Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa
File:                     1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa (raw, json)
Hash identifier:          mVYuLjCVR8Ko/Gtm+U2R2NodFJIzIUSAD7/mvt21EI0=
Subject key identifier:   DB:7A:5C:0B:29:2A:96:EA:D9:2A:B1:FD:DE:5D:EC:BC:8A:35:7C:84
Certificate issuer:       /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial:       16AA99
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa
Signing time:             Tue 26 Apr 2022 06:27:07 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Fri 26 Apr 2024 03:00:00 +0000
asID:                     269960
IP address blocks:        170.82.36.0/23 maxlen: 24
                          170.82.38.0/24 maxlen: 24
                          170.82.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485465 (0x16aa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2024 GMT
        Subject: CN=1a902b2731767cc1cf61cb2c8b38da8442d1b0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:85:b8:b9:51:bf:69:8a:ac:51:3e:31:4b:
                    9a:2f:40:53:4a:d8:a8:8e:cd:2a:86:32:f6:72:0b:
                    29:42:bc:ca:70:92:5d:da:de:4e:b7:52:7f:7b:bf:
                    11:c2:6e:c9:41:cd:0c:d2:4b:8e:a6:ea:00:40:4b:
                    7b:44:91:17:cd:f0:88:93:4f:b4:ce:87:f0:25:87:
                    96:e1:6d:ab:b8:1f:1d:04:bd:38:d6:af:c4:19:4d:
                    8b:2e:70:04:b1:95:22:2c:77:e0:87:8d:d6:8c:c2:
                    ba:72:e7:7d:23:ff:5f:77:30:22:2d:34:f9:e3:90:
                    ba:91:2a:e4:b7:99:6a:8a:c4:6b:f8:07:73:06:67:
                    90:07:e0:41:9d:44:38:e1:c3:75:d8:ed:d3:20:a9:
                    4a:f6:cb:c2:3a:b0:c1:0c:e8:53:4a:51:f0:78:a4:
                    11:d3:74:f3:2f:b5:5d:68:39:6c:00:a8:48:1c:c8:
                    70:80:1e:62:fe:07:32:f7:29:ce:b6:20:9d:1f:d1:
                    4f:f6:db:b8:9f:1e:32:fd:9a:2f:41:c6:d9:1d:08:
                    49:f2:cf:60:df:2f:6d:6b:3b:b5:46:29:88:6f:7c:
                    5f:c6:c0:5b:a4:3e:16:19:27:d2:f4:e9:35:1b:1b:
                    20:9e:d6:9f:7b:76:7d:d6:95:ff:f3:36:fc:33:ca:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7A:5C:0B:29:2A:96:EA:D9:2A:B1:FD:DE:5D:EC:BC:8A:35:7C:84
            X509v3 Authority Key Identifier:
                keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.36.0-170.82.38.255

    Signature Algorithm: sha256WithRSAEncryption
         32:a6:a6:dc:f3:31:30:8d:f6:59:d9:7b:d1:07:b3:0f:5c:da:
         58:58:92:8b:d1:80:19:dc:c2:46:92:3a:fd:4d:2e:fe:ac:0c:
         bb:09:ff:56:e7:3e:7c:3e:f6:0c:f6:e4:3f:db:4e:f5:e7:1a:
         70:0b:5e:c8:86:17:85:8a:81:90:c7:24:d1:26:9c:77:eb:9d:
         80:fc:cc:f9:55:68:89:60:71:6c:83:44:86:d6:43:ff:7c:81:
         69:f0:e6:5f:8a:91:60:11:76:e2:43:db:b2:05:92:a4:a3:d6:
         e7:64:11:fa:09:eb:5e:fe:b1:37:4c:23:3d:5e:53:6b:a4:58:
         17:11:bf:cb:ee:44:aa:33:f8:94:e9:0b:f5:5b:9e:8c:f9:2d:
         cc:92:cd:f6:f3:72:52:69:bd:92:f9:86:04:17:3b:be:a4:39:
         4c:e9:f9:cb:75:17:40:c7:1f:4b:57:2e:c4:5f:7b:48:21:9f:
         cc:01:80:8a:56:5d:12:54:d6:c2:e0:cf:07:85:62:c3:d7:89:
         bf:dd:af:f3:1f:f2:b1:e0:47:18:98:55:97:ec:a0:a1:fb:01:
         0b:17:1b:ec:72:08:14:57:aa:b7:b9:06:8d:6e:60:97:d4:89:
         b5:94:d6:f5:77:70:fe:ff:20:19:d2:9f:33:1e:92:8e:f0:4c:
         85:76:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org