Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/10c5d793ab17eeea371e4944686e3d3809fbae87.roa
File:                     10c5d793ab17eeea371e4944686e3d3809fbae87.roa (raw, json)
Hash identifier:          UsH/WZ6oMXKBiR1YDvMUkLhBU2IC+mTirOnWXmABFu8=
Subject key identifier:   EB:C9:BE:6C:A9:1A:6E:54:6F:C0:1F:3F:31:48:BE:7E:25:5F:34:68
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       113DAF
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/10c5d793ab17eeea371e4944686e3d3809fbae87.roa
Signing time:             Thu 21 Oct 2021 15:11:20 +0000
ROA not before:           Thu 21 Oct 2021 03:00:00 +0000
ROA not after:            Tue 05 Apr 2022 03:00:00 +0000
asID:                     269862
IP address blocks:        168.194.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129903 (0x113daf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Oct 21 03:00:00 2021 GMT
            Not After : Apr  5 03:00:00 2022 GMT
        Subject: CN=10c5d793ab17eeea371e4944686e3d3809fbae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:33:84:53:15:14:c5:56:b0:40:62:5f:4c:
                    c0:b6:16:d5:2c:b7:a8:1d:26:a1:94:83:5e:b4:dc:
                    56:7e:a7:cd:73:c7:f9:ac:fe:d1:cf:95:40:82:87:
                    72:df:ef:3e:56:25:7e:3e:a4:1e:db:be:0b:f3:ca:
                    80:bc:87:ac:b4:17:14:6a:04:ed:7f:ef:95:41:3c:
                    44:b7:fd:69:d0:62:7c:36:cf:ab:bb:91:63:68:71:
                    6a:49:1d:e0:36:6d:4d:bd:71:4b:62:1d:db:19:b4:
                    34:20:5c:be:1a:45:75:d3:e4:b5:dd:c1:27:89:63:
                    34:be:b9:42:1d:4a:94:b6:57:a6:27:84:8c:bb:13:
                    ff:bc:66:ec:6e:a0:81:d6:00:7e:f4:02:78:7f:1f:
                    5c:ec:55:74:d4:b2:d2:66:7a:44:ec:de:51:57:27:
                    54:45:61:d7:cd:d7:c4:8c:e9:ea:c1:9b:73:3a:ed:
                    03:47:32:77:ac:dc:0b:42:e1:cb:52:be:f7:e2:c6:
                    d5:e0:91:7c:f6:63:05:3c:78:a1:1b:b1:f6:23:50:
                    c4:59:fa:b4:a9:e2:a7:a7:e7:23:5f:28:27:ea:97:
                    4d:be:c4:28:af:7f:47:74:f5:4d:4e:f2:7c:a1:2e:
                    c5:63:ab:9a:53:2f:69:40:9c:41:4e:57:23:be:c2:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:BE:6C:A9:1A:6E:54:6F:C0:1F:3F:31:48:BE:7E:25:5F:34:68
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/10c5d793ab17eeea371e4944686e3d3809fbae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:89:11:f5:0b:3e:83:86:22:c3:d9:e2:a7:30:08:00:ef:aa:
         d7:d3:46:6e:76:7b:82:e3:7c:38:cd:ed:15:c7:fd:b4:48:fc:
         14:ed:93:14:8b:98:85:4c:c2:36:72:2e:eb:11:72:e3:5f:e9:
         67:87:fa:49:4d:46:64:9f:ab:97:6b:ea:3f:4b:8d:6b:0d:77:
         a8:bf:b9:10:e5:56:54:17:dd:c1:8b:fc:d5:bc:64:f7:7d:41:
         66:48:72:87:44:9c:49:7a:4f:e2:02:90:29:ec:92:40:5c:c3:
         7a:f4:14:4e:92:1f:bf:8b:a6:a7:80:4b:7c:37:92:5f:b1:43:
         28:02:df:ca:70:0d:6c:bb:0e:6a:b2:70:f6:95:1f:78:4b:45:
         d6:d8:f9:cc:b2:be:12:7e:bf:77:92:cb:fc:02:a4:1a:b2:84:
         45:c0:a2:9e:52:2f:f1:62:04:9d:24:50:f8:8c:21:60:0d:be:
         34:7e:51:9a:a7:c1:22:37:51:62:0f:a6:70:ea:25:fc:fb:f3:
         ad:84:1a:c2:74:5f:e7:6f:9c:76:1d:05:99:38:c5:e3:46:cf:
         5b:e2:06:21:e5:a9:bd:1b:be:83:83:de:2b:90:39:53:7e:0d:
         c5:42:77:66:b3:32:a8:aa:64:d5:d2:7d:09:54:be:62:54:c1:
         c4:ed:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org