Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8c4c6741a0494a43fef45101193ffdf5ae75235f.roa
File:                     8c4c6741a0494a43fef45101193ffdf5ae75235f.roa (raw, json)
Hash identifier:          ZFjxKmC6DBvoRXsZyApZabEx9cYzMmXZtrqz0aJcva8=
Subject key identifier:   3D:9C:32:16:02:82:EC:27:61:24:5E:47:F5:7C:6A:09:89:9A:0C:AF
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       16C3F4
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8c4c6741a0494a43fef45101193ffdf5ae75235f.roa
Signing time:             Fri 03 Jun 2022 02:51:31 +0000
ROA not before:           Thu 02 Jun 2022 03:00:00 +0000
ROA not after:            Sun 02 Jun 2024 03:00:00 +0000
asID:                     271842
IP address blocks:        168.194.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491956 (0x16c3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Jun  2 03:00:00 2022 GMT
            Not After : Jun  2 03:00:00 2024 GMT
        Subject: CN=8c4c6741a0494a43fef45101193ffdf5ae75235f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:34:89:f8:7c:db:2d:ad:52:92:eb:03:eb:
                    6b:d8:88:bb:31:3a:a3:f6:1b:2c:1e:01:33:b6:a5:
                    7a:30:6c:f8:ae:e4:5c:8f:2a:36:1e:ac:64:ea:e5:
                    6a:f7:72:4d:75:45:ed:44:e7:1d:2c:70:16:3e:03:
                    09:c8:cd:f6:10:b3:02:b9:26:80:5a:94:de:af:b1:
                    97:5d:04:56:23:28:be:c6:7e:bc:0d:6a:32:d9:1e:
                    64:e1:23:8e:dd:dc:13:c2:86:e0:c9:1a:32:ac:42:
                    73:a3:81:be:3a:c5:79:3a:bd:df:8a:cd:9b:57:36:
                    31:8c:21:cf:96:b7:5d:ee:77:07:5f:8c:4a:6b:3a:
                    6b:c6:fa:6b:3a:90:a8:2e:69:36:ee:36:1f:17:44:
                    88:97:ba:7b:3a:fe:d4:28:d2:13:ba:3a:63:77:c7:
                    5b:f3:9d:5e:d4:41:25:0c:00:93:85:5a:58:82:fa:
                    a3:f7:07:2a:17:db:7c:bd:b9:61:9f:13:18:47:f6:
                    4d:93:8a:cb:ab:fa:f1:40:af:b8:d9:53:90:18:d0:
                    ca:13:a0:db:9d:6a:9e:cf:e0:45:f0:51:25:1f:8b:
                    d5:b2:ea:f2:b2:8a:73:e3:04:79:bf:10:a7:32:73:
                    e5:4a:4c:4c:83:01:a4:ea:90:73:1b:ef:b5:28:77:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:32:16:02:82:EC:27:61:24:5E:47:F5:7C:6A:09:89:9A:0C:AF
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/8c4c6741a0494a43fef45101193ffdf5ae75235f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:78:26:74:9f:20:e1:e5:58:ca:8a:1e:e7:d0:b6:ba:31:d5:
         2d:6a:0f:93:9b:43:f2:f9:be:03:58:46:f3:b8:91:5e:fd:75:
         dd:a5:02:07:b4:b1:eb:eb:52:23:90:33:a5:35:17:f4:64:4d:
         f7:39:96:26:42:bf:c0:0c:75:cd:33:eb:d4:42:4c:6f:6d:3c:
         25:94:a3:f6:10:a7:5b:1b:df:51:f6:94:cf:8e:dc:a1:9b:64:
         a9:ac:5f:1b:bb:0a:fc:35:2d:50:b9:63:99:71:2a:35:97:35:
         c5:f4:d5:14:68:d3:4d:c3:6b:ae:5f:c1:a2:c2:5d:c5:f1:72:
         b0:d7:b3:52:6e:40:c8:e7:f0:8f:2f:38:45:37:19:cb:b5:3f:
         1d:dc:81:11:d0:20:a1:3b:8b:59:7a:30:e5:4c:d9:9b:be:fa:
         a1:c0:17:07:d0:e5:1e:49:59:09:ce:97:0b:55:b0:0c:da:ea:
         8b:cb:c7:65:6d:a9:28:2d:cd:3e:88:9f:42:bc:cd:51:df:da:
         46:0d:ba:02:f9:4e:29:6a:71:a3:7c:bd:f2:cc:c4:dc:26:9c:
         76:1d:d3:22:6b:c2:17:9b:b2:43:85:c2:c4:3c:5e:85:7f:d1:
         7a:01:52:5f:06:8b:ee:32:3a:ce:4c:7e:6c:d7:2c:a5:ad:03:
         14:c1:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org