Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa
File:                     8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa (raw, json)
Hash identifier:          T1bxm6TS3049U9mkLVqBg1raOvAw9e5GB3Jcse3BxLk=
Subject key identifier:   3E:1F:DE:6A:C8:2A:68:C3:FA:C8:B7:77:B7:F8:63:1D:B8:F5:37:24
Certificate issuer:       /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial:       16B347
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa
Signing time:             Tue 26 Apr 2022 06:54:36 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Fri 26 Apr 2024 03:00:00 +0000
asID:                     27696
IP address blocks:        170.82.36.0/23 maxlen: 24
                          170.82.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487687 (0x16b347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2024 GMT
        Subject: CN=8da71b181aaf9ab85d57c184d9019e15fbb16b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:71:38:bb:d6:5a:78:2c:bc:a0:3e:82:a5:
                    93:69:e7:63:6c:39:3d:56:4a:73:bc:68:ad:e4:96:
                    d1:d7:fa:79:44:f2:c5:74:68:60:bb:01:f4:29:27:
                    00:9d:2f:de:24:18:81:6d:65:ba:4b:e9:88:46:da:
                    b1:c0:c7:3f:95:a6:2c:d5:bd:c6:31:82:2c:fc:43:
                    35:dd:6d:68:21:38:e7:5a:b0:60:4a:a5:a7:ff:80:
                    8e:c1:fc:88:54:d0:25:bb:d3:ad:01:67:18:47:97:
                    e2:ff:83:58:00:6a:2a:71:8d:3a:92:af:75:26:d5:
                    a0:b0:56:06:53:4e:43:b8:12:77:83:5a:7e:eb:84:
                    d8:1d:0c:77:29:8b:93:38:d0:ef:2b:5a:dc:95:94:
                    d2:1c:70:9f:d9:43:ea:86:ba:23:35:88:4a:da:34:
                    2d:58:17:2d:c2:93:59:90:f9:7d:49:00:8b:75:59:
                    82:42:cb:15:e4:08:1b:b0:42:ea:33:90:50:e9:58:
                    b4:c8:fa:55:b2:5f:65:59:7b:73:0f:a8:4c:83:28:
                    cb:ab:1b:4e:48:7a:f3:ea:a7:15:d7:41:4d:57:6d:
                    66:10:af:df:ca:c5:57:f1:f3:09:40:cb:8e:52:a6:
                    41:89:06:56:99:f6:db:85:b9:84:47:70:1b:97:ba:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1F:DE:6A:C8:2A:68:C3:FA:C8:B7:77:B7:F8:63:1D:B8:F5:37:24
            X509v3 Authority Key Identifier:
                keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.36.0-170.82.38.255

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:76:8b:fa:3d:1a:7a:a0:e2:d6:df:d1:92:0e:66:df:7d:
         f6:96:ba:7d:f0:ca:a6:cd:7b:8b:58:b0:6c:d8:0e:d1:ab:4a:
         eb:66:6d:54:94:c7:75:65:9c:70:29:32:a4:8e:e1:a6:ba:d0:
         20:e1:01:ec:cb:6d:2d:8e:2d:00:1b:4a:35:8b:4b:2e:1f:25:
         2e:44:ba:bb:90:2b:e4:e4:b9:42:a0:65:82:82:d6:43:e9:db:
         a4:bb:aa:e1:e1:3c:47:74:38:d9:27:e7:35:de:e1:60:02:81:
         dd:1c:ff:63:de:2b:6b:b8:cd:7d:f8:a0:69:8f:ef:41:16:d7:
         55:c5:c0:7d:ba:ea:54:73:b4:94:e9:05:60:90:c6:b7:e9:3e:
         08:01:e6:d6:9c:13:53:d7:5b:bc:e6:c5:da:b7:8f:c9:d7:62:
         56:b0:7e:dc:bb:c0:62:4a:8c:96:9a:de:3f:9c:14:d3:9f:5b:
         fe:be:0d:84:e8:6e:df:c9:61:9c:a7:0a:54:5b:1f:63:3f:5b:
         99:ab:5d:27:09:de:9e:13:f2:30:50:6d:a4:05:e3:77:9e:5b:
         0b:96:13:7f:d9:5a:30:de:0d:c5:54:f4:5d:09:12:cf:a6:a8:
         39:3a:ce:3a:09:9b:76:ce:c0:3e:ad:fb:22:2f:94:cc:0d:4a:
         e7:68:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org