b7:03:ab:f1:2f:35:e1:13:63:90:f3:bf:35:e3:39:95:e4:
         79:e3:81:dc:5c:9e:5e:ef:e2:ff:9c:a9:c7:e6:04:2e:5f:ec:
         51:11:cd:39:64:7b:6c:02:88:8e:c8:51:12:ce:71:1f:15:07:
         d7:41:f9:f6:2c:09:d0:79:34:59:48:5d:1f:dc:45:3d:9c:97:
         ce:c2:8b:7a:14:66:f1:b5:62:74:13:67:bf:93:22:3f:5e:2e:
         bb:9d:5c:32:3c:48:65:4e:7e:91:9e:30:a3:5c:4e:15:1d:f2:
         f6:e9:c3:3b:b6:d9:9b:48:f9:db:af:2f:f3:fd:1f:42:5a:bc:
         9f:c1:5b:6f:13:9b:5d:4d:ac:dd:9f:06:1a:7a:68:03:c8:41:
         51:de:2a:9c:95:21:54:20:f1:cf:40:63:9d:86:37:fe:ee:0f:
         39:6c:67:ee:11:90:01:20:fb:c7:15:14:84:e2:35:49:4c:0c:
         b5:e1:c2:02:d7:fc:ea:c1:f9:11:d2:64:fb:97:23:ea:ec:e1:
         25:d7:f1:c9:5c:d8:76:7d:a8:a2:15:60:f8:84:77:26:61:d0:
         ad:b6:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org