Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/7d5311565dfa4962caa2039193da28912fe16c22.roa
File:                     7d5311565dfa4962caa2039193da28912fe16c22.roa (raw, json)
Hash identifier:          LpWUvrvpNNaOTRPQao5trOCxfLNyHxTuDyzeWOFYxdA=
Subject key identifier:   A3:9A:69:49:EF:27:94:26:61:5B:B3:D9:02:84:3D:9C:FA:CF:CD:E8
Certificate issuer:       /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial:       15D495
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/7d5311565dfa4962caa2039193da28912fe16c22.roa
Signing time:             Fri 14 Apr 2023 13:57:45 +0000
ROA not before:           Thu 13 Apr 2023 13:57:26 +0000
ROA not after:            Mon 14 Apr 2025 13:57:26 +0000
asID:                     265639
IP address blocks:        170.246.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430677 (0x15d495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Validity
            Not Before: Apr 13 13:57:26 2023 GMT
            Not After : Apr 14 13:57:26 2025 GMT
        Subject: CN=7d5311565dfa4962caa2039193da28912fe16c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:cb:9e:a1:63:05:af:bd:55:4b:63:3b:9d:
                    d8:bd:07:72:be:58:27:69:dd:4c:bb:94:d7:2b:e2:
                    20:09:bc:20:4f:45:eb:22:3c:93:bf:5d:89:84:50:
                    6a:9d:7d:f5:d4:eb:0b:4f:bb:7c:4b:23:50:f2:f0:
                    cf:30:a2:f6:c4:7a:68:fc:15:9a:df:b5:f9:37:e1:
                    a5:77:a4:75:57:05:04:56:9e:ee:18:a9:29:29:23:
                    08:81:24:8c:1b:3a:b1:e0:7a:a8:b4:9a:62:83:a5:
                    34:f1:27:23:74:a3:87:90:86:3c:10:e5:c5:6e:41:
                    6b:65:c4:b4:71:43:7e:99:21:5a:e3:6f:f1:81:e2:
                    0f:24:d6:30:ee:60:c6:f2:29:34:2d:6d:e7:8b:aa:
                    a6:b8:c5:16:a5:47:00:58:79:cd:98:05:04:a7:7c:
                    f6:ee:e1:4d:c6:f7:ea:77:57:a0:35:eb:61:10:7b:
                    0d:2e:2a:93:c1:6b:66:27:9a:d5:a2:52:0f:6e:c8:
                    32:b2:e3:b6:96:01:2b:5f:eb:24:8b:5c:6e:c2:dc:
                    7b:4e:f9:62:77:45:10:c8:04:7f:da:52:0b:8c:b1:
                    c6:03:33:d1:79:15:3f:67:41:58:a1:46:eb:9d:2e:
                    df:5b:bc:92:b8:5b:76:ed:97:f5:2d:1a:33:ce:7e:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9A:69:49:EF:27:94:26:61:5B:B3:D9:02:84:3D:9C:FA:CF:CD:E8
            X509v3 Authority Key Identifier:
                keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/7d5311565dfa4962caa2039193da28912fe16c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:df:c7:d9:a3:5a:73:7f:b5:32:39:ba:3d:d2:68:1e:ca:8b:
         7c:97:d5:a7:67:0d:cb:eb:dc:02:91:cb:d2:ee:8e:73:a8:9a:
         ae:e2:7a:9b:9c:f0:6b:76:51:fd:b8:fc:ed:e3:f9:83:2f:f9:
         97:d7:ab:99:52:95:ea:91:66:c4:93:bd:8c:a7:8e:1c:7a:f0:
         98:81:38:98:9c:d8:bf:25:b9:f9:80:a1:af:5a:01:a0:25:f9:
         f5:1e:03:39:9b:ac:32:50:74:1f:24:2f:36:dc:58:2f:db:a1:
         cd:91:00:9c:e3:21:64:b7:e1:c8:a3:0e:21:67:f6:8a:b9:d2:
         6c:19:ec:2d:15:2e:e6:33:5d:eb:03:11:f2:7a:1b:4c:97:37:
         43:ee:17:98:c7:0e:c7:f3:1d:3b:e7:9d:53:32:cf:d8:8f:75:
         f5:af:98:ad:93:b9:a6:5e:1a:61:05:db:21:7a:50:1a:b5:d3:
         f8:f6:7b:38:45:51:dc:ce:89:b8:4d:e3:78:ad:ca:bf:ab:54:
         16:af:04:19:39:c5:ea:42:a3:fc:0f:38:d7:cd:35:18:48:02:
         8f:47:00:33:e5:8a:2c:ad:7e:88:62:2a:28:2a:7f:a5:d4:2d:
         90:40:ef:db:e8:53:7d:cf:a6:2d:6b:07:69:93:28:99:ce:4a:
         c8:5b:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org