Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d0070a9-ea0b-43fc-8fc9-41742e1d4055/83f058daabf42d5cbc80e141426bb4022ba34bae.roa
File:                     83f058daabf42d5cbc80e141426bb4022ba34bae.roa (raw, json)
Hash identifier:          1LYMFzxoGe+PxIaqeBTz53wQ9yKqKi+OVlbIeBXD3lE=
Subject key identifier:   2E:72:D8:65:DB:DF:70:05:E2:25:4C:CD:81:FF:0D:DA:8F:47:EA:FF
Certificate issuer:       /CN=166503c4b629103333926fa087c512820b1996e1
Certificate serial:       0C1BE3
Authority key identifier: 06:94:A9:10:A7:8D:2E:A3:05:58:7E:5F:23:23:52:B4:9D:0F:3E:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/166503c4b629103333926fa087c512820b1996e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d0070a9-ea0b-43fc-8fc9-41742e1d4055/83f058daabf42d5cbc80e141426bb4022ba34bae.roa
Signing time:             Wed 24 Mar 2021 14:41:34 +0000
ROA not before:           Wed 24 Mar 2021 14:41:34 +0000
ROA not after:            Tue 24 Mar 2026 14:41:34 +0000
asID:                     263175
IP address blocks:        186.2.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793571 (0xc1be3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166503c4b629103333926fa087c512820b1996e1
        Validity
            Not Before: Mar 24 14:41:34 2021 GMT
            Not After : Mar 24 14:41:34 2026 GMT
        Subject: CN=83f058daabf42d5cbc80e141426bb4022ba34bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:5b:16:cd:91:d9:ce:48:38:e8:ea:bc:b6:
                    a3:ab:6f:e5:28:29:34:80:dd:1a:9d:e6:1b:f4:96:
                    02:7a:32:dd:97:a9:ab:c2:e7:2c:b0:65:da:fa:36:
                    b7:a7:46:ab:d4:d0:cb:a0:66:c7:5b:6e:f4:97:a5:
                    6b:5a:e3:d0:02:96:a2:a4:c8:db:d3:e8:75:d3:16:
                    8d:c2:e8:62:af:79:31:34:6f:32:1f:f7:29:c0:09:
                    97:ad:94:5c:32:6b:6f:d5:e8:20:cb:68:5c:c3:22:
                    95:b0:3d:39:4c:d0:11:fa:ec:7e:e7:27:64:91:e9:
                    d0:a1:09:47:b2:65:a1:a2:28:7c:3b:2f:67:ea:c1:
                    59:13:d5:47:6a:b1:e8:aa:ca:fc:9b:af:1e:a7:10:
                    5b:66:b2:a7:d0:00:4c:ac:54:9a:66:c9:e8:47:a0:
                    17:e1:04:34:9c:98:06:c4:d6:f4:5c:9f:9f:e5:9d:
                    d8:47:c0:c7:19:8c:05:eb:5d:09:2e:5c:31:fe:40:
                    74:75:8a:8c:e6:67:5f:17:a1:2e:a7:0a:a3:86:76:
                    17:99:7c:97:89:ff:14:77:4f:37:5a:e0:27:f9:9e:
                    ee:99:b2:f3:1a:a3:ed:2c:39:a9:33:da:7e:60:ba:
                    d8:ce:3e:c8:78:70:25:a8:d8:1b:98:5e:99:c3:91:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:72:D8:65:DB:DF:70:05:E2:25:4C:CD:81:FF:0D:DA:8F:47:EA:FF
            X509v3 Authority Key Identifier:
                keyid:06:94:A9:10:A7:8D:2E:A3:05:58:7E:5F:23:23:52:B4:9D:0F:3E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/166503c4b629103333926fa087c512820b1996e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d0070a9-ea0b-43fc-8fc9-41742e1d4055/83f058daabf42d5cbc80e141426bb4022ba34bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d0070a9-ea0b-43fc-8fc9-41742e1d4055/166503c4b629103333926fa087c512820b1996e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:51:a3:1b:99:0d:3a:59:e8:93:67:0e:15:21:dc:21:cf:4b:
         07:9f:7c:f1:14:b9:77:e1:d4:f5:02:0b:9b:50:4c:4c:93:a4:
         f3:3b:03:fb:5b:0a:b9:78:c5:fe:2d:4f:fa:54:28:e3:d2:f2:
         c7:cf:7f:db:8b:08:2f:cf:ff:36:73:2e:f4:7b:75:cc:75:6b:
         f8:f7:a9:cf:e2:34:b0:93:ef:f0:61:45:37:e1:81:70:fb:cf:
         f4:8d:d9:0d:91:1c:a2:28:f6:1b:a1:37:95:ad:36:55:e1:3d:
         c5:5f:29:c4:00:e7:3d:fa:aa:d7:f8:bc:24:53:98:f3:41:3b:
         f3:22:5f:f8:5b:df:d3:ab:03:40:f8:1e:96:13:a5:35:55:54:
         ec:1b:fd:14:6f:a6:a7:5d:4d:08:bb:79:49:e8:2b:45:23:34:
         27:1b:35:43:2c:3f:48:f7:80:db:18:40:1c:1c:26:07:8a:92:
         32:4c:38:38:ca:bc:1c:09:40:18:6c:e5:df:2f:49:6f:ee:27:
         7d:b9:ec:24:0c:de:6c:4c:e4:64:c5:99:bf:49:c7:e4:c4:6a:
         c4:93:24:a9:34:72:fa:ce:aa:d9:8c:71:56:06:83:58:06:2b:
         fc:42:7e:57:59:b0:13:14:bd:e8:c9:5b:ba:a3:87:69:4f:10:
         00:82:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org