Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/13ab44de36b873363a6bfb3e372954b8052167af.roa
File:                     13ab44de36b873363a6bfb3e372954b8052167af.roa (raw, json)
Hash identifier:          +BCA7xw31fqVqxrbMBHUSbIQhdHkRcW4lsfLjCt6if8=
Subject key identifier:   9B:61:87:D5:DF:95:F7:7F:A2:33:7B:A8:A5:DB:85:F1:11:1A:D6:56
Certificate issuer:       /CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
Certificate serial:       0D4BE2
Authority key identifier: C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/13ab44de36b873363a6bfb3e372954b8052167af.roa
Signing time:             Wed 24 Mar 2021 14:37:21 +0000
ROA not before:           Wed 24 Mar 2021 14:37:21 +0000
ROA not after:            Tue 24 Mar 2026 14:37:21 +0000
asID:                     264820
IP address blocks:        170.80.88.0/24 maxlen: 24
                          170.80.89.0/24 maxlen: 24
                          170.80.90.0/24 maxlen: 24
                          170.80.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871394 (0xd4be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
        Validity
            Not Before: Mar 24 14:37:21 2021 GMT
            Not After : Mar 24 14:37:21 2026 GMT
        Subject: CN=13ab44de36b873363a6bfb3e372954b8052167af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:90:62:d2:70:69:dd:00:dc:98:67:25:67:
                    ae:ad:91:24:09:92:4d:06:89:37:9a:9a:b4:d8:2c:
                    0f:8c:44:e8:a7:24:88:3d:d9:95:93:74:f5:87:77:
                    83:ea:d6:c4:40:e3:af:3b:cf:ea:7c:0a:d6:98:9d:
                    28:d3:94:6b:f8:7e:58:f2:6b:91:44:5c:eb:fa:91:
                    03:ac:30:ed:b4:d4:d3:ea:83:f8:14:ef:b7:7c:f3:
                    fd:10:e1:8b:a2:80:bc:2a:63:09:27:b6:3f:a5:52:
                    a5:1f:0f:a6:0a:df:b9:b9:24:fb:04:43:31:92:68:
                    1d:0d:6a:8c:6e:51:9f:de:e8:f4:ed:f3:a3:de:a5:
                    e3:29:79:b7:10:7c:cc:b6:5b:c2:0a:68:50:7d:ee:
                    6e:a8:4e:a0:96:d4:4c:98:81:0b:56:b9:04:6e:f7:
                    b6:8e:2d:44:00:2d:73:5c:19:d3:24:21:75:71:88:
                    46:73:01:43:b1:3b:9b:92:e8:a6:88:4d:b3:85:51:
                    72:a6:02:8b:5d:3d:55:fa:b9:b8:4f:a2:70:1f:7c:
                    e3:5e:b0:1e:0d:15:1b:8e:9d:67:b3:9b:5e:30:e4:
                    bd:f8:f2:05:5a:68:0a:68:8a:0c:41:51:96:c1:38:
                    14:6c:18:66:41:ad:9c:1f:ca:e6:a2:83:f5:4d:d2:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:61:87:D5:DF:95:F7:7F:A2:33:7B:A8:A5:DB:85:F1:11:1A:D6:56
            X509v3 Authority Key Identifier:
                keyid:C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/13ab44de36b873363a6bfb3e372954b8052167af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:e1:c6:df:b9:65:a9:a8:7d:9f:81:27:b3:68:55:f2:9a:
         f7:27:5c:93:2d:e4:c8:48:3d:c2:78:fd:36:8b:9b:d9:ba:59:
         0a:96:82:c8:de:56:97:f5:98:89:5e:30:a1:c7:14:7b:7c:53:
         7c:5f:67:a0:7a:6f:1b:63:bd:0d:45:03:c5:6e:e7:4f:13:27:
         f5:a1:8f:92:f3:97:4a:8b:f0:b4:42:04:7a:69:e2:6a:e6:dd:
         4f:50:c0:76:a8:62:ee:e9:a7:a2:f5:7a:66:1d:d6:f2:18:19:
         87:90:38:48:08:9c:ba:07:79:7a:6c:45:b8:a8:88:ac:8c:5e:
         bf:c7:97:40:89:d1:e0:59:8e:18:bd:d2:f2:b1:c6:05:9e:9d:
         6d:78:08:45:00:56:71:8c:68:c6:32:cb:a5:27:8a:03:92:a2:
         30:3a:9f:ac:b6:4d:19:9c:fd:9f:d5:b3:3a:d1:a2:7d:bd:79:
         8d:da:10:b1:0b:c8:72:1d:0e:c1:64:a3:da:ca:8a:92:d9:6f:
         40:e2:9b:60:da:df:6b:7c:ff:6f:da:bb:71:7e:5b:77:f4:2c:
         8c:f7:b4:c6:d8:f7:74:a3:15:7c:0b:84:14:bf:44:37:0c:7d:
         82:eb:04:23:00:92:8c:65:91:18:87:b4:b2:bd:7f:ff:3f:5a:
         17:d3:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org