Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/ea2318449781978a986f94d3f26ecf36df83742c.roa
File:                     ea2318449781978a986f94d3f26ecf36df83742c.roa (raw, json)
Hash identifier:          8V1Xd8EsyM8QX1xFUxU2jvZy6hK4A1EO4NhiITcFbQA=
Subject key identifier:   C6:0A:8B:BC:82:B6:7F:89:61:DA:19:CA:7A:69:D1:D9:4A:58:0F:3C
Certificate issuer:       /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial:       0D57DD
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/ea2318449781978a986f94d3f26ecf36df83742c.roa
Signing time:             Wed 24 Mar 2021 14:34:08 +0000
ROA not before:           Wed 24 Mar 2021 14:34:07 +0000
ROA not after:            Tue 24 Mar 2026 14:34:07 +0000
asID:                     27901
IP address blocks:        170.82.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874461 (0xd57dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Validity
            Not Before: Mar 24 14:34:07 2021 GMT
            Not After : Mar 24 14:34:07 2026 GMT
        Subject: CN=ea2318449781978a986f94d3f26ecf36df83742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:33:c8:9e:f2:a5:69:8c:1d:c9:3a:ff:28:
                    6f:47:a6:c9:35:b6:23:f1:1f:26:6d:c2:83:90:0c:
                    82:77:ea:5c:f6:6d:ae:86:4a:0f:ce:cd:83:88:9f:
                    9a:29:cc:b4:c5:cd:81:ce:61:87:1a:21:b4:3f:79:
                    db:a4:e7:54:22:db:e8:ec:16:a7:61:a3:3e:08:3b:
                    79:2f:ce:2e:68:57:8e:1a:eb:77:45:1a:47:6b:af:
                    41:f7:be:f7:39:01:1b:7f:b0:ed:82:a5:03:ff:e5:
                    67:0f:ec:72:bf:46:e4:08:d2:99:58:35:2b:f7:57:
                    eb:9d:8a:c8:4e:d9:4d:4a:bd:1f:fb:b9:d8:94:81:
                    2e:86:99:a3:b1:ba:6b:93:89:2f:af:d5:7f:60:5b:
                    6a:2d:59:79:0c:04:84:d7:fd:e2:ca:4e:6c:59:8f:
                    1d:e3:bc:44:4a:bb:2d:12:97:5f:f1:eb:2b:f8:a6:
                    2a:24:71:99:42:be:34:e8:db:a2:5d:b5:82:cf:59:
                    e2:17:44:ff:b9:a8:fb:b9:28:53:de:02:3e:e4:d4:
                    22:56:e7:2c:e5:90:ea:78:93:5e:e8:5a:fc:2c:a5:
                    24:75:22:f7:79:3c:02:a8:1b:c6:e7:5b:f6:fb:91:
                    45:37:69:c4:0e:97:89:63:cf:c6:bf:9b:61:92:63:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:8B:BC:82:B6:7F:89:61:DA:19:CA:7A:69:D1:D9:4A:58:0F:3C
            X509v3 Authority Key Identifier:
                keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/ea2318449781978a986f94d3f26ecf36df83742c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:2e:d0:23:57:66:41:ae:a8:61:6d:d1:1b:4d:80:cb:6e:e7:
         75:a9:af:fb:3b:48:8a:de:94:f1:84:2c:99:47:3e:c1:ec:ca:
         ed:07:34:cb:f4:38:9f:86:01:b3:b5:5c:a6:99:0c:e5:bb:94:
         5d:33:d9:38:6d:73:50:af:6b:80:29:4e:8d:77:1b:8c:4c:73:
         9d:99:cd:0a:c2:6e:d9:23:60:9c:76:ed:43:ad:20:51:7e:32:
         9c:4d:a4:85:ce:04:c8:a8:23:9b:33:ca:4e:fa:b9:28:82:00:
         f3:4c:77:0e:7e:b5:1d:ac:81:a6:51:28:7e:a1:f0:68:1b:0a:
         38:97:d1:2e:f4:a7:9a:05:88:f4:95:e9:5d:36:93:60:48:81:
         a5:8a:a1:70:a5:03:6b:ec:16:03:98:09:52:49:0f:82:dd:79:
         aa:df:d9:e7:c7:c0:b0:f5:6e:ea:22:97:2b:b4:8f:54:75:bb:
         b6:d2:be:7c:84:13:84:da:72:47:db:17:fd:f0:58:02:14:42:
         dd:0e:a1:10:30:1e:dc:c1:90:b5:50:99:d8:8b:fd:f9:74:6e:
         de:e9:4f:9b:81:4e:d4:8e:2a:bb:0d:14:eb:67:1b:92:e6:b3:
         62:16:75:e2:69:d5:8d:0f:5c:b4:64:1d:9b:b8:99:8b:6c:64:
         7a:9f:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org