Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/8e450793b2c3b307487c56ad42fc9f82477a720e.roa
File:                     8e450793b2c3b307487c56ad42fc9f82477a720e.roa (raw, json)
Hash identifier:          x0bk8+a54R6AQ3WpHEiNEjCAElQ6E6pzZzJuVHNl/6g=
Subject key identifier:   C6:2B:64:7A:5F:89:A7:8E:8B:FF:6F:F1:CC:8C:BF:54:DE:9D:C9:5B
Certificate issuer:       /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial:       158DFD
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/8e450793b2c3b307487c56ad42fc9f82477a720e.roa
Signing time:             Wed 05 Apr 2023 21:54:10 +0000
ROA not before:           Tue 04 Apr 2023 21:53:31 +0000
ROA not after:            Sat 05 Apr 2025 21:53:31 +0000
asID:                     265639
IP address blocks:        170.246.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412605 (0x158dfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
        Validity
            Not Before: Apr  4 21:53:31 2023 GMT
            Not After : Apr  5 21:53:31 2025 GMT
        Subject: CN=8e450793b2c3b307487c56ad42fc9f82477a720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:b8:3a:3b:dd:b9:64:b3:8d:1a:b8:c9:78:
                    27:df:f0:61:14:f0:71:4f:01:bf:d7:93:89:ae:49:
                    55:71:61:4d:37:b3:93:c0:64:02:c9:35:c8:d8:8e:
                    15:2f:e8:23:66:ac:fc:57:f4:c1:71:73:2c:e2:bb:
                    db:73:67:81:b3:4d:40:08:47:29:f1:bb:ff:3c:a2:
                    b9:6b:13:c7:06:b2:ef:b0:09:1b:f9:cc:e1:93:85:
                    b4:b6:14:fb:e1:a2:8a:e3:4e:ba:61:f3:b6:99:4a:
                    63:78:b8:8d:36:f7:8a:c4:a6:bb:c0:50:e3:7b:8b:
                    76:6f:82:bd:59:91:f0:67:87:31:ce:de:70:c0:b6:
                    a3:2c:60:f5:68:b7:47:38:c8:9c:62:4d:a1:35:6a:
                    0e:9b:5b:75:88:f3:51:b1:4e:9a:09:01:90:8b:85:
                    11:c2:84:9b:9d:1a:09:11:7e:3b:15:0e:f0:8b:78:
                    1a:e3:f4:4d:ef:93:ad:39:dd:31:0b:3e:86:9c:ab:
                    06:5d:a0:34:09:12:02:83:10:1b:0b:d0:21:d2:68:
                    a9:73:3d:20:76:63:1f:82:07:9f:ec:0c:67:0d:7f:
                    22:b6:03:ee:ca:94:a9:e7:af:e0:ee:d7:ae:49:ec:
                    0f:48:a6:51:95:b1:95:36:bd:64:fa:1b:2f:72:5c:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:64:7A:5F:89:A7:8E:8B:FF:6F:F1:CC:8C:BF:54:DE:9D:C9:5B
            X509v3 Authority Key Identifier:
                keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/8e450793b2c3b307487c56ad42fc9f82477a720e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:cd:3e:d2:98:e9:da:d3:81:cc:c8:af:3d:8f:b2:1d:02:
         05:5a:77:30:e8:19:62:e6:78:fa:6f:6b:82:3b:85:1c:e7:a4:
         65:8b:ba:1e:49:16:78:f3:62:28:2b:2f:84:50:fa:81:85:b4:
         62:22:c1:9b:4e:ff:a5:a1:38:ad:1a:10:d4:ad:ee:95:94:3e:
         50:a6:15:a2:f1:c4:3e:c2:74:92:f8:57:1b:5d:64:a4:d1:da:
         c5:c1:d1:75:86:af:5a:c1:07:00:30:d5:f3:b4:cc:38:f4:8d:
         a3:64:af:4d:c2:a2:e8:f8:1e:15:dd:3e:28:f7:c2:44:c2:e9:
         9c:bc:90:de:e9:67:80:18:b5:fc:ee:10:1f:57:16:f7:8f:e8:
         4e:4e:93:50:be:bf:3e:83:0f:95:77:87:d0:c9:54:bf:f8:f3:
         67:4b:31:b8:45:3b:7e:59:af:17:e5:e4:80:2f:4d:25:33:6a:
         81:6b:35:77:1a:28:14:1e:3d:c9:09:6c:c7:ab:9d:17:27:9a:
         18:e1:66:55:0d:ff:62:38:56:b5:db:63:5a:ab:e3:6b:56:08:
         72:85:93:3a:25:72:70:3a:79:87:a8:11:01:ed:93:fe:96:69:
         90:6d:77:6f:21:a9:5a:08:e7:93:e3:ce:99:1e:99:86:bd:ef:
         f8:60:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org