Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62d7237fc5f98ee577d173ff9a4273923579e25c.roa
File:                     62d7237fc5f98ee577d173ff9a4273923579e25c.roa (raw, json)
Hash identifier:          aB7kEkRUGmST6SqsSxE0NHPDmEsZxpfU51mhKi2XYUU=
Subject key identifier:   AC:F4:4B:59:26:63:C0:9C:05:55:42:D6:4D:53:39:1E:86:CA:48:55
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A757D
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62d7237fc5f98ee577d173ff9a4273923579e25c.roa
Signing time:             Thu 18 Jan 2024 14:39:54 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     396982
IP address blocks:        170.247.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782589 (0x2a757d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=62d7237fc5f98ee577d173ff9a4273923579e25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:f1:3e:06:41:58:38:f0:9c:9a:48:77:49:
                    29:92:68:7d:1d:3b:37:9a:6a:ab:82:62:05:6d:76:
                    30:02:d7:09:77:f0:99:70:15:da:6b:46:14:ab:2d:
                    56:73:7f:3c:ad:8b:60:84:02:b4:96:ed:28:03:7c:
                    08:65:a2:4d:5a:51:d9:b3:3b:75:ad:58:65:30:02:
                    be:e9:bf:15:e4:3b:4d:a9:23:b7:d5:b9:0e:0d:af:
                    e8:91:d2:d1:78:a7:9c:2a:3e:5d:98:73:e3:c3:c5:
                    ea:27:fa:cc:d6:23:c0:40:25:6a:49:ab:0e:c5:ce:
                    b3:68:38:28:0d:ca:cb:74:bd:2c:96:26:c3:8b:e4:
                    9e:ef:a5:6f:7c:7f:fa:b9:dc:b9:81:94:ce:7b:dd:
                    4d:27:1f:25:1e:b1:e3:a6:1f:26:70:5b:01:de:c0:
                    06:53:7b:4e:b5:ec:2d:2a:cc:d6:1d:71:0a:cc:9d:
                    73:85:33:e6:02:a2:9f:96:14:9d:9a:63:15:fd:97:
                    10:cf:62:d1:61:86:56:d8:02:3d:1d:b3:57:fd:8c:
                    d5:99:31:b9:12:61:73:b6:75:50:c3:3f:69:25:a5:
                    fb:38:19:e1:cd:52:85:08:e5:4c:68:ea:65:88:b0:
                    c2:42:5d:ff:0d:65:18:f3:09:d4:5b:3f:77:31:f1:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:4B:59:26:63:C0:9C:05:55:42:D6:4D:53:39:1E:86:CA:48:55
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/62d7237fc5f98ee577d173ff9a4273923579e25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:9a:95:67:99:61:e7:8e:e7:d3:ac:c1:3a:14:f2:49:90:
         4c:38:0c:a0:87:c7:12:03:5f:74:78:22:40:db:be:49:3b:ce:
         1e:a0:1e:d2:ea:ee:73:ff:df:7d:11:f1:c4:96:32:4c:d8:7b:
         87:49:97:dc:8a:77:be:0b:e2:1f:65:95:30:7e:df:96:f8:62:
         7a:14:21:71:09:5e:bd:d0:25:73:0f:d3:51:78:36:c0:6f:dd:
         8b:a4:18:c7:8c:86:4d:4b:61:dd:60:57:f1:1c:0d:66:76:75:
         31:2a:a0:22:c1:9a:81:3e:4e:a5:cc:7b:f4:f8:38:cb:23:bc:
         49:e3:47:c8:55:68:09:06:34:aa:55:fd:73:61:8b:d7:a1:5c:
         c7:e6:cc:76:a6:d8:95:ca:00:cf:c5:a8:0e:31:6e:cf:af:c5:
         47:5c:33:61:d4:5b:64:f4:56:af:4a:8f:72:a9:74:7d:a6:eb:
         be:ec:b3:eb:e6:6c:98:b9:7d:47:c4:fa:35:d0:6a:02:dc:fd:
         07:b3:89:86:96:1f:7c:57:7a:d2:eb:df:00:05:29:02:cf:6b:
         bc:de:03:73:ca:dd:09:52:11:ef:b8:75:4f:99:0e:d6:70:03:
         d3:5b:04:02:bd:32:c2:d1:b0:17:30:98:93:c2:11:d3:ac:74:
         e1:9d:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 03:13:41 2024 by rpki-client on console-ams.rpki-client.org