Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/ea2004bf7781e19dbfc4be813d852a84110b92e5.roa
File:                     ea2004bf7781e19dbfc4be813d852a84110b92e5.roa (raw, json)
Hash identifier:          ZOthZiexLac1wOCDrEkzJBZs5nQRodfVeQwqDExR+6g=
Subject key identifier:   80:5C:28:EC:DE:2B:E0:3C:75:2A:5F:68:C4:21:AF:9A:E0:41:07:35
Certificate issuer:       /CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
Certificate serial:       23E4D2
Authority key identifier: 2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/ea2004bf7781e19dbfc4be813d852a84110b92e5.roa
Signing time:             Sat 16 Sep 2023 08:30:02 +0000
ROA not before:           Fri 15 Sep 2023 08:30:02 +0000
ROA not after:            Sun 14 Sep 2025 08:30:02 +0000
asID:                     271971
IP address blocks:        170.83.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352338 (0x23e4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d59ff2e00d62c0168d26ff5076e70835729c2de
        Validity
            Not Before: Sep 15 08:30:02 2023 GMT
            Not After : Sep 14 08:30:02 2025 GMT
        Subject: CN=ea2004bf7781e19dbfc4be813d852a84110b92e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:bd:9b:81:36:b4:91:46:5a:31:51:e7:9d:
                    0b:fa:fd:f8:76:4e:ee:40:f3:a0:e5:ea:3c:22:d2:
                    54:a4:02:a3:e4:0b:9d:7a:00:d0:d2:91:a2:ae:6e:
                    57:16:fc:63:7e:18:3a:eb:f3:10:d6:fa:b6:ef:d2:
                    85:90:07:90:f4:d4:e3:23:03:fd:d1:43:cf:7c:07:
                    2e:55:9a:e6:4f:f0:c4:b1:7f:f6:a1:4f:d1:0b:41:
                    76:1c:32:2b:fe:fa:ce:32:44:38:fb:d1:e9:cf:d6:
                    95:03:8a:21:23:f4:f4:48:88:56:08:39:83:f1:a5:
                    9f:7e:dd:1e:06:cd:2d:fb:12:1e:bf:91:a2:97:dd:
                    a0:89:43:85:0b:91:9e:f4:ac:61:b1:31:73:99:71:
                    2d:37:55:d6:0c:4c:7b:e7:72:eb:58:06:78:5e:d6:
                    c4:18:0f:81:37:82:61:8d:0b:fe:ca:fa:2e:f1:e2:
                    73:34:bb:c5:7b:b7:aa:27:f4:9d:bd:e2:8a:2b:ba:
                    20:61:e8:05:da:e5:25:50:04:96:52:9e:76:f6:1a:
                    67:2d:0e:cd:0c:89:96:99:ed:01:1d:cb:8c:23:bd:
                    e2:a4:ce:65:6a:dd:38:aa:5b:f1:4d:87:01:be:0b:
                    8b:e7:3f:6d:c9:9d:f4:87:a2:9b:d8:67:0f:5c:28:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:28:EC:DE:2B:E0:3C:75:2A:5F:68:C4:21:AF:9A:E0:41:07:35
            X509v3 Authority Key Identifier:
                keyid:2A:89:9D:7F:A8:C3:2A:28:50:10:DC:8C:BD:F9:4B:54:5A:4A:79:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d59ff2e00d62c0168d26ff5076e70835729c2de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/ea2004bf7781e19dbfc4be813d852a84110b92e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f9815a8-4eb6-49e0-8204-2db51a4896f6/6d59ff2e00d62c0168d26ff5076e70835729c2de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:f9:07:42:99:aa:66:5b:a9:8e:8e:c5:2b:bb:bb:11:3f:
         96:e2:dd:96:bd:42:9b:03:31:b8:7e:37:52:81:6f:9b:21:51:
         66:2c:a6:2b:44:2c:6d:ca:9b:6b:ac:50:e0:13:48:d9:ed:42:
         95:b0:e6:98:26:8f:2d:a9:91:44:53:d7:80:a8:e9:67:55:a9:
         31:04:24:79:1b:d5:aa:c1:2f:28:10:af:c3:9b:ce:61:c2:4b:
         cc:30:23:fa:f1:9c:ed:e0:c8:63:01:ac:bb:bc:b4:61:a0:58:
         34:8e:38:be:24:53:71:d8:38:dd:85:67:85:ef:39:69:31:f3:
         fd:14:30:13:38:76:3a:a0:dc:31:f6:16:ca:20:34:94:cf:7d:
         0a:42:78:42:b3:ed:a2:27:26:42:a3:af:18:d8:a4:c9:b9:36:
         0a:91:de:fd:62:b3:db:13:c1:a3:7c:0c:7b:6d:4c:6b:7d:3c:
         51:6a:7c:be:e1:62:80:05:2f:31:a0:57:56:33:e7:0b:0d:70:
         09:9b:7a:a5:10:ae:a9:9f:4b:06:f3:f0:8a:75:e6:67:5e:d5:
         fa:36:26:07:01:7f:3d:b3:4e:f7:d7:90:a3:a5:10:5a:cb:2b:
         07:14:d7:ef:9b:f7:c5:5a:11:05:03:c1:c3:9d:1b:ff:57:b2:
         ea:9d:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org