Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa
File:                     7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa (raw, json)
Hash identifier:          9N2MI8NRXUC6dbjgTC+G6GpiSDBS97srwbUwA1n/0dg=
Subject key identifier:   6F:7C:0D:27:58:CC:7D:A6:09:78:5D:E3:B2:B3:32:7C:31:6F:4B:AC
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       21A411
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa
Signing time:             Thu 06 Apr 2023 12:02:07 +0000
ROA not before:           Wed 05 Apr 2023 12:02:06 +0000
ROA not after:            Sun 06 Apr 2025 12:02:06 +0000
asID:                     394353
IP address blocks:        170.247.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204689 (0x21a411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr  5 12:02:06 2023 GMT
            Not After : Apr  6 12:02:06 2025 GMT
        Subject: CN=7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:ad:27:9c:6b:a3:d2:b7:84:eb:6c:32:60:
                    45:4c:bb:f5:30:83:5a:9a:79:54:85:a4:b3:34:55:
                    36:5e:ac:7a:33:a3:d2:8f:06:52:ea:8c:55:b6:b3:
                    4a:0c:8f:73:54:33:c2:d8:24:6c:a6:cd:a3:1e:ba:
                    1e:b6:c3:17:fe:2e:d8:07:6b:4e:dc:84:d2:55:02:
                    6b:ce:90:79:01:32:9a:ce:af:73:3a:5f:dd:b8:6a:
                    98:fe:06:1f:20:c4:ee:d9:2b:4b:f7:57:04:7c:f9:
                    56:a9:f5:04:26:10:d6:ee:55:1a:f9:58:05:80:47:
                    93:d9:8a:fd:2e:66:43:5b:22:56:bd:51:0a:d2:24:
                    20:08:d2:5c:02:c3:5f:3c:79:53:50:13:fd:8b:e3:
                    38:7c:a1:8c:c7:c9:1d:00:13:1f:00:f9:90:c9:b5:
                    b9:60:7e:29:4d:a6:d7:0a:8c:85:13:40:47:dd:7e:
                    9d:32:f4:8c:70:80:ba:89:17:27:e6:5d:08:df:4c:
                    49:19:67:59:90:b9:08:fe:4a:e4:6e:e8:6c:72:4a:
                    f5:e8:1b:64:79:28:c7:9c:5f:43:ff:c2:ce:14:39:
                    91:e1:3a:41:2b:64:f2:3f:e7:16:88:fd:b8:0f:f1:
                    58:81:7d:af:99:e8:5e:a9:5c:1e:05:4e:4f:fd:95:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:0D:27:58:CC:7D:A6:09:78:5D:E3:B2:B3:32:7C:31:6F:4B:AC
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7ec8e3de73f6301278b57fb15ccebbe4bc1c8cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:ab:2e:5e:44:ed:4f:73:c0:62:c3:5a:14:29:83:74:c8:
         23:eb:ec:4c:3a:9c:c2:02:da:1d:1b:10:a8:93:25:83:60:1e:
         93:8f:27:dc:7c:ca:a7:77:92:c9:49:48:5f:49:e6:33:9e:41:
         44:ba:9f:c8:d5:62:d5:3b:dc:3e:da:d2:ab:48:13:3c:96:93:
         ca:f9:3f:22:c4:f4:6e:30:2e:2b:a4:d7:90:57:f8:9c:80:f7:
         11:74:0e:ce:94:dd:8a:49:29:5e:0e:d3:5e:a8:1b:80:64:79:
         12:f6:d1:16:52:c1:5d:a5:58:d8:3e:18:ef:20:8d:d7:a6:9e:
         91:e6:d2:99:14:ed:f5:49:a9:fc:1e:9d:d1:66:2a:39:87:27:
         99:70:84:1d:28:22:00:37:ac:21:1d:09:c3:23:18:bc:6d:14:
         75:ff:ea:1c:ec:2e:6e:0e:b8:29:a7:5a:ae:db:74:4a:d6:45:
         fe:d5:b1:ec:21:b9:a9:42:81:a0:ed:64:1b:41:24:70:97:eb:
         55:e0:ef:dd:4b:08:07:1e:e3:e1:0e:b1:06:6d:88:50:09:bd:
         ed:f4:87:88:9e:bc:ed:e2:68:59:63:1b:df:25:04:50:ee:67:
         44:34:92:df:0b:bb:11:9c:7e:1d:ae:58:5c:33:70:91:b9:c4:
         a1:92:5b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org