Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62cde75e83f6a2ca2f88aa1e3b257550601ef760.roa
File:                     62cde75e83f6a2ca2f88aa1e3b257550601ef760.roa (raw, json)
Hash identifier:          RAygvPV43RuiBANeD+xJpazv7L9duqgL1hcaoTIkNOU=
Subject key identifier:   E0:32:E5:66:53:B7:CD:C2:B6:7B:7A:46:F6:0F:D4:D0:15:91:A0:5A
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       105FBE
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62cde75e83f6a2ca2f88aa1e3b257550601ef760.roa
Signing time:             Wed 16 Jun 2021 22:39:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28000
IP address blocks:        170.247.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073086 (0x105fbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=62cde75e83f6a2ca2f88aa1e3b257550601ef760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:ff:d7:12:75:d4:45:23:ec:8f:c9:72:96:
                    a1:c9:f7:c5:46:a8:83:7e:bb:ec:8e:d9:87:44:6d:
                    c1:86:41:ef:ea:5b:c4:53:41:e2:10:0d:70:6d:df:
                    79:85:ef:3b:0f:30:d1:ff:e3:dd:8b:01:33:a3:d3:
                    82:12:38:c4:07:3b:56:53:76:5a:62:ad:ea:2b:84:
                    2a:52:27:c7:ac:35:fb:d3:85:fa:35:3d:86:f7:10:
                    a7:84:3a:35:d8:5c:99:64:31:13:dc:ea:f7:bb:e7:
                    25:5a:42:84:09:89:24:10:9b:15:d9:38:11:c4:15:
                    57:b0:d9:dc:3c:81:a4:85:36:97:10:a3:88:fa:88:
                    ee:78:46:4d:13:73:91:15:af:3d:f3:cd:fc:f9:a7:
                    cc:36:63:4b:e2:e4:d8:bb:c2:5e:c4:6f:20:1e:0a:
                    ed:ea:e6:e8:dc:19:71:7e:64:b0:96:f9:1b:84:4b:
                    fb:ca:cb:be:af:2a:3d:b1:e9:ea:2a:f0:f5:e9:43:
                    10:ed:1a:c1:ea:26:e7:81:2f:16:58:8a:c9:19:8e:
                    87:29:bd:c8:16:88:06:6b:65:6b:53:e5:2c:a6:f4:
                    94:a8:95:7c:23:1e:02:2f:7a:66:27:87:c3:d3:ab:
                    aa:57:1e:b4:1c:93:ac:8d:c7:e4:90:67:97:14:32:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:32:E5:66:53:B7:CD:C2:B6:7B:7A:46:F6:0F:D4:D0:15:91:A0:5A
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62cde75e83f6a2ca2f88aa1e3b257550601ef760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:5d:4f:52:e1:3c:8e:37:89:3f:e5:0d:a4:27:b4:b1:93:
         92:0e:60:27:1e:82:17:cf:38:a2:34:a4:59:a2:28:c8:be:77:
         64:0f:c0:12:62:d0:20:5b:ba:4a:70:69:22:7f:e3:a7:60:f0:
         b7:25:71:43:79:7d:99:e7:7f:e0:1b:35:f8:a3:eb:dd:44:0e:
         1a:d8:30:ec:51:4b:7b:57:25:d5:33:70:1f:cb:fb:fe:44:25:
         dc:d9:b8:be:20:68:6c:2a:30:ab:b0:24:29:dc:9b:1c:11:22:
         4b:e4:5d:9b:63:20:9a:be:ae:a1:39:7c:c4:1a:1a:03:32:a1:
         bc:c9:2f:a8:42:dd:34:28:7f:ff:d4:ed:9d:f3:fd:5a:bc:d2:
         b8:8f:7c:4e:44:7b:4f:1b:8f:0c:36:ff:dc:b8:a0:9e:87:e1:
         d8:1f:cb:23:a5:e4:cd:ee:e5:00:7a:92:a5:3c:6a:97:22:32:
         64:d5:50:e6:c2:d3:75:54:b0:df:18:70:58:59:4f:48:eb:3d:
         82:41:47:9d:7d:76:ca:94:de:5d:c6:37:a2:3b:0d:34:4f:3c:
         f7:e0:04:68:ea:28:d0:1a:68:1e:c1:2c:53:7f:f1:75:69:16:
         31:8b:3d:4b:62:14:36:c3:a8:59:bc:3f:d6:7d:3a:c0:23:04:
         e3:03:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org