Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/7386f3f261f58cdf8f9ae05e227613744dba7d91.roa
File:                     7386f3f261f58cdf8f9ae05e227613744dba7d91.roa (raw, json)
Hash identifier:          M/WdC1thrhRkQ2YZriiDOWMXhvIpNwSaRWbvD7uCv6Y=
Subject key identifier:   B6:2F:7B:EC:35:2F:45:54:0C:1B:0D:32:36:67:98:50:33:3C:37:A1
Certificate issuer:       /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial:       0386A7
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/7386f3f261f58cdf8f9ae05e227613744dba7d91.roa
Signing time:             Mon 04 Oct 2021 20:28:45 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     264658
IP address blocks:        167.250.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231079 (0x386a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=7386f3f261f58cdf8f9ae05e227613744dba7d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:64:7d:47:65:0e:f6:eb:00:a1:21:f3:11:
                    b7:3f:2b:6b:03:c7:ca:2d:c1:fc:05:b8:aa:37:74:
                    19:98:b1:b2:b1:6e:60:f8:6f:50:fa:a1:7e:c3:d3:
                    77:3f:7f:e8:bd:96:38:dd:58:02:b0:35:cc:02:b8:
                    49:84:84:ea:c4:92:83:a4:ea:1d:fe:10:3c:02:0d:
                    0d:d3:3d:14:d4:73:af:47:72:08:17:7b:36:a7:60:
                    85:ce:48:bc:d3:8c:f9:24:03:7a:13:c1:c1:8a:46:
                    d4:bb:e5:44:bb:c6:96:e0:55:dc:ee:6b:9f:08:9a:
                    96:68:01:b2:34:fa:8d:0d:cc:01:8f:e9:e8:59:07:
                    b7:b1:81:92:71:74:33:9f:b7:6d:87:6f:e0:7b:2f:
                    59:52:d7:96:01:14:54:ca:3d:53:99:87:55:3c:3f:
                    c6:24:ac:0e:f2:70:73:e6:3d:96:f5:da:1c:21:e7:
                    39:0f:21:e5:a3:a8:51:6f:ff:e9:7a:dd:10:2d:6f:
                    75:e3:e2:17:7a:87:22:ef:ab:44:c8:fe:94:dc:31:
                    46:ce:03:52:9d:9f:51:74:61:e8:d6:c0:5c:2a:9b:
                    eb:f8:13:f7:58:46:4d:27:09:e8:04:7c:16:99:2b:
                    47:be:41:c7:36:1b:12:d7:ec:10:02:f1:5f:93:dd:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:7B:EC:35:2F:45:54:0C:1B:0D:32:36:67:98:50:33:3C:37:A1
            X509v3 Authority Key Identifier:
                keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/7386f3f261f58cdf8f9ae05e227613744dba7d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:82:1d:aa:f1:f6:be:40:15:ed:1b:71:1d:a9:ac:42:f7:f9:
         5b:ce:15:e1:2a:5b:5d:0b:bb:93:ae:9a:7e:62:30:87:5e:c1:
         bd:ed:d3:21:7d:ea:36:8c:77:19:32:dd:8e:f1:6c:da:da:7b:
         72:6c:a1:35:1d:15:0f:de:71:fb:c7:bd:d7:7a:74:e2:a7:5c:
         46:e5:d6:33:20:32:8a:5b:9d:22:1f:7d:ba:93:8c:48:6e:20:
         78:f0:c3:a0:d0:5c:25:0f:09:ce:10:3d:e7:8e:02:79:9f:29:
         97:ec:68:d1:58:9f:02:44:d3:f1:58:12:63:87:16:78:0c:d3:
         a0:93:91:7f:cc:fe:6e:c8:82:25:2b:4e:8c:01:87:1b:8c:78:
         ec:e0:62:07:be:91:5e:27:8b:db:a7:e0:af:77:e6:92:7e:1d:
         07:71:78:c5:0b:c7:6b:84:5b:05:74:00:6f:7e:e9:a0:6e:2b:
         93:87:93:a8:d5:f3:4d:3d:d4:2e:09:95:e2:84:b2:71:d5:f7:
         55:05:cd:64:49:1e:4b:7b:46:3c:d8:60:33:b4:95:37:be:14:
         70:b0:5d:59:b0:a0:3e:1d:3a:9a:e4:83:74:6a:b8:1a:82:51:
         7b:c4:c7:bf:51:54:35:d1:08:8f:e3:e8:18:e8:84:43:56:d4:
         86:56:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org