Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/17a5b02f7b312665666dc95cc57901c11c3ba013.roa
File:                     17a5b02f7b312665666dc95cc57901c11c3ba013.roa (raw, json)
Hash identifier:          TMsNindTycTTcqGHPvGOsXFWw3PmdpbS9OGuqqWAim8=
Subject key identifier:   49:AD:25:66:4D:CA:22:6C:C2:C2:46:A9:E1:1D:32:46:15:1E:8A:06
Certificate issuer:       /CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
Certificate serial:       11C28A
Authority key identifier: 2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/17a5b02f7b312665666dc95cc57901c11c3ba013.roa
Signing time:             Fri 17 Sep 2021 16:26:13 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     271971
IP address blocks:        170.83.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163914 (0x11c28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=17a5b02f7b312665666dc95cc57901c11c3ba013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:e9:6a:5d:53:67:c2:89:bf:a0:a7:35:7e:
                    81:a5:28:43:30:3f:38:f9:ff:55:82:9f:1e:34:44:
                    71:f4:66:90:e1:99:11:b9:6f:fd:42:66:ef:27:dd:
                    72:be:b7:99:98:e7:33:65:92:81:11:b2:ad:6e:d2:
                    37:50:8f:b3:28:a7:1d:a0:37:d3:dd:0a:d4:43:72:
                    c7:ec:bb:25:b6:c5:5e:67:db:f7:60:01:23:97:cb:
                    01:99:4c:5c:b0:f4:86:c9:2d:cb:64:df:74:38:66:
                    6b:3f:bf:e2:7e:a5:3a:83:00:f9:6d:4e:90:84:88:
                    40:72:54:93:a3:2d:f3:e7:06:31:d0:d1:c3:05:1e:
                    84:d3:9f:e4:88:89:67:01:ad:5c:6a:73:93:eb:08:
                    6b:e4:50:5a:2a:d2:d3:af:50:af:0b:78:84:a4:51:
                    72:a8:12:cb:5d:9c:bd:f2:15:31:e9:d3:81:53:e2:
                    31:35:09:f4:1a:11:53:82:42:cc:4f:f5:b6:3c:19:
                    3b:a0:8b:09:53:7c:2e:68:49:ae:71:fe:46:f1:d9:
                    78:a7:2e:1c:2f:99:bb:bd:93:13:20:4a:ed:57:08:
                    d4:62:40:d5:67:42:3f:0d:5e:5f:70:b4:7d:5c:25:
                    61:0e:0b:6d:44:4e:39:54:97:38:2e:88:4f:4b:21:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AD:25:66:4D:CA:22:6C:C2:C2:46:A9:E1:1D:32:46:15:1E:8A:06
            X509v3 Authority Key Identifier:
                keyid:2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/17a5b02f7b312665666dc95cc57901c11c3ba013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/6d59ff2e00d62c0168d26ff5076e70835729c2de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:de:20:ff:3b:0e:e9:f8:23:6b:cd:a5:0a:75:36:c8:b6:
         6e:2b:06:c3:00:ec:36:8a:4e:6f:68:3b:de:6e:fb:25:18:58:
         1a:e2:6f:75:69:38:dd:6b:30:37:40:a1:1e:71:0b:02:ce:9f:
         94:57:3e:2e:38:36:a6:0d:92:b4:6c:c5:14:ce:fa:69:57:ba:
         9d:cd:b1:df:be:34:7b:5f:17:eb:2d:57:72:c0:54:81:f6:c8:
         74:18:5d:4f:51:17:fb:44:c8:dc:44:3e:ee:f1:91:57:33:af:
         b3:d7:30:fd:e6:cf:00:e4:e1:21:5e:61:32:30:b3:d4:d7:d4:
         90:b7:49:c3:e3:32:c1:19:5a:72:ce:71:31:33:79:e4:6f:02:
         fc:f8:9d:96:7b:27:23:da:e0:8d:03:a8:0d:81:54:e8:e5:d0:
         9a:ab:49:d2:8e:57:86:c5:08:b0:47:93:38:ed:f3:81:a3:c7:
         25:7a:e0:52:ee:40:29:d4:e7:a7:ce:9e:d6:8a:a6:e6:c7:3a:
         3d:85:93:86:95:04:d5:01:d0:81:72:9d:26:bc:cd:a1:cf:96:
         84:6c:59:10:33:15:3a:7f:6a:de:24:35:6d:34:1b:c0:aa:c4:
         bd:87:94:36:0f:d6:aa:e5:0a:05:2f:40:d2:df:ac:53:09:a1:
         38:df:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org